Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa
File:                     a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa (raw, json)
Hash identifier:          b3Nia+ubv3fqG8NEZIHMja5AcU+hYZ++OsXoozlzCSo=
Subject key identifier:   DE:D3:7F:1A:F0:A7:E0:83:33:15:16:77:C6:D2:09:D1:9A:BA:9C:11
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB16AF5BF26B9486B0CC40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        24.123.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:16:af:5b:f2:6b:94:86:b0:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a9b9b19b-7185-4470-8944-7f20c4dc5741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ae:a2:b7:15:8c:f9:59:c2:68:1b:5b:ce:91:
                    2d:4f:45:bc:c0:2b:60:1b:87:80:8a:ca:63:15:5c:
                    5c:5f:1e:d7:e2:84:4f:b3:4c:52:c2:59:d1:e0:bb:
                    b6:c5:cf:f9:a5:21:c9:58:8f:41:db:54:8d:a0:95:
                    be:38:92:1e:dd:22:34:3a:6a:cd:d9:23:2e:06:91:
                    c1:33:d2:aa:8c:c6:db:af:c0:f5:98:ba:f4:bb:be:
                    b5:e0:be:76:3f:03:58:2a:70:95:94:3b:3d:fe:98:
                    1d:51:6f:b7:65:0a:37:70:4e:ff:20:c8:ec:bb:53:
                    46:89:6b:a3:69:06:fe:89:c4:bc:5c:a6:57:e3:0e:
                    cc:30:d9:46:70:eb:6d:c5:f4:38:fe:2c:3b:00:d5:
                    0b:9a:d5:ec:3f:97:01:43:28:90:67:4f:19:b2:71:
                    29:7f:2b:fc:34:5f:3d:74:ba:31:35:a8:f3:ba:a3:
                    27:79:5c:cc:f3:6b:92:5d:b3:ff:61:2a:ce:cd:e8:
                    38:53:6b:cd:8b:0a:8d:ef:09:a3:cf:9a:25:be:6b:
                    e5:e8:de:45:80:df:52:da:c6:c1:45:a0:a5:54:46:
                    70:72:c5:2d:1d:ac:2f:24:38:2c:6a:3c:99:b5:5e:
                    95:0b:fd:6c:d2:37:87:b0:0f:b3:d2:86:8b:c4:fe:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D3:7F:1A:F0:A7:E0:83:33:15:16:77:C6:D2:09:D1:9A:BA:9C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:cc:ec:34:03:90:1c:f9:a3:81:8d:23:4c:b7:d3:bd:a5:
         4a:56:c3:ff:42:3c:1b:66:7f:76:02:5e:9c:c8:c3:6a:a8:cf:
         be:e8:c6:b6:e2:1e:a5:52:6b:c0:92:d2:4e:9e:b5:87:0d:89:
         09:20:2b:e0:09:ae:70:73:5a:4e:6d:4e:30:b3:df:f4:05:14:
         82:23:56:80:50:24:67:6a:b3:fb:70:a6:1c:62:4a:71:5f:4e:
         7d:dd:db:1d:5c:b2:b2:e5:19:4a:e6:46:e3:23:c9:58:fa:b6:
         8e:62:b9:b6:2a:ff:ee:fb:34:6d:58:e9:f0:55:6f:a2:91:4f:
         24:9c:eb:f2:06:a9:5e:1f:9b:db:44:a4:0b:8c:79:1a:4b:88:
         66:33:e2:41:25:ef:85:e7:6f:ae:b8:6f:c1:bc:5b:0d:ad:57:
         17:9f:53:31:08:85:87:ff:00:d4:c0:c1:4f:c0:2c:80:f1:6a:
         f1:ae:72:98:3f:cf:07:73:78:b6:cc:cd:bb:65:a6:db:ba:28:
         0e:89:e4:4e:bd:f5:30:18:2f:8b:59:15:bd:91:79:74:c6:24:
         f0:20:b8:e9:be:3d:58:cc:09:10:36:1a:bd:cd:ff:b4:a4:78:
         8e:2b:df:82:5b:2c:d0:2f:36:e1:59:bf:5f:32:35:e3:92:d0:
         a0:df:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:54 2026 by rpki-client