Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d94152f1-ff6d-304e-b677-f3c952c37f42.roa
File:                     d94152f1-ff6d-304e-b677-f3c952c37f42.roa (raw, json)
Hash identifier:          1QUCXANXUGxzjV1jKlKcvtL9IFfMV2D2/DJ/W+S1UCA=
Subject key identifier:   EA:B1:7B:2E:67:62:C4:05:50:56:4F:71:A0:99:2A:41:C0:41:5D:53
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F6292C8799A3B8C98D9EFFB80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d94152f1-ff6d-304e-b677-f3c952c37f42.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        24.163.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c8:79:9a:3b:8c:98:d9:ef:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=0f8946ed-9afc-4457-aba9-6ee544917e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:48:56:c9:bc:a3:9d:59:77:ef:b4:67:97:
                    9d:7a:72:1d:77:4a:ae:08:e3:40:89:86:7d:c2:b3:
                    c4:87:20:cf:e3:e0:18:a2:21:25:0c:40:cc:68:85:
                    6c:0b:a1:77:56:90:a8:6d:be:23:cd:b2:a2:70:b0:
                    52:73:ee:58:8e:03:eb:5a:da:10:b3:d9:1f:c2:3e:
                    12:d8:57:14:f2:3e:04:0d:d6:90:c6:92:51:c3:18:
                    52:16:0b:fd:94:46:a4:13:0e:92:73:51:ed:67:c3:
                    32:46:e9:c4:fd:ed:5d:81:dd:90:19:37:63:33:4b:
                    74:63:ff:71:ee:8f:f8:eb:36:ab:5d:67:ca:69:87:
                    99:1f:04:81:14:59:0e:01:5a:e9:d9:c2:d4:44:b8:
                    10:56:03:22:30:ea:c2:c2:c7:6c:47:7d:17:fc:7c:
                    b4:32:0b:11:4e:b8:af:b9:0c:d3:87:72:80:bf:0e:
                    30:ca:fd:b5:5c:89:cc:29:fb:88:f6:8f:c8:6b:0e:
                    f7:f3:ec:b5:ee:06:b2:fc:2f:20:50:19:3d:0b:51:
                    71:5e:75:93:a8:86:92:6f:0f:a3:23:67:98:ec:61:
                    66:33:82:c1:34:37:29:cf:31:d8:46:da:5d:d5:79:
                    15:3d:af:94:9c:eb:0d:00:f4:9e:51:c2:c3:c8:1c:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B1:7B:2E:67:62:C4:05:50:56:4F:71:A0:99:2A:41:C0:41:5D:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d94152f1-ff6d-304e-b677-f3c952c37f42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.163.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f7:f2:48:9c:11:b8:77:1e:1d:37:1f:06:66:19:a1:97:c3:
         5f:d2:b9:25:9f:2a:60:06:fe:05:8f:e4:6c:1b:bf:fc:f0:56:
         0e:5f:9b:8d:72:2d:65:74:db:97:3c:1a:dd:bf:20:41:05:36:
         50:30:09:96:f2:df:54:41:0c:8a:b6:3f:3e:5d:70:ec:60:45:
         04:38:50:40:b5:7f:b6:19:ce:ff:aa:5d:05:4c:19:2d:d1:11:
         18:b2:99:8b:de:be:77:b9:24:b6:20:2d:1a:80:96:74:68:4c:
         46:fb:0b:b5:34:23:63:3c:e1:ac:46:b6:3e:b0:ef:6f:0d:3a:
         c1:ac:59:a2:65:81:2b:4a:9d:6a:de:e9:34:77:cc:d4:9d:0e:
         84:ef:bc:bf:e7:1c:3b:7e:cb:c1:86:1f:a0:8b:5d:ab:9f:55:
         a4:01:ca:06:74:04:53:b1:e0:b0:ce:59:55:7b:83:ee:c0:c0:
         0a:73:4a:74:b0:a2:4d:52:de:04:e5:26:18:cb:a2:79:ce:6a:
         05:cb:78:6d:59:9c:c1:a1:26:b1:a5:03:7c:1c:57:d8:dc:99:
         4e:ea:91:d0:ea:ef:c3:75:e7:29:e1:03:d3:c5:cc:15:fd:78:
         8a:26:69:3f:da:0a:e1:2f:4e:1b:99:fc:f6:2f:dd:27:f7:99:
         5c:41:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:56:50 2026 by rpki-client