Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9864763e-6e44-3e95-9449-918b4fe2bb9f.roa
File:                     9864763e-6e44-3e95-9449-918b4fe2bb9f.roa (raw, json)
Hash identifier:          thTs7Cs73+sFDR3atGK1gQPAEdTi70OBLS9Lh6K3WbA=
Subject key identifier:   7D:07:D8:5B:77:69:04:B6:3C:FF:4A:25:7D:E6:84:72:8B:08:EB:3E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D20CA6CDCFC21D62A6F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9864763e-6e44-3e95-9449-918b4fe2bb9f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        68.207.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:20:ca:6c:dc:fc:21:d6:2a:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=828cfc04-d512-4cda-8aec-7e5da5f70afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:08:fd:fa:e7:23:8d:7b:57:37:69:5a:4e:
                    35:a6:65:fb:50:46:c6:e4:e8:d2:68:bc:89:e5:5d:
                    af:e8:06:e3:49:ee:47:61:89:ce:8e:4a:64:80:6c:
                    0c:4f:71:4b:89:8d:c8:d1:01:9a:6e:6b:67:d4:35:
                    51:b5:61:16:86:ff:ab:eb:af:14:be:a8:e5:08:91:
                    59:10:43:ad:80:e9:ed:4f:f5:6c:a2:18:11:ba:66:
                    0d:35:41:2a:6d:ee:75:c0:0c:af:a8:84:07:7a:1b:
                    35:93:79:79:57:ed:2d:94:24:09:95:80:60:b9:e1:
                    d5:90:38:84:46:12:1f:95:fd:d6:c3:43:5a:07:bf:
                    70:97:16:d6:fb:0b:99:fe:b1:bc:53:31:74:91:04:
                    3a:a8:37:04:6f:29:df:f7:57:6a:3f:39:92:d7:3d:
                    f1:fe:82:52:a4:1a:2b:73:6f:0c:08:cd:95:58:21:
                    af:b2:0c:9c:46:f3:e7:9b:1d:9e:f7:f4:b4:63:c8:
                    8c:a2:e9:48:d4:ef:fe:fe:f6:fa:f5:1f:86:10:cc:
                    0e:86:c1:5b:f9:48:b5:ea:54:67:9b:fb:f5:5c:9c:
                    92:4a:3b:79:22:dc:2f:9a:6f:19:c0:36:5c:71:e7:
                    8c:97:ec:39:69:f8:75:98:76:84:10:99:a2:be:62:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:07:D8:5B:77:69:04:B6:3C:FF:4A:25:7D:E6:84:72:8B:08:EB:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9864763e-6e44-3e95-9449-918b4fe2bb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.207.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:73:bd:e1:36:1e:71:34:48:15:29:8f:57:f4:f9:c8:67:7f:
         b9:e0:86:a3:6c:e4:8b:32:6c:4f:d1:1e:47:83:dc:95:d7:c4:
         55:42:bc:c9:9b:78:11:19:f0:58:5c:d5:5a:57:bf:cb:29:da:
         25:b3:ba:40:be:71:b2:f6:8e:8d:a4:09:f1:0f:0c:a9:5c:39:
         cd:ad:32:55:23:b3:96:80:13:35:24:3f:73:ca:e4:ec:4c:d4:
         7e:b5:f8:d4:c2:66:fa:12:44:42:16:df:86:88:dc:c8:bb:c2:
         5c:c3:74:61:44:d4:70:2f:fd:7c:60:0d:09:a9:03:8e:15:59:
         64:db:34:ab:74:23:a3:07:2c:3f:88:66:3c:9a:45:5a:12:a3:
         68:18:a2:d0:b3:90:c2:91:dc:24:f0:ea:7d:17:aa:c3:31:32:
         12:7a:8e:69:fa:9c:e8:51:82:e9:5c:4c:b6:9d:e4:29:d6:d6:
         ae:4f:e1:48:15:58:59:54:dd:dc:89:4b:12:d6:64:97:52:b6:
         7b:5f:6f:ec:3c:8a:ab:4f:fe:fe:c9:7d:70:d5:70:a9:4b:46:
         de:9c:18:d2:93:ad:c5:fd:81:d0:6f:f4:0a:36:21:ad:4a:36:
         d7:58:e2:aa:b1:35:d2:93:7f:57:a4:22:e7:24:c2:01:f1:74:
         0a:c8:bc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:38 2025 by rpki-client