Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa
File:                     cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa (raw, json)
Hash identifier:          Q9VmU+g3//Jel72jX8VODAlaDMKCf1CyCFjNhAVg5EA=
Subject key identifier:   E1:BB:A0:83:79:26:03:0B:3F:A8:C7:91:42:55:30:E2:44:2B:DA:83
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1611D7CF48C9502444C8D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     27325
IP address blocks:        24.227.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:1d:7c:f4:8c:95:02:44:4c:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=9d092cc1-67e1-447b-8c03-07c479b3ff56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:84:4f:69:64:6f:9f:ee:f5:1e:3c:ca:fa:
                    c3:f8:88:ab:85:c4:c1:6f:51:b6:ed:72:e3:ad:44:
                    1d:08:dc:91:59:c1:6d:25:39:50:5c:4f:c1:41:d2:
                    ba:41:84:a1:0c:b1:55:23:9d:f4:87:46:ad:6c:31:
                    fe:41:cf:e4:f6:fa:82:3c:3c:1c:56:b8:27:b3:42:
                    50:b7:92:2b:70:4d:b1:f4:35:69:28:02:a7:5a:a9:
                    d9:74:4f:1f:29:e8:22:5e:e0:fd:44:24:e8:88:55:
                    7d:b2:9f:cb:b1:05:8c:8d:22:72:13:67:ec:1c:f1:
                    e4:3f:4b:a3:de:8e:51:ed:08:bd:12:08:1d:a5:ac:
                    1d:82:67:cf:12:23:ee:18:44:fc:5d:0c:c0:19:ab:
                    2b:08:e4:48:a8:fa:a1:6c:b9:30:c9:d1:f3:9e:b9:
                    ac:0c:41:66:2e:a9:67:8c:5b:f1:e4:ca:ef:33:d5:
                    1b:fb:48:73:d5:90:6d:03:24:07:67:67:00:68:22:
                    e0:b2:c2:28:22:06:a5:13:4e:bd:8b:ad:2c:43:cc:
                    f6:92:2d:da:d4:8d:2e:28:7d:ff:ad:3c:96:8b:55:
                    e6:7a:6e:2c:d7:bd:a8:16:47:0a:e7:c9:b5:7d:b6:
                    e8:11:62:de:fe:b1:cc:4b:a2:ed:4d:b4:92:73:92:
                    0a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BB:A0:83:79:26:03:0B:3F:A8:C7:91:42:55:30:E2:44:2B:DA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cac9c090-97f5-3d8d-89fd-e86b9147a85b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d2:b2:6b:cb:59:b5:cc:7e:ff:24:ea:90:bd:de:d6:58:80:
         d8:7c:82:d9:95:19:35:91:1a:cc:3a:cb:db:c1:1f:57:70:9e:
         88:fc:f8:ef:cd:2a:12:7a:b6:46:c3:3e:fb:95:50:e5:c2:83:
         c0:e1:04:1e:e7:96:8e:c0:08:6c:28:1f:92:0d:40:61:d2:15:
         38:04:07:72:29:9e:4a:ec:25:c7:a8:a1:bd:15:ba:9d:97:08:
         16:72:c6:f4:0a:a3:fc:bc:83:5f:bd:a9:92:a6:d7:27:c1:83:
         b0:84:ba:2f:4a:df:cb:07:90:71:61:12:77:8a:4a:45:18:bf:
         c6:47:96:0d:07:37:7b:81:3a:21:19:38:d6:1d:7d:00:41:80:
         f3:06:29:e0:a3:75:51:c0:4c:77:b1:bc:c0:f2:7f:5b:3d:51:
         9f:58:c0:c0:ad:bd:d9:a6:8a:6c:31:95:50:24:c8:1e:a6:93:
         8e:f3:7d:ec:62:24:4c:16:42:94:01:24:ac:66:65:3f:03:e2:
         8a:bb:02:85:38:97:9f:22:6f:73:52:24:6f:ab:11:7d:dc:6a:
         ad:02:cf:a7:b8:e1:a7:99:90:2d:79:c0:c5:e2:e7:ef:e4:83:
         d1:48:a7:3b:67:a2:87:c8:37:e7:0d:df:99:89:e2:78:75:c3:
         84:c6:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:03 2025 by rpki-client