Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba31b5d1-122f-3fff-8f83-d6ee60ba7d76.roa
File:                     ba31b5d1-122f-3fff-8f83-d6ee60ba7d76.roa (raw, json)
Hash identifier:          qgENJdCB0AIgoUsF1x3U7ieGYxD7R0CVCDUEgSgceW0=
Subject key identifier:   A7:66:EE:E1:86:53:A9:40:40:20:76:89:22:00:E2:D4:D9:89:C8:A2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F4B90B0C49C5893117BFE0E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba31b5d1-122f-3fff-8f83-d6ee60ba7d76.roa
Signing time:             Fri 25 Sep 2026 19:12:37 +0000
ROA not before:           Fri 25 Sep 2026 19:12:37 +0000
ROA not after:            Thu 24 Dec 2026 20:12:37 +0000
asID:                     23200
IP address blocks:        67.9.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4b:90:b0:c4:9c:58:93:11:7b:fe:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 25 19:12:37 2026 GMT
            Not After : Dec 24 20:12:37 2026 GMT
        Subject: CN=ad3c1cc7-3042-458c-82a7-fa66f98dd784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:1b:6d:2f:0c:da:9b:f0:68:df:4d:9f:21:
                    91:0d:47:3b:8e:11:7e:d3:bd:47:f1:9e:47:cb:0b:
                    9c:2a:bf:b0:43:3a:1b:8a:a2:d3:27:50:d0:4a:34:
                    6f:74:6a:ea:09:5e:e0:6e:66:fe:a1:ee:6a:21:f8:
                    6e:7a:b2:be:1b:6b:14:c4:48:e5:bd:af:3d:39:5f:
                    b8:fe:31:3f:53:92:b3:00:93:08:12:84:35:d0:46:
                    ce:ed:3a:93:55:cb:86:0f:33:fb:04:e0:3d:c9:bb:
                    f8:c7:d0:1e:05:1d:df:02:5c:ca:cf:9d:21:85:1e:
                    9a:79:e6:be:d5:b5:08:09:f9:5e:09:02:a0:db:51:
                    7a:95:64:37:9e:3a:4d:7e:14:6b:6d:8c:ec:04:41:
                    39:0c:eb:aa:cf:a7:d2:5e:f5:5e:51:bd:5a:c1:b9:
                    29:0c:77:d3:87:23:f5:4a:00:be:b1:53:59:35:8e:
                    62:b2:a7:cb:ec:8f:0c:f6:41:5e:bc:58:c8:69:51:
                    08:72:9d:46:53:ce:35:ee:c5:95:59:24:3c:c1:ef:
                    89:47:64:07:ee:30:8e:25:99:81:91:9d:4f:e0:84:
                    0b:1b:f8:3f:d5:89:24:ae:fb:6f:11:33:44:30:05:
                    70:f0:ea:40:78:df:5a:d0:e0:be:fc:53:29:b3:e7:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:66:EE:E1:86:53:A9:40:40:20:76:89:22:00:E2:D4:D9:89:C8:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ba31b5d1-122f-3fff-8f83-d6ee60ba7d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.9.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ec:e3:89:17:e9:bb:0c:f4:a9:79:89:76:63:82:86:03:db:
         74:7d:58:0b:64:a2:db:c9:f2:26:e7:b5:f2:d8:aa:6d:7e:15:
         6c:88:6a:19:3c:ad:38:3f:88:c4:30:b8:1c:29:c2:85:5c:e4:
         5f:02:ad:af:21:7c:7a:73:b2:c7:b5:c3:b8:d5:2e:c1:ed:6d:
         5f:d3:10:43:90:b2:57:f8:bc:6c:50:55:a3:61:74:20:8e:f5:
         21:aa:97:75:6f:a1:ff:82:9d:4c:94:11:ad:a9:e0:a1:af:a5:
         d7:f9:8f:e1:65:cf:a3:67:29:00:7d:c6:73:ef:91:12:4b:57:
         0e:1a:18:d5:e2:05:ca:e2:cb:26:1d:85:41:75:1a:87:98:d1:
         02:5b:c0:86:63:d5:cd:f3:de:ff:8d:2d:e6:9a:d1:c8:eb:f0:
         32:d3:6e:30:eb:8f:76:f2:1f:0d:5e:ed:1e:82:94:a3:20:a9:
         13:13:13:f1:84:08:82:1d:b8:f9:51:5f:44:82:79:9f:38:da:
         6d:ae:8e:6e:1f:9b:fa:a9:9f:f3:9a:bb:b0:36:0a:78:5e:d9:
         da:5f:0c:2e:2b:3f:81:82:8a:75:49:90:53:11:70:65:5d:06:
         82:e3:af:99:de:4d:0e:92:9a:ac:c4:b9:02:d2:e5:f6:a9:94:
         b2:25:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:11:26 2026 by rpki-client