Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab935ea6-0d15-3ddd-98de-afe583ac89ae.roa
File:                     ab935ea6-0d15-3ddd-98de-afe583ac89ae.roa (raw, json)
Hash identifier:          nHJe4s+1rp1lhBR3VAFmzzp/RyDPLthh2KGtEN39pI4=
Subject key identifier:   EC:AF:6F:78:9F:A4:2C:5D:F6:FA:31:21:69:FA:24:C8:89:44:D9:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F567B4A0E42A92CCB4AA52C80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab935ea6-0d15-3ddd-98de-afe583ac89ae.roa
Signing time:             Tue 29 Sep 2026 17:03:23 +0000
ROA not before:           Tue 29 Sep 2026 17:03:23 +0000
ROA not after:            Mon 28 Dec 2026 18:03:23 +0000
asID:                     20231
IP address blocks:        173.41.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:56:7b:4a:0e:42:a9:2c:cb:4a:a5:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 29 17:03:23 2026 GMT
            Not After : Dec 28 18:03:23 2026 GMT
        Subject: CN=d65a4ef8-bfde-4d52-823a-cb0f9038e935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2d:19:7c:92:53:ab:69:9c:89:21:a7:fd:03:
                    d0:e0:6a:8e:f3:e3:7e:68:4c:85:43:95:d3:f4:ea:
                    d9:d0:25:8d:d3:7d:7f:89:ff:73:f1:2e:9d:23:ec:
                    c1:06:1d:c3:48:a5:c5:3d:13:97:0e:b1:8b:76:83:
                    56:be:94:03:e2:1c:00:14:1f:f5:32:77:99:0a:7e:
                    96:9d:2b:ad:47:06:07:d6:96:d5:e0:84:ed:56:6b:
                    9d:a6:86:c0:e5:f3:99:c0:28:e7:02:fc:69:72:01:
                    3d:f5:45:b3:41:9f:81:04:cd:29:8f:ad:d0:3b:ca:
                    33:6f:86:d0:3e:23:bb:4e:57:dd:58:a1:94:12:49:
                    ed:fc:16:7d:00:0f:b8:43:9b:59:fa:e8:44:54:3f:
                    65:fe:79:d3:15:90:b4:f6:a8:19:24:7e:c8:b8:d6:
                    96:56:1e:4e:54:ab:c3:29:cc:5f:20:64:fe:ac:55:
                    f9:05:81:39:03:71:c9:8d:27:32:01:44:59:bc:d3:
                    f3:64:e1:87:cc:f4:90:c5:2f:c0:cd:86:a1:29:bd:
                    06:1b:28:77:61:69:73:71:59:c7:b2:05:5e:43:48:
                    3e:65:25:de:81:92:9c:76:48:44:e1:b2:21:a5:fa:
                    65:9c:7f:d1:93:97:76:d9:75:d1:7b:7e:39:fa:c2:
                    90:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AF:6F:78:9F:A4:2C:5D:F6:FA:31:21:69:FA:24:C8:89:44:D9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ab935ea6-0d15-3ddd-98de-afe583ac89ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.41.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:49:54:c3:6f:1b:49:42:73:57:5d:ec:71:ef:2c:84:33:
         ab:64:11:17:b1:f0:8d:3a:d1:6b:10:d1:e5:b5:39:e3:3c:40:
         86:f5:ea:a7:f7:5d:1d:b1:65:56:c0:be:36:44:53:f0:d6:9e:
         a6:76:a2:51:08:11:ab:0b:fe:04:cc:1f:39:d7:1a:3a:8a:84:
         08:d0:98:9f:f6:29:8c:46:38:1d:2d:f9:6a:bb:37:b0:c7:de:
         e7:21:b0:b1:46:59:30:f9:c9:96:73:04:52:65:01:0b:8e:2b:
         1b:d4:18:7c:fc:11:e7:29:38:ec:f7:30:07:a9:84:6b:34:fd:
         29:59:08:6f:34:10:62:ce:62:cc:a2:08:5c:c2:ab:57:a6:cb:
         f3:bb:c4:91:62:78:30:59:40:60:58:9e:a9:58:34:a7:9d:48:
         6d:7a:e2:62:8d:e3:5b:b7:d9:bd:e7:02:73:a2:03:df:07:e2:
         6a:c9:eb:52:4e:d9:ac:fc:12:ac:83:1b:13:0d:f9:78:49:ce:
         98:27:8d:65:cb:6e:7d:f5:dd:3b:0e:97:52:6b:71:74:40:ea:
         b7:03:b9:09:96:03:b9:31:d4:eb:9b:53:8a:ef:4f:c5:d6:6a:
         3a:a4:4a:c1:ed:de:94:9d:54:47:f0:d8:c3:0c:c9:c4:83:c7:
         5c:2d:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:59:14 2026 by rpki-client