Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa
File:                     a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa (raw, json)
Hash identifier:          W9IlbBHfsfYJOj6LAHXLWD6JApFmROAQyHsnJuPQT6o=
Subject key identifier:   2E:D6:00:DE:51:41:04:00:D2:88:93:A5:ED:FB:8C:DE:9D:C7:02:85
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D961C727AE2337F251B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.123.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:96:1c:72:7a:e2:33:7f:25:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8397c98f-a5c6-408a-b7e1-ef7cb3d0d464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:bd:7e:27:f7:c8:37:58:c7:ff:b3:a2:dd:
                    e5:a5:c0:47:6e:3e:25:9c:7e:91:60:6a:e2:f1:a0:
                    b4:46:68:6a:e4:41:1d:14:43:8b:41:32:8b:34:f9:
                    bf:56:43:7f:ee:89:fc:e4:fb:6d:d5:96:80:3b:8d:
                    6f:04:43:e1:c7:6e:c9:16:7d:c0:ca:4b:e6:c1:79:
                    ba:e1:97:cd:f3:71:af:ca:ad:66:e0:4f:4f:73:d6:
                    72:4b:d5:eb:96:64:9b:69:85:f8:55:0a:a8:99:aa:
                    26:91:84:e4:e5:80:88:05:cf:65:01:ec:6e:7c:2d:
                    ab:87:31:7e:74:d9:68:14:0a:64:2e:ff:ec:fb:65:
                    e3:9b:59:97:07:4f:ea:c2:73:8a:bd:96:c6:59:45:
                    f2:7e:74:35:b5:3a:98:ae:b3:95:da:c6:e3:c5:2d:
                    a9:1e:ab:17:41:d8:cb:53:96:24:43:33:56:13:5b:
                    17:88:fd:90:7d:e4:c9:6d:b1:4d:72:94:bc:6c:aa:
                    95:98:b5:bd:be:12:50:a4:28:86:3d:ab:d1:71:e3:
                    c6:3e:89:9d:63:47:b0:2c:33:e4:92:5d:8d:20:f9:
                    d0:94:47:eb:5f:9a:6b:0f:34:83:78:41:07:5d:b4:
                    94:06:ae:b0:7e:63:bf:0f:09:1e:a6:2b:83:38:62:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:00:DE:51:41:04:00:D2:88:93:A5:ED:FB:8C:DE:9D:C7:02:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a8bcf0e9-2de6-3818-91dc-931fa01682a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:37:51:aa:29:7a:3c:66:d5:f5:96:0e:2a:f4:4f:0f:ba:
         bc:8d:69:83:d0:87:17:99:a4:b2:f5:94:53:b2:93:83:a0:d2:
         72:43:60:10:16:6a:5c:80:23:4b:b9:d7:c0:5c:cf:e0:89:a7:
         93:f0:01:bf:dc:0e:8e:43:f8:69:18:33:0f:1d:aa:6a:76:8d:
         96:64:0f:0e:7c:5d:ee:13:7c:11:08:39:52:60:17:49:64:95:
         88:6c:ae:79:23:db:a2:be:2f:f7:9a:70:c4:6e:50:0e:55:40:
         1f:cd:3e:f2:6a:93:1e:dd:dd:d2:98:88:38:51:11:72:c4:40:
         31:42:15:a0:b0:be:f5:6d:d5:1d:80:75:1c:8d:69:11:3c:0b:
         eb:4a:44:34:f6:94:a8:de:de:a8:d5:8e:1c:1d:fb:af:61:33:
         f3:53:71:fb:e3:6a:3c:04:02:3b:32:ec:d2:32:70:bd:bf:ba:
         7b:25:b0:69:3b:cb:19:d2:28:da:8b:b4:8d:6a:8a:ff:27:10:
         b5:61:87:e0:19:a2:fc:7b:29:8c:15:c4:0d:e1:24:b6:53:59:
         a2:95:d3:85:99:0b:d1:c5:42:4c:a2:96:22:86:00:7a:78:ee:
         49:13:64:ee:cb:62:89:bf:f0:5e:f9:da:00:9d:a9:b3:10:59:
         f8:7b:67:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:00 2025 by rpki-client