Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9948a9a5-32da-3d30-901a-b304b4c12f72.roa
File:                     9948a9a5-32da-3d30-901a-b304b4c12f72.roa (raw, json)
Hash identifier:          b+rH+LeYPBkjs8Q86k+sfYmM9Qq8iZKZOZEU8Hn/Hek=
Subject key identifier:   BB:04:A0:93:3C:75:F5:67:B1:51:05:40:51:58:F0:F4:15:73:43:AD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D95BB7024FFC8788EB800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9948a9a5-32da-3d30-901a-b304b4c12f72.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        65.185.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:95:bb:70:24:ff:c8:78:8e:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=52e096ee-5a99-4bc1-8038-020b5c9b8ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:41:6e:0b:14:64:19:89:f8:ed:09:bb:6c:66:
                    9c:2c:1f:f2:39:e8:4f:6e:16:78:26:34:4d:dd:f1:
                    e3:4c:f4:75:f5:c7:52:b1:3a:83:34:a6:54:65:2a:
                    b7:fb:dd:4f:f9:b9:5a:23:38:9e:7c:cd:49:e8:9c:
                    4d:4e:32:33:a0:3e:5b:32:bd:5e:97:5b:59:57:a8:
                    1e:05:f3:d9:d0:44:31:d3:f9:25:20:30:96:e0:47:
                    2d:f1:12:e4:fe:e3:95:c8:48:aa:92:0d:46:7a:9d:
                    24:df:66:bf:8c:dc:ad:57:1b:d1:b9:c5:0b:df:06:
                    a0:99:e0:d6:eb:96:15:5f:c7:7a:b4:48:df:ca:ed:
                    23:37:68:d3:bd:5a:1f:85:bf:94:0f:ea:73:97:2f:
                    91:a0:1c:7a:44:5b:cf:93:8d:6f:5c:5a:ee:fd:d6:
                    da:fe:0a:be:2e:c4:5f:f2:b3:21:b5:22:d4:2a:76:
                    34:f6:7e:63:8e:c2:e8:00:fc:c9:db:20:a2:35:3f:
                    f4:90:dc:87:96:f1:45:8e:e5:8e:9f:fd:3e:60:20:
                    50:d7:cd:7f:99:85:75:d7:a9:37:bd:dd:ab:85:64:
                    bf:fe:e8:3c:e1:66:0d:13:00:64:3e:24:b5:1b:6c:
                    df:13:79:61:68:dc:24:c3:0c:ae:0b:11:16:83:38:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:A0:93:3C:75:F5:67:B1:51:05:40:51:58:F0:F4:15:73:43:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9948a9a5-32da-3d30-901a-b304b4c12f72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.185.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:1d:ab:ae:be:27:12:a2:bf:c6:a7:66:75:74:df:37:d6:c5:
         11:db:52:3d:c3:cf:0b:b2:b6:3b:07:b8:20:2f:03:e0:f2:48:
         36:fd:39:87:a4:4c:27:d7:fd:37:f8:e9:b0:8d:42:c3:3a:39:
         ca:10:4f:26:f9:79:ef:0b:a7:1a:33:78:07:23:11:c7:f3:39:
         0b:8f:7b:14:a4:e1:91:fc:98:3c:11:b0:a7:0f:e4:5d:21:3c:
         67:8a:09:f2:5f:b9:9d:62:b0:96:8f:2a:54:0a:49:90:ab:06:
         d8:97:2e:53:ca:c8:33:fe:13:6a:c3:e4:a0:bb:ca:f2:bf:9e:
         ec:45:c1:2d:4b:6d:44:83:f1:5d:65:cc:0d:ff:11:eb:60:17:
         f4:7a:90:08:a3:7b:c0:3e:3b:fe:f7:6f:11:24:25:40:0e:bc:
         8e:33:03:c0:13:0a:e8:9a:4c:0e:83:4d:71:c1:dd:98:61:ef:
         ad:23:18:a5:a2:8d:55:b4:22:2f:24:dc:01:e2:86:e3:56:ff:
         c6:ba:6a:8f:95:d3:ba:47:32:00:07:4c:2f:9f:d5:db:83:3f:
         95:4a:c3:be:6c:ce:98:31:a3:02:b8:b3:40:42:e4:9f:14:95:
         8a:dc:9f:ee:8d:ef:2c:ba:d4:69:3f:eb:5e:85:39:f1:94:f1:
         e2:69:97:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:57:50 2025 by rpki-client