Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b97836f0-2d82-3f78-be48-98ed48fe7727.roa
File:                     b97836f0-2d82-3f78-be48-98ed48fe7727.roa (raw, json)
Hash identifier:          WrykwT+dJrKJThSwy0YaJ+CfzyE5diJ80yZyWGI2/48=
Subject key identifier:   35:96:21:27:EC:B3:DC:39:D1:98:4C:EE:AD:D8:63:3A:F7:A1:09:75
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CF761A05CB483EA720780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b97836f0-2d82-3f78-be48-98ed48fe7727.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        67.246.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:f7:61:a0:5c:b4:83:ea:72:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=715dddd2-55ef-408a-a799-04b69551d984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:84:90:54:85:0c:fe:21:3d:30:f2:36:4c:08:
                    76:ca:83:8d:d6:ed:1f:68:37:82:93:a3:48:10:10:
                    cf:8f:63:18:ba:73:61:30:43:fb:05:0c:46:e4:5e:
                    dc:ad:d6:7c:c5:d8:d7:ce:6e:04:53:3c:f5:97:d3:
                    c7:c1:d2:a1:10:3f:4f:c0:54:32:75:1e:7c:4f:3e:
                    5f:ec:61:81:c6:ad:96:ce:ba:b9:d7:37:b2:62:4c:
                    01:54:6e:3f:3f:c2:76:5c:5f:2e:fb:7d:8a:5b:a6:
                    2c:1a:e9:ad:53:38:90:c0:4f:fa:15:15:0e:5e:3a:
                    3a:7c:7d:ca:c4:03:0a:ea:17:5a:da:eb:c7:b6:62:
                    bc:49:7c:01:c3:34:8f:dd:65:df:ff:ad:7a:45:ce:
                    9c:5f:c9:9b:c5:ff:ba:6b:09:9f:77:81:6d:bf:95:
                    19:c6:b8:85:a3:bc:6e:7c:04:f5:2d:4e:18:03:e3:
                    3a:98:1c:58:e7:e7:17:66:14:93:21:23:d1:54:c6:
                    6a:f9:12:fa:27:ea:ec:21:f9:db:d3:1f:5f:79:12:
                    32:7d:b1:a9:fa:5c:4a:47:22:03:00:87:50:80:2e:
                    42:bf:05:d7:eb:46:99:48:f8:b4:be:0a:78:76:84:
                    77:29:2c:65:8a:43:b2:4e:d4:da:da:28:f6:83:84:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:21:27:EC:B3:DC:39:D1:98:4C:EE:AD:D8:63:3A:F7:A1:09:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b97836f0-2d82-3f78-be48-98ed48fe7727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.246.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bf:75:3d:7b:f1:8a:31:c7:b4:53:fc:45:05:1b:b8:f4:0f:
         82:b9:33:44:4c:37:49:74:dd:0f:79:fb:cc:d7:bf:11:c5:1e:
         af:07:00:05:f0:e2:2e:d0:a0:1d:96:b4:48:30:1b:22:c0:41:
         47:65:4d:37:71:53:5f:86:e0:25:19:a5:7c:cb:0d:9d:19:a1:
         a6:d8:1d:39:d5:15:42:5d:92:24:c9:96:bd:57:d8:d6:ec:78:
         64:6a:2d:65:57:15:27:83:d1:a8:16:2f:a0:b2:fb:36:88:ef:
         e5:d4:e2:e9:1e:e1:4d:46:cb:dc:e9:ed:43:80:f5:41:59:e5:
         cc:b1:b7:95:0d:05:b3:c0:1e:c8:d1:90:d1:31:fc:49:dd:1f:
         84:63:f8:1a:06:1d:90:5e:a1:92:f0:c7:fe:ee:38:1b:12:df:
         0d:3e:a0:8f:00:8e:86:f7:16:88:50:99:13:f8:05:45:62:6d:
         91:2f:cf:ff:9b:2e:a2:e4:5f:35:6b:61:9c:46:d8:c9:70:98:
         d9:19:09:31:ba:a9:83:7e:3d:f4:19:96:f1:e8:53:bc:4b:3e:
         4d:4b:7a:50:c4:a5:e9:26:f3:2f:96:71:73:f5:5f:7c:b3:8e:
         66:ac:7c:7b:1e:b9:49:b0:70:6e:88:b8:b4:45:a8:4f:32:ea:
         79:0f:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:43:55 2025 by rpki-client