Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d3dc212f-196d-3d29-a595-a4184311643f.roa
File:                     d3dc212f-196d-3d29-a595-a4184311643f.roa (raw, json)
Hash identifier:          VFuaY3Mgxsh7ExOksi+iw1yjBtKiViD9mxVUvjKAmuQ=
Subject key identifier:   DB:4D:1E:29:DA:4F:F7:87:AC:CE:A5:17:F0:06:50:92:A2:36:63:FF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DBEC2130C394B81033740
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d3dc212f-196d-3d29-a595-a4184311643f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        24.123.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:be:c2:13:0c:39:4b:81:03:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b5a06d96-7cd3-405c-b8bd-cfc92fa532ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6d:27:c2:66:f8:f0:82:54:ad:d5:ed:db:cf:
                    fe:59:a4:91:66:d2:2c:f6:30:e7:b9:43:7f:c0:9c:
                    d9:71:4e:74:ca:bb:14:10:3d:39:26:63:24:9b:cd:
                    ea:ac:89:3a:ff:cb:a7:6c:d7:4c:79:c3:7a:17:da:
                    f5:c5:21:fd:87:af:dc:c7:11:14:d3:8b:52:6c:51:
                    da:2e:42:21:bb:82:40:b4:a2:11:e8:e2:6e:53:91:
                    f7:2c:11:18:ca:f3:53:fc:1d:c7:39:37:96:69:3a:
                    08:82:98:89:1c:24:e9:ff:ea:53:de:f1:4d:2b:c7:
                    68:04:39:ba:b4:97:6b:8c:a0:4c:a5:6e:d5:cd:c1:
                    13:5d:24:d6:aa:a3:af:9d:f9:62:cf:6e:32:a6:31:
                    8b:24:e7:d1:c5:d6:8d:c9:54:f1:83:26:fb:f8:d3:
                    28:6c:84:6a:3c:c8:9e:46:b9:29:d0:07:b2:4b:8b:
                    2c:56:fb:8b:3d:30:66:89:eb:a2:d8:0e:fb:14:af:
                    02:bd:45:15:c7:e9:4c:4f:06:96:ea:05:93:65:62:
                    8d:d1:3b:f7:6a:02:46:28:4d:4f:cf:e6:75:61:1d:
                    4f:70:d3:d0:98:cd:1e:73:63:98:c6:74:54:4e:b8:
                    a7:b6:ed:ee:6c:e7:a1:4d:33:fd:19:8e:99:66:91:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:1E:29:DA:4F:F7:87:AC:CE:A5:17:F0:06:50:92:A2:36:63:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d3dc212f-196d-3d29-a595-a4184311643f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9b:68:4e:70:2a:74:72:05:04:d4:4f:d6:c9:88:d2:93:15:
         6d:07:5a:ea:b7:73:8a:66:31:07:45:a1:b0:7a:37:76:8f:0f:
         5f:4e:f1:ff:b4:c8:32:89:7e:42:76:b0:55:0e:c8:05:91:e8:
         12:e0:46:05:6a:1f:5a:1d:1f:18:50:bf:4d:a7:e5:07:f8:e5:
         37:3d:6c:3b:5d:0d:e4:e4:19:ce:cb:5b:b2:09:75:b8:8f:c7:
         a0:32:ff:6a:97:53:ed:89:71:2f:e9:69:0f:42:e9:89:72:66:
         8e:c5:39:bd:d7:de:03:8a:61:ef:c7:8e:c3:c3:82:fe:59:63:
         32:99:48:93:a9:e0:c4:6a:2a:f3:96:1f:7d:72:f7:90:0b:51:
         4a:c0:79:88:cd:f0:02:99:31:e5:ff:5d:7f:5d:88:5c:1f:4a:
         40:b4:4e:35:a4:b2:29:8c:bc:14:2a:13:ea:f0:aa:d2:c5:8a:
         96:68:90:b2:dc:98:87:bd:dc:60:1d:65:5c:0a:da:c4:7e:b7:
         04:91:c3:19:83:14:19:bc:f8:58:9b:a2:5b:e4:68:8d:db:04:
         69:5b:b3:ba:0a:bc:07:92:b9:48:88:67:06:7e:20:44:95:46:
         c7:1a:7d:f4:53:90:6e:6f:c3:a8:a7:c9:97:96:be:ed:f0:00:
         6a:6c:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:59:31 2025 by rpki-client