Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ce95e5b0-7beb-3c33-9ef0-c75033b98501.roa
File:                     ce95e5b0-7beb-3c33-9ef0-c75033b98501.roa (raw, json)
Hash identifier:          kChBtnJLZKHFlHTSBsg2Zer5YOWkQrEq0kiJykEEpDs=
Subject key identifier:   0C:9F:73:5A:A5:A3:D7:01:A9:4E:E7:C1:1F:70:D6:56:B9:CC:9D:4E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DADA9ACFF1957D72ACC50
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ce95e5b0-7beb-3c33-9ef0-c75033b98501.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        67.48.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ad:a9:ac:ff:19:57:d7:2a:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a7519143-cf8b-4bf8-82b8-8bd851b94bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:4e:e2:ad:95:a7:e1:bd:bd:ba:6f:80:57:
                    55:4e:a0:0d:5a:cf:fb:5d:01:58:6d:f7:c6:17:4e:
                    c1:0c:7a:25:6f:27:e5:35:d0:d4:e9:d0:c7:67:b9:
                    9d:a6:3d:4e:39:0f:e8:0b:0b:07:16:a7:64:65:16:
                    8c:e4:04:ca:dc:df:68:3f:79:50:3a:e5:ce:ac:18:
                    59:f4:fb:89:6f:de:18:43:82:c2:79:ac:65:97:7b:
                    e0:00:9e:fe:29:1f:4f:24:74:4b:8d:db:78:09:5c:
                    fe:24:77:07:0e:d0:a4:07:10:9b:d3:3c:8a:7f:42:
                    37:63:14:8d:ea:bf:1d:f5:c2:55:3a:bd:a1:d9:08:
                    5f:e0:62:60:cf:72:b7:9d:c1:40:0b:73:f1:47:6b:
                    23:31:10:d0:13:fd:84:0d:6d:d0:56:c8:e4:1a:63:
                    ef:55:94:04:2d:07:c6:c5:32:47:8e:af:11:01:7e:
                    9c:76:65:31:a7:60:ed:d7:5a:be:e5:77:cd:24:7a:
                    f9:de:e7:25:d0:f6:60:6d:1d:d8:c7:d7:29:38:75:
                    1c:78:e5:a7:b3:4a:8d:87:0e:8f:b4:d9:7d:a3:7f:
                    1e:22:8b:4e:3d:38:fe:54:7e:ab:a9:58:ff:8d:eb:
                    b2:b6:52:1d:e9:dc:75:28:ff:d5:8f:1b:8d:00:b1:
                    6c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9F:73:5A:A5:A3:D7:01:A9:4E:E7:C1:1F:70:D6:56:B9:CC:9D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ce95e5b0-7beb-3c33-9ef0-c75033b98501.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.48.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:22:4f:8c:1f:63:22:e8:49:70:4a:1e:f1:ed:f9:bc:45:e1:
         4b:ca:da:bc:5d:5a:01:d2:f6:75:6d:a9:8b:5f:1e:c1:eb:58:
         e1:a1:02:b9:ea:fc:52:02:4b:8d:8d:e5:a8:8c:55:9a:06:bb:
         ba:a2:26:19:6d:d9:c1:2a:6d:56:1c:be:83:f6:2c:80:ed:a6:
         36:60:eb:52:a2:04:ca:b5:d8:f8:6f:83:a2:1c:89:91:8e:ed:
         30:69:df:98:80:c2:2c:cf:3c:75:8f:e8:d3:af:1b:0a:4d:00:
         38:c2:f9:db:01:ab:25:5b:34:9e:c0:c2:ed:d7:2c:ef:c9:98:
         41:a4:8a:95:a2:76:67:7e:38:29:23:b8:16:cc:3f:78:7b:89:
         87:6a:e5:12:d0:73:27:e6:40:ae:48:d3:bf:05:85:68:41:ab:
         aa:dc:62:ad:87:d4:40:c4:71:bd:eb:d1:61:20:88:f9:af:8d:
         5a:ef:10:ff:8f:50:7d:d5:98:07:ad:8a:32:43:55:1d:9b:56:
         e3:da:21:64:c5:59:72:7c:57:fe:d9:18:69:62:ef:5a:e5:6e:
         5c:5b:8a:fb:1a:14:1e:86:60:cc:d3:39:7e:1d:00:54:2d:69:
         ef:6e:68:68:65:0a:ce:75:95:77:68:8c:83:af:b1:2d:61:c2:
         72:eb:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:19 2025 by rpki-client