Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa
File:                     b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa (raw, json)
Hash identifier:          3HKOSe302NSoPkAUEWov5immaoIg+eb+HXNkdhDvZp8=
Subject key identifier:   49:3B:A4:49:B9:1F:A4:45:1C:B2:7E:9B:33:62:19:02:E0:FB:DD:85
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CEAE08D9952E48F9B4380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        65.189.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ea:e0:8d:99:52:e4:8f:9b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=459aac18-011f-45b3-81f2-7d15c04f2141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d1:af:7d:06:53:11:98:da:b4:ee:67:90:5a:
                    20:10:68:5b:de:c3:1f:63:63:de:b9:9c:e7:8f:1d:
                    8f:51:e0:6d:b7:be:33:d1:ea:c5:7b:26:cf:3c:e6:
                    7a:b8:97:a2:a8:5f:d2:38:94:76:a8:b1:07:50:4c:
                    9b:5a:37:c6:73:40:ba:2d:9f:9e:49:a7:ca:e7:03:
                    50:05:d7:ee:42:d9:a1:eb:77:f8:49:21:3c:ce:e5:
                    76:74:ea:1b:96:d8:72:e3:40:fd:a4:a9:73:89:50:
                    f9:46:7c:af:18:82:8a:eb:38:4e:15:5a:9e:80:4b:
                    22:8f:33:b0:9c:ac:d9:03:97:ad:fb:08:9a:3e:60:
                    08:7e:07:da:f6:1e:07:59:30:38:6b:a5:fb:cb:20:
                    f2:6b:cc:e1:d8:c6:2f:2d:f1:77:49:34:e4:ed:13:
                    0a:ee:e1:56:96:c2:90:3e:e7:8d:5e:a6:f6:fb:ef:
                    5f:b8:7c:23:2a:76:47:72:bf:7f:24:15:4f:ce:4d:
                    5d:69:89:7f:fd:2f:73:da:8b:79:7e:22:f4:57:40:
                    88:94:5d:33:08:1d:51:d7:38:e0:5e:e7:9f:c0:87:
                    ad:e5:19:99:bd:3e:f5:0f:19:c5:04:55:0e:d6:e4:
                    42:08:76:f4:6a:b5:f2:6b:21:ef:5b:98:32:17:5a:
                    2b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3B:A4:49:B9:1F:A4:45:1C:B2:7E:9B:33:62:19:02:E0:FB:DD:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:33:17:30:96:8d:37:37:f4:87:d2:88:89:cf:bb:1c:3d:
         21:68:ec:12:53:02:5a:d3:81:02:6b:73:96:35:e3:26:c6:d2:
         41:29:22:2e:20:17:d7:37:46:5c:d7:f3:51:7f:22:e7:e5:20:
         c2:b9:bb:a4:1b:58:01:7e:6c:49:df:c8:f3:ab:b2:ac:bd:c5:
         7f:79:e1:12:e5:db:03:6f:12:fe:fb:26:5e:e4:bf:b2:f7:b1:
         60:f3:6c:25:01:35:dc:ea:21:a4:13:0b:e2:c5:94:1c:17:86:
         6f:8f:a3:9f:88:e1:b5:26:f1:9f:52:b9:85:00:d2:c5:8c:a7:
         a6:61:ec:aa:74:db:69:8b:ba:62:35:35:f3:38:f9:00:be:32:
         19:88:c8:2b:3a:3c:2e:b8:a9:2f:8d:b2:6f:7d:41:b7:6b:45:
         77:ae:c8:60:45:56:96:ae:04:0f:08:01:de:7f:6d:15:f4:7e:
         fb:84:3d:e6:36:46:7c:46:9d:ab:2e:5d:95:39:18:76:8d:45:
         5d:da:5b:17:df:64:ee:d6:bc:54:e6:c6:62:07:39:c6:b7:60:
         01:b0:24:58:3d:a3:11:7e:20:d8:71:b9:41:ed:9a:d9:0a:75:
         fc:95:03:87:dd:16:da:cb:13:9b:3b:35:8d:9d:bc:2b:b3:4f:
         40:67:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:12:07 2025 by rpki-client