Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b9e1b99c-18ae-3734-81ed-c1539a3f0b3a.roa
File:                     b9e1b99c-18ae-3734-81ed-c1539a3f0b3a.roa (raw, json)
Hash identifier:          MyORM55m6Kp163R/8nD+3aCxELw0Cd1HwkwmO5f4rq0=
Subject key identifier:   C8:86:68:11:F0:47:F9:E1:3E:20:DA:EE:9B:51:53:A0:ED:12:7A:5B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D1A03B8CC993F81FE0580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b9e1b99c-18ae-3734-81ed-c1539a3f0b3a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        67.9.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:1a:03:b8:cc:99:3f:81:fe:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c8127efc-2b40-4d39-948f-7262ae4453e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:5f:3d:fe:49:70:19:e0:eb:f7:62:56:5f:
                    ee:51:2c:8a:21:8c:3b:90:4c:72:f9:cc:b2:df:13:
                    23:25:64:53:90:5e:2a:1a:0a:a3:db:9a:3e:3d:f8:
                    10:19:ff:87:1a:00:97:80:fe:d6:cf:38:86:8c:03:
                    23:4c:bc:03:37:e9:f1:a6:73:23:66:04:02:50:ec:
                    1e:65:16:e2:be:a4:65:05:2e:ca:68:0b:69:29:7d:
                    ac:23:9c:fa:f6:58:5c:72:c2:30:24:a7:92:f7:e6:
                    53:a9:1d:e8:e5:2f:b1:00:d4:f2:c9:e1:54:30:74:
                    d5:1e:48:59:4a:6a:76:bd:57:b0:b2:b2:cf:58:19:
                    45:c6:2c:80:ad:b4:e9:09:a6:95:ef:8a:e8:2b:21:
                    a6:98:d2:1d:4e:9f:42:f1:f9:a9:b4:d0:28:b0:52:
                    7e:04:43:9c:e5:3f:bd:34:06:5c:4e:48:a6:3e:d2:
                    80:77:82:cd:4e:da:8a:ee:9e:ed:fa:ac:ac:eb:36:
                    cb:4b:a8:7f:bc:99:63:af:c8:b5:4e:20:23:f6:78:
                    88:d4:30:54:95:4e:6a:91:80:05:39:1f:81:5d:6f:
                    3c:0b:8c:a2:e9:98:a5:31:60:2d:aa:b0:6e:bb:02:
                    0a:5d:bf:47:79:af:2f:63:3b:32:90:f7:22:79:63:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:68:11:F0:47:F9:E1:3E:20:DA:EE:9B:51:53:A0:ED:12:7A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b9e1b99c-18ae-3734-81ed-c1539a3f0b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.9.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d3:b7:93:e2:b1:83:78:2b:8b:74:e2:e4:2f:b2:ce:b8:95:
         45:cb:be:dc:91:7e:33:a8:04:cb:e8:1b:66:e3:12:83:d5:ab:
         a0:00:63:c5:61:b0:8e:16:bc:86:d3:01:da:04:0f:6d:24:b9:
         44:80:51:cd:c0:51:ac:48:3b:9b:a7:41:2c:45:04:54:e1:6e:
         75:a5:69:6c:7a:d9:24:75:4b:ac:b3:c2:28:72:79:92:b4:25:
         1d:47:66:06:db:3c:e9:df:38:ea:6c:8d:66:6c:d2:ad:1e:36:
         fe:c3:7a:b3:d0:4e:58:a2:30:bd:88:4a:da:a3:f1:ca:96:9e:
         7c:8d:75:21:c7:61:44:98:22:96:82:d0:20:5e:58:86:4e:2d:
         43:8c:b8:c9:9a:c9:ac:c3:bb:0b:8d:05:5b:bc:18:06:f7:e8:
         9e:d4:e8:c6:63:cd:9b:db:85:c6:d5:6b:b7:72:ed:91:c9:88:
         7e:eb:28:f9:52:aa:1e:98:bd:08:61:22:e6:87:96:6c:34:71:
         09:68:22:f7:45:9f:64:e1:77:12:3f:25:dd:6c:5d:9a:dd:84:
         9d:a0:4d:d4:27:ae:d7:83:bb:0d:52:16:00:9d:ad:9b:7f:4b:
         26:20:f6:2c:2b:93:87:54:bc:e9:75:3a:1a:65:42:f5:df:c3:
         08:60:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:41 2025 by rpki-client