Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99c4bf8f-7107-3049-a5c5-12bd90c1006e.roa
File:                     99c4bf8f-7107-3049-a5c5-12bd90c1006e.roa (raw, json)
Hash identifier:          DkXSojdQJhSD1sx/jDFMIJqwJzYJ4dZ9SSdW2wXa/jc=
Subject key identifier:   83:2E:08:E0:7F:66:42:E8:FB:05:D9:7F:B7:A7:A2:05:44:8F:7C:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D9C0F7C79FC8AB6F14540
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99c4bf8f-7107-3049-a5c5-12bd90c1006e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11426
IP address blocks:        65.28.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:9c:0f:7c:79:fc:8a:b6:f1:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=d563d355-8e2f-4c7f-b4dc-b8f8b7b6a096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:de:dd:5f:74:a1:f3:18:a2:7b:86:41:9d:
                    a6:98:5e:0b:92:23:76:78:f5:4b:bd:6e:5a:c0:5c:
                    d2:46:20:20:6c:6b:38:54:da:3d:f1:a9:f6:38:b9:
                    85:1c:68:0d:09:82:01:03:46:cf:55:bf:a0:26:59:
                    94:3f:f8:1a:9b:f6:ad:8c:3b:6f:c4:6b:d8:7a:18:
                    f7:3d:62:29:15:1f:32:10:35:2d:c8:fb:70:ea:ab:
                    89:72:ea:67:27:9b:dd:f6:f6:25:f4:76:e4:ca:86:
                    c4:d4:4c:73:09:52:01:34:77:8f:86:39:9b:18:6f:
                    2c:70:95:e2:d7:7f:eb:a8:bd:c9:42:b4:a2:fc:f7:
                    77:5c:f1:8e:a9:5a:96:32:d2:35:ec:d3:8b:d1:31:
                    cd:de:4d:20:ea:55:19:36:f0:e6:f9:5c:22:a9:a9:
                    d1:26:24:a7:5c:cc:b9:8b:e0:ad:75:56:65:b1:ce:
                    ee:7c:ea:5b:68:17:ab:22:b2:29:1d:0a:ef:b8:64:
                    c5:aa:30:4b:79:ac:65:ea:a0:bc:8f:42:49:fe:bb:
                    6d:0e:af:75:24:dd:21:f4:6f:a5:e8:73:84:51:f4:
                    82:31:23:28:25:74:f2:fb:46:a1:4d:7c:4f:e0:bc:
                    74:2f:12:92:3e:75:e9:18:4b:ca:da:d4:ac:93:ce:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:08:E0:7F:66:42:E8:FB:05:D9:7F:B7:A7:A2:05:44:8F:7C:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/99c4bf8f-7107-3049-a5c5-12bd90c1006e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:39:9d:17:f1:38:86:94:b4:14:e8:b8:ba:a8:69:70:a5:00:
         05:68:43:2a:7a:01:30:ba:aa:29:53:ce:b1:be:f5:25:bf:6c:
         d7:2c:be:ce:13:79:f2:91:1e:60:87:56:18:24:79:4a:0f:dc:
         ee:96:3a:a3:4f:f5:5a:20:24:60:92:92:f8:1e:d4:6b:8b:ee:
         c9:ca:67:40:f0:d7:d1:b9:83:b1:23:ee:e3:00:25:55:d3:3d:
         d2:ee:98:46:9e:13:50:fb:e2:60:e0:1d:42:e5:28:dd:b8:21:
         7d:cd:ef:be:67:26:4e:ad:9b:70:90:5f:66:e0:57:de:59:8e:
         83:4b:bb:1d:df:75:0f:ac:af:55:0a:27:d2:92:9f:31:a3:c0:
         20:81:1d:87:3a:3b:c4:9d:34:98:27:0b:bb:67:2c:8d:da:c6:
         df:11:34:f1:6e:63:7f:23:06:6a:51:b1:25:7d:0a:88:bb:98:
         98:b0:90:22:ad:47:54:1e:85:98:7f:fb:fc:97:e0:0c:bb:70:
         8b:86:d2:40:34:e4:fa:f2:2d:87:4e:cb:9d:ea:e8:cc:a0:2e:
         05:11:c2:49:f6:2c:93:39:05:5a:16:5e:e4:78:5e:89:5c:a7:
         e5:80:84:97:b4:fe:bb:93:a2:7c:4e:60:21:6f:3a:9b:a6:59:
         0c:e2:a6:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXZwPfHn8irbxRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
ZDU2M2QzNTUtOGUyZi00YzdmLWI0ZGMtYjhmOGI3YjZhMDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu7e3V90ofMYonuGQZ2mmF4LkiN2ePVLvW5a
wFzSRiAgbGs4VNo98an2OLmFHGgNCYIBA0bPVb+gJlmUP/gam/atjDtvxGvYehj3
PWIpFR8yEDUtyPtw6quJcupnJ5vd9vYl9HbkyobE1ExzCVIBNHePhjmbGG8scJXi
13/rqL3JQrSi/Pd3XPGOqVqWMtI17NOL0THN3k0g6lUZNvDm+VwiqanRJiSnXMy5
i+CtdVZlsc7ufOpbaBerIrIpHQrvuGTFqjBLeaxl6qC8j0JJ/rttDq91JN0h9G+l
6HOEUfSCMSMoJXTy+0ahTXxP4Lx0LxKSPnXpGEvK2tSsk84NBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMuCOB/ZkLo+wXZf7enogVEj3zHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOTljNGJmOGYtNzEwNy0z
MDQ5LWE1YzUtMTJiZDkwYzEwMDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQRyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFY5nRfxOIaUtBTouLqoaXClAAVoQyp6ATC6qilTzrG+9SW/bNcsvs4T
efKRHmCHVhgkeUoP3O6WOqNP9VogJGCSkvge1GuL7snKZ0Dw19G5g7Ej7uMAJVXT
PdLumEaeE1D74mDgHULlKN24IX3N775nJk6tm3CQX2bgV95ZjoNLux3fdQ+sr1UK
J9KSnzGjwCCBHYc6O8SdNJgnC7tnLI3axt8RNPFuY38jBmpRsSV9Coi7mJiwkCKt
R1QehZh/+/yX4Ay7cIuG0kA05PryLYdOy53q6MygLgURwkn2LJM5BVoWXuR4Xolc
p+WAhJe0/ruTonxOYCFvOpumWQziphU=
-----END CERTIFICATE-----
Generated at Sat Oct 10 00:21:28 2026 by rpki-client