Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c81216d1-8de7-3001-88c6-901852add926.roa
File:                     c81216d1-8de7-3001-88c6-901852add926.roa (raw, json)
Hash identifier:          mYRW160yWxxmwTTglgdflWqMhRz+NWu/vr6PoR7OIS8=
Subject key identifier:   21:B5:C4:B9:7A:EF:21:D1:27:93:0D:96:84:84:46:B0:FA:C1:3A:40
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F57682DEF2EE99F64311F4580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c81216d1-8de7-3001-88c6-901852add926.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        192.198.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2d:ef:2e:e9:9f:64:31:1f:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=10091c8c-4d6f-4f5d-9cf1-5f4ba1795841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:52:89:86:2d:de:6f:df:fa:5e:6c:9a:e1:5c:
                    01:1b:33:28:a7:b4:d5:f1:59:80:0b:b5:23:25:1c:
                    13:c2:19:57:31:14:04:d4:fb:bf:9c:52:9e:c3:e2:
                    19:9a:58:2c:8c:f9:b3:b0:ea:ec:5d:71:e1:c6:24:
                    ad:f2:61:ba:90:ec:f2:a5:22:25:fa:2a:58:cc:d2:
                    db:28:60:3f:a3:f5:b9:a4:88:8c:75:59:d0:fd:42:
                    c9:17:4e:8a:7e:15:67:ff:7c:17:74:e8:9c:b2:d2:
                    67:92:af:fe:de:05:df:3c:68:6d:6f:fd:a9:a8:3e:
                    39:35:c2:a1:f2:28:16:96:33:f1:e3:e7:4b:88:63:
                    9d:34:92:a9:5a:8f:48:ef:a2:a4:11:a0:94:8f:a2:
                    05:b6:b3:36:ee:c5:7d:26:f3:eb:2f:9c:b4:15:57:
                    b6:b2:56:47:f1:4b:79:5b:5c:04:5b:80:9d:0d:ae:
                    9d:17:d2:c1:17:15:15:ee:22:3b:dc:0a:2e:25:7d:
                    29:1b:52:c2:6e:89:05:81:f9:ac:b0:66:21:48:c8:
                    6e:d7:33:c4:6e:dc:d0:6b:57:64:0e:87:4f:53:54:
                    27:6c:b3:9d:e8:c0:36:91:42:03:66:29:35:53:05:
                    a0:f3:b9:fe:29:37:cf:77:2e:c9:5c:12:58:7f:5a:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B5:C4:B9:7A:EF:21:D1:27:93:0D:96:84:84:46:B0:FA:C1:3A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c81216d1-8de7-3001-88c6-901852add926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.198.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:9c:4f:dd:fc:5c:57:91:18:a4:f2:00:56:dc:cb:f8:7a:
         64:2b:2f:3a:d1:57:33:e3:ff:86:ba:d1:2e:95:75:db:4f:ca:
         de:83:b0:66:a4:6a:c8:21:1c:f2:eb:1b:3f:00:99:f7:a9:8b:
         3d:85:da:40:d9:dd:52:b8:7d:b8:7f:ce:c5:0d:2e:9e:72:48:
         73:dd:b6:cd:79:08:e5:93:72:30:0e:02:cc:e5:7b:4b:8a:cc:
         d1:e1:bd:2e:03:41:3e:4b:9f:d7:a3:47:5b:8f:b2:79:84:4e:
         00:a2:c1:2a:ed:45:a8:d0:af:ae:d0:d5:6e:a2:a1:0a:0e:c8:
         7c:1e:8b:57:38:0d:00:0b:51:c1:01:82:eb:d0:31:88:21:f9:
         58:95:3c:90:b3:97:65:5c:f9:14:b9:89:ef:9a:a5:f8:27:f6:
         ba:90:4d:d5:58:dc:68:9a:9e:b7:19:bd:32:cc:86:8f:11:51:
         4f:de:fa:9d:1c:13:d6:da:bc:62:a3:71:11:08:b3:2d:1c:0f:
         e6:b0:91:22:b8:f8:c1:7f:ce:96:a8:6a:1f:8e:f8:2e:e9:b5:
         0b:40:4e:20:57:77:96:3e:e3:f9:63:1d:85:37:e5:eb:8d:4d:
         5f:48:43:11:8d:69:43:82:e9:64:a5:39:90:d5:74:aa:de:e6:
         9c:6f:98:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:52:56 2026 by rpki-client