Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bcc24a87-1525-381a-9ab4-a93a265eef57.roa
File:                     bcc24a87-1525-381a-9ab4-a93a265eef57.roa (raw, json)
Hash identifier:          QnhmHg2QwGnSu++rRqezHMOX6IL/d0B+OI5wH75H1/Q=
Subject key identifier:   B5:45:59:9F:30:95:21:91:CE:5E:2C:CA:C7:9F:1F:FC:CA:E0:7B:4C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA7F4583B8029A4CF73A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bcc24a87-1525-381a-9ab4-a93a265eef57.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11426
IP address blocks:        172.72.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:7f:45:83:b8:02:9a:4c:f7:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=d402f6d6-79de-441e-8821-3e3841cf45f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:ac:26:5b:17:7f:b2:9e:22:19:7f:41:bd:
                    71:10:08:d9:33:46:cb:a5:8a:33:f7:f2:8c:eb:a2:
                    22:82:41:aa:9b:7b:ea:31:a0:91:98:cd:93:eb:1f:
                    10:a8:5c:50:a7:c8:4e:0e:6c:5a:c2:b7:b2:b0:e5:
                    89:32:e7:d2:ef:64:4d:90:d5:2b:13:42:5c:36:58:
                    df:de:6a:61:0c:20:09:bc:50:8e:55:b4:61:b3:de:
                    7d:99:6e:60:4d:68:4f:0c:69:c4:e5:ca:25:19:5b:
                    79:23:d5:50:75:78:71:86:7b:77:c7:2e:41:1e:b5:
                    36:f4:92:56:8a:94:7a:c7:08:3a:31:32:7c:79:d2:
                    48:07:fd:40:df:3e:53:39:4e:d7:39:e5:22:2e:dc:
                    b2:48:e4:46:8c:9f:65:36:de:6a:96:e5:7b:81:8b:
                    aa:db:c8:68:b6:aa:eb:a8:68:d9:72:d9:65:2f:fd:
                    69:e5:d8:8f:af:19:ec:80:91:bb:93:31:f7:a0:95:
                    15:f1:9d:ce:db:e9:dc:d2:92:12:ca:d8:34:30:ce:
                    84:4f:f9:2d:1c:a5:6c:31:59:55:50:5d:13:44:b6:
                    56:72:5f:11:d8:3e:5c:88:f7:e1:ca:f9:2f:cf:3d:
                    ce:6a:f2:d7:e1:e7:11:59:a5:41:5c:f7:3c:ff:e1:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:45:59:9F:30:95:21:91:CE:5E:2C:CA:C7:9F:1F:FC:CA:E0:7B:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bcc24a87-1525-381a-9ab4-a93a265eef57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.72.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:87:10:b6:20:79:03:d8:1a:90:83:78:f5:5e:cb:f2:12:73:
         74:24:25:e0:52:1b:b1:e2:84:83:7b:93:79:b4:6f:41:c9:14:
         81:d0:2c:e0:a6:11:39:ec:c6:fd:37:98:77:7e:19:a7:ff:76:
         ba:40:6c:15:f3:8a:58:24:5e:40:1a:e6:b7:c7:ca:a2:18:e4:
         55:ac:05:51:0d:a9:d6:ed:c8:ba:81:d8:80:1a:7c:95:51:9c:
         1e:fc:06:a5:c2:d7:da:ff:17:38:59:f4:81:e0:fa:dd:bf:45:
         1a:11:df:ff:a6:ac:dd:5c:14:87:bc:46:d6:96:37:bd:37:84:
         e9:cd:8f:4a:76:96:2c:1b:4a:13:35:81:7c:9c:41:78:26:84:
         d4:55:1e:0e:07:c9:51:b6:db:83:58:d0:39:b9:f9:42:c0:5c:
         04:2a:cb:a7:6b:c8:a5:3f:49:cc:27:a5:78:66:8d:4c:e8:d8:
         4c:66:ad:81:a0:c2:4b:df:d0:12:c7:b8:54:ff:19:85:c5:8f:
         95:dc:5f:7d:b8:96:0b:9b:10:37:76:68:5c:6f:53:db:46:08:
         7a:91:b3:60:6f:00:b6:10:c4:cf:a0:80:79:be:cb:ab:a5:ed:
         de:c5:64:22:e4:d7:6a:fc:62:62:8a:1c:9f:b5:a8:38:25:e5:
         3f:f0:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:08:17 2026 by rpki-client