Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a485ac56-b09e-3e24-a132-aab7e2fbd803.roa
File:                     a485ac56-b09e-3e24-a132-aab7e2fbd803.roa (raw, json)
Hash identifier:          5kmkv0+eoCnldKtLWzg1tvHzGytbeGBbTDi16up1FIY=
Subject key identifier:   5B:E1:DF:91:01:57:64:5B:7F:20:70:DB:40:96:B8:A4:D9:50:6F:D4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DFE3E06A3024321900E00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a485ac56-b09e-3e24-a132-aab7e2fbd803.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     8052
IP address blocks:        69.76.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:fe:3e:06:a3:02:43:21:90:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=38109e9d-4f87-4971-9d65-11757617f060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8d:4e:6d:2b:27:51:96:eb:b8:0a:b3:e6:cb:
                    ff:13:f7:fa:e4:b6:3e:04:8f:f4:97:57:79:f1:d9:
                    46:8e:ee:07:f3:c4:9c:45:d7:0c:87:db:6d:30:84:
                    ff:94:f7:32:7e:51:08:3e:ba:17:59:5b:90:dd:d2:
                    09:06:74:58:d5:a9:f1:3d:f4:b4:ca:48:48:0f:a5:
                    aa:5d:9b:75:69:2f:6d:29:2b:84:c9:6d:72:90:e3:
                    9f:34:6f:01:84:1f:35:27:ee:28:7e:e4:98:53:58:
                    2c:af:c8:ff:04:d1:2a:0c:10:9b:b7:4e:28:ec:a9:
                    ea:4c:92:b8:58:ae:e8:33:32:fd:d6:9d:6e:ec:28:
                    e9:f7:03:31:7e:f0:0a:ef:00:6a:ce:42:81:f0:49:
                    0a:db:ef:53:2f:ce:2a:92:be:1d:08:d1:86:a9:c1:
                    fe:4b:1d:db:31:10:8c:6e:4b:82:4e:89:46:b2:0c:
                    8f:28:e7:7d:9f:3e:6d:ac:9e:b6:d6:e6:0d:03:80:
                    19:6e:be:71:24:50:08:31:d8:a0:31:d2:89:83:ce:
                    bf:50:f5:5d:e0:93:8d:94:95:19:6b:50:c3:e4:2f:
                    9d:c6:55:77:80:3b:f7:82:54:5e:6f:87:72:63:cc:
                    66:17:82:49:31:41:f1:41:c7:56:1a:32:01:05:29:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E1:DF:91:01:57:64:5B:7F:20:70:DB:40:96:B8:A4:D9:50:6F:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a485ac56-b09e-3e24-a132-aab7e2fbd803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.76.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:0c:ed:ce:dc:f4:d0:5e:ca:d1:00:ac:87:9b:38:dd:55:
         0d:9a:4f:d1:75:73:c5:a5:80:af:23:0b:ad:2b:96:71:35:10:
         ec:27:a5:dd:ae:46:34:97:68:4e:4f:3d:25:4e:e3:23:83:b2:
         06:29:ed:a9:e7:4f:92:0c:80:84:62:34:9a:9a:7e:76:91:90:
         87:ea:69:d7:99:a4:bf:eb:59:64:ff:53:dc:bc:c9:95:93:cf:
         06:2f:5d:89:5d:8d:2c:24:ea:e8:7b:fb:09:a4:43:50:02:46:
         a5:c5:6b:d8:c5:e2:94:74:89:1b:1b:1b:b6:38:6b:51:fe:2c:
         57:cd:df:a2:33:7c:6b:72:4e:76:0e:1f:94:31:6a:9f:29:6c:
         59:57:33:cc:52:a7:c3:ff:6f:1c:54:98:74:3d:57:48:db:3d:
         f6:38:39:fc:28:b9:37:e1:61:fa:f5:dc:17:55:1d:a3:41:c1:
         63:d7:4a:e5:ac:ad:84:13:58:52:54:38:e7:5c:b1:e0:a1:2b:
         01:6c:18:3f:c0:47:f0:5b:0f:04:4a:b2:0d:68:5c:49:76:b3:
         df:ec:ba:a5:1f:dd:8e:1a:c0:5a:3c:82:45:83:eb:74:df:83:
         3f:f7:92:22:9b:34:6d:bf:6d:63:b9:ce:e9:db:73:0e:15:9b:
         2b:2c:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:11:28 2026 by rpki-client