Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa
File:                     a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa (raw, json)
Hash identifier:          101wrEUBnpQEzXf+kbFmwGTUzADVDUvzDRzKtdg/lIQ=
Subject key identifier:   53:22:49:3E:1A:84:CB:3A:C4:56:E3:DF:95:31:7E:5E:90:92:02:FB
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9EF77E0290FC9ED70700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        24.58.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9e:f7:7e:02:90:fc:9e:d7:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=17c54935-db9f-4e58-bf31-97c6904b1cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:08:a3:41:6a:ae:29:16:5b:90:34:42:ca:
                    61:32:e0:a5:a0:a8:8e:c8:da:87:b0:c7:75:26:33:
                    98:06:87:89:df:0e:e9:89:73:a3:33:39:2b:51:e6:
                    a7:4d:38:8c:30:ad:a7:18:1e:c9:7b:b4:d4:d3:63:
                    9f:8c:81:84:6d:e4:87:8e:f5:1d:96:0d:47:ca:d9:
                    11:9b:d8:84:22:a8:4d:1f:c9:ba:09:2e:03:4b:fa:
                    86:97:05:3b:09:4f:b1:c2:6e:77:60:5e:2a:bb:91:
                    39:fc:d9:b8:5f:01:29:7c:0f:ed:14:1d:8f:82:88:
                    7b:b6:e8:8d:3e:2b:d3:b6:f2:2b:64:8b:bb:10:7f:
                    c6:d7:75:9e:ac:aa:83:6f:5a:88:16:b2:9b:da:55:
                    79:90:11:25:ae:37:ae:4b:02:31:64:7f:52:59:d1:
                    cc:5d:fe:d6:a1:43:3f:2f:56:59:a4:3d:35:7c:e5:
                    55:59:d9:e2:fb:b0:aa:5d:a0:a5:a1:ed:0b:c7:65:
                    53:bd:5b:cd:e8:6c:e5:e6:47:04:e6:a3:19:1a:31:
                    ff:b3:f6:1d:1b:04:1c:df:1a:2b:b3:ad:77:09:fb:
                    d8:01:80:b7:95:66:11:64:8f:06:cf:63:b4:ee:f4:
                    51:37:9c:09:50:35:ad:ee:7b:47:14:0c:c5:df:47:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:22:49:3E:1A:84:CB:3A:C4:56:E3:DF:95:31:7E:5E:90:92:02:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a9c76189-c760-3c18-b9a8-8b92a2159bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.58.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:18:45:c1:0c:d7:c3:00:58:a1:ae:26:df:1e:0c:fc:59:92:
         a8:fb:26:69:74:c7:41:70:c1:f6:38:50:a4:0a:98:02:07:73:
         48:6c:ef:7c:49:87:f0:9a:c0:48:85:64:08:be:0d:4e:50:c5:
         c9:bc:99:01:f9:a8:c9:e8:32:9d:7d:e5:52:de:26:9e:f0:fe:
         22:8a:75:31:e9:e6:c3:fd:46:a1:56:5b:ff:f1:10:ee:35:5f:
         8f:6d:82:b8:71:b8:76:63:fb:c3:b3:3c:9a:aa:d7:a4:ee:f4:
         0d:95:5d:38:2a:b1:ad:8f:75:f8:11:d4:71:38:2e:fb:2a:d2:
         eb:72:85:fe:58:83:e1:23:8b:32:8b:9b:84:0f:f0:2f:10:cd:
         8d:b0:62:06:d2:78:dc:94:0e:fd:4d:56:23:f3:a7:9f:a1:b4:
         d6:0e:80:c9:18:8c:94:f3:52:83:e7:12:ff:cc:6d:6e:e3:a6:
         aa:99:dd:27:cf:a4:e2:f6:e5:83:c5:a0:b9:92:b1:32:22:2a:
         1a:ec:b7:c0:c4:df:a3:3e:c3:98:5c:22:af:d0:07:d2:80:0b:
         b0:30:19:df:68:4d:a8:26:90:44:a5:ed:54:fd:cb:1f:e0:af:
         18:61:ce:e4:c0:ff:fd:94:4d:d2:6f:9c:40:59:14:55:14:bf:
         bf:1c:b3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:01:14 2025 by rpki-client