Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b46e3023-dfa8-3ac6-91d9-7e284f48dbf9.roa
File:                     b46e3023-dfa8-3ac6-91d9-7e284f48dbf9.roa (raw, json)
Hash identifier:          A4Cov3L+n6kJO2mXk4RBErltE1fTW2vBE3CKXlJkw98=
Subject key identifier:   27:A1:CC:08:BF:14:54:48:AE:E6:A2:D7:C3:3F:C9:3D:22:88:BB:EE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D1E1E49318B8115073BC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b46e3023-dfa8-3ac6-91d9-7e284f48dbf9.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        96.11.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:1e:1e:49:31:8b:81:15:07:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=7c49c57f-c0da-46b4-a528-654732c5412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:c6:dd:fa:c1:8c:79:11:19:81:98:04:e0:
                    cf:f7:2d:23:c4:90:a9:44:c7:e2:61:b8:74:f2:43:
                    46:a6:d4:16:e6:22:43:76:90:82:75:c9:3e:46:fd:
                    9d:4e:4f:36:a7:96:76:b8:53:d7:9f:e9:a9:d7:18:
                    26:dc:e6:4c:66:2d:49:70:d6:90:fe:b6:84:8f:81:
                    9a:b0:69:40:34:9c:a6:ba:13:7d:b1:eb:3f:c2:2f:
                    d9:a5:2e:6e:9a:30:81:e3:98:33:78:6e:a5:e4:da:
                    2c:e1:ed:cd:44:81:32:93:22:d6:f8:b0:f6:c6:a2:
                    7d:a3:65:fe:e8:28:e2:3c:c9:2e:33:1c:6a:31:2c:
                    3d:65:3c:f5:8e:8f:59:f7:74:f9:ee:96:f8:83:58:
                    a0:b7:ae:8b:9c:20:4d:c9:c3:04:60:5a:ab:8e:fe:
                    07:be:92:3c:0b:97:c6:27:74:2c:e6:f9:eb:c3:0d:
                    be:ae:f5:03:79:43:2c:b1:ad:dc:97:5a:b3:98:fc:
                    31:a2:6f:0a:aa:c7:ab:98:4c:ec:b4:06:10:7b:5a:
                    00:f5:1a:cf:f5:9d:0b:8c:77:5a:52:64:5b:6a:db:
                    ea:d6:b6:dd:b3:75:32:95:51:b3:d7:21:23:45:cd:
                    f2:bd:70:0a:ac:64:48:44:d7:55:ab:c4:ca:f2:55:
                    f9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A1:CC:08:BF:14:54:48:AE:E6:A2:D7:C3:3F:C9:3D:22:88:BB:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b46e3023-dfa8-3ac6-91d9-7e284f48dbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.11.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:33:b0:0b:ae:67:31:8b:91:f4:b9:34:cd:2c:49:cb:c6:
         03:49:75:6a:56:18:e4:cd:0c:07:7e:f0:64:2c:2b:a6:4b:ae:
         f4:af:83:f5:c2:d7:55:cd:61:fb:dd:4d:8c:18:4c:fc:83:a5:
         7a:c1:ca:5b:27:68:fa:68:e5:91:86:67:82:c8:f5:85:34:55:
         ce:92:76:80:10:5e:f6:ea:1d:a5:86:36:9a:20:59:dd:37:de:
         70:09:b5:0c:21:89:cd:9d:bb:cc:3a:4a:93:ca:b9:f9:06:63:
         78:72:7d:f2:cc:fa:70:a5:09:da:d3:c6:61:e7:19:ed:15:af:
         31:12:37:3f:b9:38:2a:75:b2:1b:cf:65:61:9f:13:99:0b:19:
         56:41:a2:bf:22:ef:46:ea:7f:20:bd:cc:45:7a:b4:6a:a0:96:
         df:06:05:34:b9:84:6d:a3:15:2e:a2:c7:fd:53:bc:34:4c:8b:
         20:a5:5c:9e:77:47:7c:51:54:2c:65:5a:8e:69:6f:e8:67:09:
         f1:f0:1a:aa:8a:c1:f2:1c:93:62:d6:f2:c1:a4:e2:d1:45:99:
         8f:0f:3c:aa:55:2e:51:61:78:1b:ed:9f:29:11:48:f7:ee:6f:
         35:47:bf:ac:8a:d8:63:99:f4:33:1c:7a:43:dd:ad:11:89:0f:
         0b:7a:78:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:10 2025 by rpki-client