Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b61ee2d9-1732-366f-81f0-575564aaa75c.roa
File:                     b61ee2d9-1732-366f-81f0-575564aaa75c.roa (raw, json)
Hash identifier:          2kETfBlA8JA/gOoDi8MjQ9i2kIHRWDGPJw/8TxkXFb8=
Subject key identifier:   0B:F4:26:48:D6:6C:C1:8F:C8:DD:E3:A1:F8:17:0D:6F:B6:6E:F5:CC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE8AB2157562C37A6D700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b61ee2d9-1732-366f-81f0-575564aaa75c.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.172.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e8:ab:21:57:56:2c:37:a6:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=0c31f905-0c70-488b-9509-5a7dedcfbc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:cc:23:a2:5b:7a:f7:b5:85:8b:fa:47:0d:
                    7d:ea:64:d6:0c:82:7b:56:97:be:df:09:e4:fe:5f:
                    96:2b:8b:9e:44:6b:35:c1:73:34:6d:0b:17:5b:3b:
                    06:96:24:69:21:82:1a:22:a0:7c:ac:3a:d0:75:f9:
                    48:96:86:b7:70:b3:cc:6f:0d:c2:ca:26:4b:90:d9:
                    bd:99:bd:e9:ca:bd:f7:ea:8b:03:d7:9e:13:a2:02:
                    de:3e:6a:37:74:26:90:09:12:d8:c7:b8:53:7a:a4:
                    08:ee:52:3d:96:23:e1:68:98:94:1a:04:7d:71:08:
                    8e:56:12:77:9e:f0:59:6f:96:13:78:95:b4:74:9b:
                    70:61:2b:4e:f1:6a:83:e0:50:9e:de:6e:c6:49:04:
                    73:dc:30:45:be:3d:a7:cd:93:99:2d:75:23:48:be:
                    6d:82:49:e5:ee:18:93:61:b3:18:5d:06:b2:41:5a:
                    c9:b0:53:75:4e:af:91:14:23:28:38:77:f7:31:13:
                    b6:c4:29:ef:65:ab:8f:22:ae:ed:4c:c6:0d:24:60:
                    b7:83:7a:ca:d8:ec:7a:f7:7c:fc:fc:b9:de:89:d0:
                    6f:09:49:42:5b:48:dc:a2:32:43:29:59:ed:7e:70:
                    6f:c6:60:67:f4:f6:9e:97:dd:e1:46:e9:54:a5:fb:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F4:26:48:D6:6C:C1:8F:C8:DD:E3:A1:F8:17:0D:6F:B6:6E:F5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b61ee2d9-1732-366f-81f0-575564aaa75c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.172.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:bf:4d:f7:0c:f8:a2:e6:69:b2:9b:9f:d7:32:25:57:8f:e2:
         37:92:97:07:c8:bc:06:b9:7d:33:89:c2:96:62:5e:de:93:00:
         d3:5e:92:92:fd:c2:10:81:b3:91:42:4c:a3:a0:88:53:39:5c:
         1c:05:f0:87:ce:25:73:1a:75:e1:1c:c9:6f:6e:6c:64:f9:32:
         47:bb:6d:17:d5:3b:2e:c9:db:25:78:46:91:f6:3b:18:01:4c:
         f3:bb:a9:56:ad:b1:48:27:30:62:cb:19:ef:56:7f:c0:c2:68:
         55:3e:04:20:d0:c2:9f:43:57:12:5d:3d:91:1e:9f:6c:43:28:
         bc:b3:bb:3a:06:2a:51:24:f3:c8:7c:5e:78:52:6f:08:a9:ee:
         1a:1c:fa:c6:8a:87:fa:92:a5:a6:b4:3b:5f:ea:61:a0:ce:63:
         d8:4f:6b:d0:15:31:16:f8:5f:0f:13:15:61:a5:a5:54:ab:35:
         b5:32:79:26:13:dc:32:3b:79:90:1a:a1:f2:6b:87:4e:b5:37:
         4e:b7:52:c4:7f:9e:cf:49:c1:14:b5:68:d5:66:74:50:95:19:
         3a:69:4e:50:8d:40:ad:71:35:05:35:c9:15:2e:d3:d1:ea:19:
         86:b5:5a:a5:a0:c4:87:64:08:20:0a:f3:f6:67:de:3f:42:26:
         c6:39:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:01:26 2025 by rpki-client