Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d94152f1-ff6d-304e-b677-f3c952c37f42.roa
File:                     d94152f1-ff6d-304e-b677-f3c952c37f42.roa (raw, json)
Hash identifier:          nUKgltm/io4jYVA9dZBipf0EmBh8TI0S+WV/4ErLQfw=
Subject key identifier:   8B:F1:E1:F5:46:8A:DE:DA:C6:1E:77:A2:89:33:FD:CA:29:27:2C:56
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D3DFF9334E27C119E5E61B120
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d94152f1-ff6d-304e-b677-f3c952c37f42.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     10796
IP address blocks:        24.163.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:93:34:e2:7c:11:9e:5e:61:b1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=bdf5572f-2993-467c-81d4-6fe91d480dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:44:04:81:50:f2:45:ef:67:0b:9a:57:f0:
                    d2:36:6c:30:d1:0c:40:8e:57:81:89:52:3e:8d:3b:
                    dc:f4:51:83:7b:e0:dc:8d:19:58:58:59:e0:4b:e3:
                    ba:22:49:ed:76:0a:47:18:8b:6f:1f:0c:96:c6:1f:
                    ae:6c:87:8c:2a:8f:57:23:08:cd:96:3b:2b:74:c3:
                    22:ff:52:1b:aa:ca:67:bc:44:a5:d5:1b:19:50:62:
                    b3:75:a7:8c:39:b9:98:e4:57:0e:1a:36:fa:1a:37:
                    7f:97:45:51:59:86:88:4b:8f:e2:72:4d:3b:48:aa:
                    05:86:0b:e5:27:f1:82:72:6a:a1:11:7a:de:11:ee:
                    85:db:fc:88:53:ea:e9:3f:a6:93:ab:90:04:6c:04:
                    bc:3a:8f:f1:78:39:4e:53:b0:e4:d4:cd:53:47:bd:
                    e3:0c:1c:fa:9e:0c:7a:ba:c3:56:36:7b:47:cf:30:
                    e6:8c:35:00:eb:41:22:22:ca:68:05:10:25:f0:21:
                    1f:99:9c:4a:4d:69:bb:e7:84:46:7e:f5:98:cc:f3:
                    e7:cb:f3:6d:bc:2b:fa:be:44:e0:54:59:b1:97:58:
                    d1:a2:23:10:53:c6:40:41:6c:7e:3b:cc:c5:08:c9:
                    dd:23:59:40:6c:78:82:d0:76:52:65:e5:aa:b5:21:
                    ac:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F1:E1:F5:46:8A:DE:DA:C6:1E:77:A2:89:33:FD:CA:29:27:2C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d94152f1-ff6d-304e-b677-f3c952c37f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.163.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ae:85:0c:2d:e5:f1:d1:70:5c:58:f7:5b:73:35:8b:b8:0d:
         a5:02:69:38:ac:56:4b:ad:c6:55:0e:31:61:c3:3e:0c:6f:13:
         0e:6e:1c:98:8b:00:dc:48:61:f1:31:a9:09:d1:54:83:f3:54:
         04:fa:6e:bd:5b:33:45:4e:5b:20:2d:62:58:31:44:bd:84:d5:
         9f:18:0d:f5:7a:d9:0c:e5:90:31:0f:f1:13:ce:e7:22:c6:56:
         e0:3e:c7:6d:67:e7:c9:dc:98:c5:d3:b1:7e:8e:06:a9:2d:cf:
         da:4a:f7:4b:36:85:bf:c3:7f:d7:00:5b:8b:04:1d:ef:c1:89:
         38:e6:28:54:ea:ad:83:a6:68:e2:38:c9:94:93:4a:3a:52:69:
         79:22:be:d0:1c:e4:84:0d:7d:6e:92:2e:df:02:c8:b3:c6:d3:
         58:ca:77:b8:f7:4d:3c:a2:16:f4:23:e1:07:6a:51:e4:89:b2:
         48:62:72:44:df:f4:cc:a7:86:b0:40:c0:17:6b:a3:b1:7e:ca:
         7a:0f:7a:5c:f8:5d:ae:a2:4e:c3:e5:a6:09:46:82:5f:29:6c:
         9e:43:2f:98:c9:89:39:8b:4f:db:c5:c4:4b:5a:27:b8:82:c2:
         71:1b:e1:ed:c1:c0:46:2c:ff:01:77:75:4c:26:26:fe:a5:05:
         43:68:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:53:48 2026 by rpki-client