Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aac22c6c-1b18-3b91-bc29-dd542daca70b.roa
File:                     aac22c6c-1b18-3b91-bc29-dd542daca70b.roa (raw, json)
Hash identifier:          A9q7816trI53tHNvRkM8UrxS3rBO/op3Ou2Tv4zoDYA=
Subject key identifier:   32:C2:FE:DE:3E:1E:5B:41:C8:CB:5D:83:E8:A2:CC:95:6B:33:4D:A3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D8D1056F147CB3BFF0FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aac22c6c-1b18-3b91-bc29-dd542daca70b.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        24.123.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:8d:10:56:f1:47:cb:3b:ff:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=e8dd710f-e150-4d3b-b0a2-613bc10b8077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:07:8f:b4:d2:3d:d3:ee:0e:17:c7:a1:16:ce:
                    21:54:6a:e6:91:ac:9d:c6:55:d3:ef:c9:3b:1a:36:
                    65:e6:62:6d:1f:e6:88:9c:77:da:25:b9:59:ab:20:
                    d6:ed:ce:e9:12:d0:9d:a6:ba:48:97:91:e8:5b:6f:
                    67:d0:8d:ab:4c:57:1f:d7:85:5c:e4:ab:2d:02:c4:
                    68:58:47:21:96:fa:65:64:57:40:3e:69:3c:45:5f:
                    38:69:d6:23:53:3c:11:8b:4f:e1:4d:ea:d9:85:95:
                    81:bb:16:ea:a9:77:e6:fe:a1:fb:7f:37:0b:28:5c:
                    2a:93:a9:13:d5:fe:53:44:24:c3:41:3f:71:28:5d:
                    78:15:89:2c:d4:2d:44:bb:1e:b2:ed:54:52:65:fe:
                    e9:1b:83:89:8c:8d:c3:cd:df:aa:7d:82:ea:80:2a:
                    03:bb:0a:cc:a0:a1:64:5f:ed:29:50:6a:6a:74:f5:
                    30:68:ad:7b:9f:8d:6d:e7:be:ef:c4:ff:70:c7:9a:
                    5b:22:4f:0e:60:93:c9:dc:dd:f4:a6:72:bc:5c:d3:
                    93:b8:40:97:7b:ac:e2:5b:e0:dd:12:b8:d3:f7:cb:
                    f8:8f:97:d3:e3:e6:71:0e:2e:36:7c:70:6c:3b:de:
                    72:ea:b5:98:02:63:fb:36:c2:a3:ab:cd:1f:c6:0b:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C2:FE:DE:3E:1E:5B:41:C8:CB:5D:83:E8:A2:CC:95:6B:33:4D:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aac22c6c-1b18-3b91-bc29-dd542daca70b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:20:10:db:4e:24:19:e9:35:c8:09:76:a3:bc:ef:a7:d0:
         fa:bb:26:1f:88:91:e3:79:4f:06:85:75:24:73:63:81:06:6a:
         94:d1:a5:cc:71:52:3f:af:9e:bf:2c:4f:fb:f8:e2:63:56:58:
         c4:7b:83:63:d9:03:86:14:a1:e5:31:26:5b:75:e4:68:c1:4b:
         64:1e:1c:cd:2f:57:6e:e0:ce:df:04:95:84:d2:c3:e4:99:b8:
         78:df:da:81:5e:b9:c4:79:c4:66:4d:b0:47:24:9a:f0:66:8e:
         3f:dd:30:c3:07:9c:0e:71:bb:55:ff:87:f9:3c:09:95:1b:2c:
         b0:46:9a:10:c4:51:22:d7:6a:13:13:50:4d:09:60:51:df:eb:
         19:98:bd:d2:ac:77:86:90:dd:ab:72:15:bd:ea:33:73:76:10:
         19:6c:dd:7d:44:f7:0d:97:0b:c5:8b:e9:cf:af:ea:dd:1e:58:
         ac:b4:c1:2d:37:65:e8:3b:c3:61:34:26:32:08:83:66:d4:f2:
         0f:16:90:16:f4:9e:b1:f7:59:fc:8c:18:fe:f9:b8:01:88:53:
         ac:4e:4c:50:cf:a8:21:19:2c:aa:1a:98:10:d6:7a:ae:b3:99:
         1a:4e:9d:6a:88:67:30:ef:73:d4:0e:7c:8b:83:0b:f9:fe:00:
         7d:e7:82:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:54:34 2026 by rpki-client