Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa
File:                     cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa (raw, json)
Hash identifier:          ZzjgXOHCLnq8nnQFnSZDk+FHupfFPUjOSenVKyXsNho=
Subject key identifier:   AF:B4:BE:D9:6E:00:1B:A9:75:D6:84:03:94:60:62:2D:E5:66:DC:B2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CD9B75475BA2F1964D380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     3456
IP address blocks:        2001:1998:3100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:d9:b7:54:75:ba:2f:19:64:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f33228f2-56e2-424d-a909-e7392561a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8e:31:73:85:fe:4a:76:a4:63:45:24:aa:fe:
                    a5:8a:32:64:20:83:ae:32:cd:0e:6a:5d:52:ff:42:
                    0b:85:33:2c:64:ff:a0:c0:17:95:2a:4f:39:62:6b:
                    f4:2f:55:eb:58:8f:37:47:d3:79:3a:a6:a3:32:91:
                    94:5a:fc:45:9a:f7:c5:85:1f:90:82:f1:e1:3d:81:
                    3c:f2:5d:93:21:f9:ae:3f:fc:0f:ab:51:43:d5:9b:
                    3b:a0:53:93:85:bd:c5:b3:79:17:8a:5b:3a:29:ae:
                    a3:b1:d9:d4:82:67:25:db:38:10:23:03:f8:c6:b9:
                    a8:10:97:4d:ed:a5:98:56:35:42:04:33:46:73:03:
                    9a:d0:90:95:a0:a5:4c:49:29:ad:61:59:1a:e9:bb:
                    2b:7d:62:d2:a7:e9:8d:7f:ad:39:07:02:59:0b:26:
                    cb:d9:e9:fb:50:b8:4d:87:67:fa:35:4c:bb:ce:7b:
                    ac:8f:ce:12:cf:b4:4b:60:03:cc:3d:c0:a4:06:48:
                    15:3b:d1:7f:6b:b3:e9:15:7c:db:34:04:da:8b:8f:
                    5e:80:3b:e0:e0:fb:bc:21:3e:b0:b0:9c:66:27:f3:
                    5c:71:dc:12:9c:57:b6:0a:b8:c4:4c:a9:75:51:0f:
                    f2:dd:c1:3a:32:2c:35:37:02:17:2d:a5:da:8c:75:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:BE:D9:6E:00:1B:A9:75:D6:84:03:94:60:62:2D:E5:66:DC:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cb27fcd7-e91a-3f7c-ac5a-68a3e53a0caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1998:3100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:6a:e4:91:44:bd:a4:77:6a:9d:5d:dc:e7:6f:24:e0:a7:
         15:c4:23:ee:b0:b8:7e:b6:bb:3e:5e:8d:05:7d:22:df:9a:9f:
         e7:78:0a:d6:dd:bf:36:f2:5a:e9:16:39:36:f2:1b:a6:16:72:
         24:f4:ca:80:04:bc:ed:e0:ba:64:32:9f:40:8c:44:4e:48:9c:
         60:60:4a:7a:99:09:7e:65:ac:81:8f:32:77:75:0e:fd:70:c3:
         d5:82:bc:3d:e9:f7:c7:31:9e:29:e7:b8:37:c4:03:14:60:cc:
         a9:cd:78:96:7c:0f:c8:99:bf:f9:05:bd:f4:c7:e0:c8:8a:fa:
         98:71:38:90:ad:53:dd:af:45:7d:48:e8:40:e8:e1:02:b9:fa:
         5c:fa:72:80:30:2d:74:18:be:03:84:e7:25:89:e2:5d:a0:8d:
         10:f1:d5:ae:c1:8d:fa:fa:41:dc:fd:4c:39:64:f1:f1:27:56:
         0c:a8:72:9e:78:4a:09:23:f5:43:b2:f2:bd:d5:87:a2:28:f1:
         50:90:e1:6f:3d:b0:ca:ae:54:5d:84:9d:3c:c8:38:41:b1:d7:
         fa:b3:0f:d8:04:8a:6a:3c:0e:06:5e:97:d7:46:6d:03:72:c2:
         d5:a8:62:fa:de:1c:6f:34:e6:e0:70:2d:bd:b1:6e:8b:39:c1:
         da:28:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:57:51 2025 by rpki-client