Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c3bd1283-c317-3140-a9c2-801632d68d20.roa
File:                     c3bd1283-c317-3140-a9c2-801632d68d20.roa (raw, json)
Hash identifier:          kQ3rKB+esbf25VB1hJkGA8pdWWEFq9x4dJKjm88tZ28=
Subject key identifier:   D0:CE:66:33:8F:C3:9D:2D:DA:F6:D9:8C:24:61:7E:11:1A:13:BB:A1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE6870C874704B3826180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c3bd1283-c317-3140-a9c2-801632d68d20.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        71.79.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e6:87:0c:87:47:04:b3:82:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ffef6c0a-a8bb-450f-a7a7-c03d3f11f21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7b:ff:e7:d7:46:93:37:ae:28:32:dc:5e:da:
                    ed:c3:e1:dd:0c:c7:38:18:07:ad:d2:2f:78:31:e9:
                    56:14:07:77:15:a5:d2:bf:eb:c4:ca:05:29:0c:cc:
                    94:21:a8:05:04:1e:67:f8:15:3b:66:80:0e:b7:70:
                    8e:76:16:e0:6d:18:75:8a:62:82:5a:5e:b6:72:a7:
                    5e:6d:cb:5c:2f:fd:a1:3c:01:15:f0:96:21:c5:bf:
                    f1:97:ed:c8:7c:cf:95:36:9e:eb:e6:52:0b:0d:7f:
                    02:c0:ca:6a:3a:6f:13:df:33:e0:57:3a:9c:04:0d:
                    e0:77:6c:33:6f:89:b5:33:89:df:ed:19:39:a0:40:
                    96:53:8b:2d:ef:b7:8f:f0:7a:7d:3f:b8:23:93:c0:
                    94:98:d8:0b:5e:b5:85:d3:ad:03:26:03:82:d8:53:
                    7a:55:60:67:cf:82:5d:4e:68:34:c1:0c:08:e7:94:
                    01:85:aa:2a:c7:4d:8c:77:54:91:e1:48:c8:f5:16:
                    46:d3:5c:12:95:27:64:42:3b:ca:75:2b:bd:cb:bc:
                    60:4e:b5:77:3f:f6:0e:1d:08:9b:3b:37:c6:ad:c7:
                    c9:63:b4:5a:59:ac:63:fb:12:38:48:6c:74:d3:90:
                    8f:54:20:d3:34:31:27:5c:60:ea:59:4f:ce:a3:79:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:66:33:8F:C3:9D:2D:DA:F6:D9:8C:24:61:7E:11:1A:13:BB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c3bd1283-c317-3140-a9c2-801632d68d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.79.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:d6:64:71:ca:e0:5d:c4:45:73:66:93:f2:b3:d8:43:50:
         b2:41:02:d3:48:3b:4d:76:04:2b:db:5b:90:4c:16:7b:fc:04:
         b1:db:1b:a3:35:82:75:4b:b3:bf:35:54:7f:c2:d5:22:cd:07:
         7a:e6:9c:5d:62:96:aa:ab:f4:46:d0:4f:f8:d1:45:5f:fc:2c:
         77:be:ce:54:44:6d:8b:b1:d8:f8:7b:88:e4:d0:ef:7a:ef:cb:
         cf:dc:90:8e:cc:cd:3b:9a:e7:07:ab:7e:d1:bd:c3:f2:c2:21:
         4c:c6:f1:f4:f6:1a:86:2a:6b:ee:5c:d9:3c:dd:0b:25:d5:09:
         b2:5c:60:70:e0:ba:a1:36:d4:76:fe:a8:d6:ae:c5:97:61:88:
         bd:17:b9:41:c3:31:34:95:0c:35:9e:24:f3:9e:f9:7c:80:f2:
         32:67:03:08:7a:73:a3:99:aa:d0:00:df:5b:ac:9e:1f:4f:c1:
         97:97:8d:8c:c3:85:9f:86:fe:a0:21:f9:39:af:a8:20:86:bd:
         dd:ce:75:05:96:b1:29:22:0d:09:da:2f:3d:48:22:d3:81:8b:
         76:84:a4:3b:14:7f:aa:53:09:a7:31:c2:57:52:a7:30:24:d7:
         f8:12:88:38:b5:e0:6c:53:06:1a:66:40:83:28:41:45:2f:97:
         ed:62:ca:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:24 2025 by rpki-client