Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
File:                     ddb07463-be38-35e3-a789-7b573b75adc3.roa (raw, json)
Hash identifier:          octmll4OFsf2elEfBBQCTDkX+OIP8dcWNiiAPsewNQ0=
Subject key identifier:   48:17:FA:9F:8F:A1:4E:25:97:39:8F:78:FA:B1:BC:4B:08:94:F2:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA7B645BED7CE1D3A45FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11351
IP address blocks:        67.252.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:7b:64:5b:ed:7c:e1:d3:a4:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=6b455d61-5d2e-4e21-ae06-381d091a927c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:36:65:d6:ed:24:c0:1a:fb:33:0a:7e:bf:
                    c0:ed:4b:a5:46:75:16:40:78:cb:1e:50:43:dc:ef:
                    b2:65:92:f0:ea:f2:9d:45:86:8c:43:44:53:f0:ea:
                    a0:dc:76:d2:4e:9a:3b:b3:05:75:be:20:d6:b0:c3:
                    a7:86:1f:d9:5b:3e:39:e9:cb:e9:c9:52:9c:e7:71:
                    59:05:fc:f3:e8:0e:84:b0:aa:df:8d:93:aa:31:94:
                    31:ab:50:c1:4d:30:5f:9a:a5:a0:1f:38:54:4b:f7:
                    ec:ff:77:f5:7c:e6:cc:85:6a:1f:55:69:5c:5a:0b:
                    d3:1f:e1:0a:66:64:50:ab:c3:c5:17:4a:1b:80:09:
                    cb:00:de:a1:0e:54:5d:cc:ee:b1:18:5a:fd:bc:d9:
                    e3:0f:c5:49:f0:83:61:23:d2:95:62:7c:7c:5b:f0:
                    0a:f0:08:a6:02:42:e4:bd:98:a2:b0:2b:16:74:d0:
                    fd:92:11:85:88:7a:5a:19:26:b4:4d:49:43:b7:1e:
                    d2:2b:0c:ca:b3:ce:f1:8e:7b:57:8b:2a:a9:a7:c7:
                    0c:01:89:c2:16:c2:6f:a8:f2:c0:8b:f3:3a:6c:1d:
                    d3:3b:60:99:67:c0:a7:6f:6c:54:ed:12:78:47:60:
                    8d:c2:5b:c2:14:60:d2:85:f0:cd:ce:24:cd:02:5a:
                    ae:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:17:FA:9F:8F:A1:4E:25:97:39:8F:78:FA:B1:BC:4B:08:94:F2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:5b:65:d5:aa:f6:09:7d:4b:22:7b:c5:89:a3:28:95:a0:
         f0:86:10:2b:33:ed:71:ab:ab:b1:6f:81:70:3a:67:4e:dc:79:
         22:d8:79:19:87:c6:c1:94:23:43:b2:e6:8b:dd:f1:e8:71:f2:
         9e:32:a4:81:c9:24:80:ac:af:a6:cb:c0:4d:2d:51:f9:90:cf:
         ab:c1:62:de:d6:e9:ad:77:b9:99:48:ff:22:ec:ad:32:62:39:
         5a:19:84:0d:99:05:d4:5e:0c:cf:ef:80:af:9a:55:f4:ac:f0:
         b7:41:5b:82:b8:59:13:1a:35:38:ad:c2:be:84:ab:ad:50:4c:
         8c:17:36:05:87:fa:42:4e:3b:e5:37:cd:f1:58:6c:0d:c8:0e:
         b9:38:04:75:f9:e9:03:d5:7a:e2:37:01:a3:12:55:4b:6c:47:
         95:0b:18:4c:3c:08:78:4d:73:fb:50:c3:fe:ba:26:f1:d3:d7:
         cb:11:1e:79:7a:ec:e5:d4:64:65:1d:79:20:f1:f4:ff:5c:3e:
         63:e5:97:c8:56:5d:f2:69:8c:82:c6:20:86:74:d1:12:b2:19:
         04:ff:e5:fd:8d:3d:e0:44:dd:ec:c7:b0:ef:69:61:e2:11:78:
         43:21:98:b3:f6:f4:2a:28:1b:5f:cb:b9:58:8e:05:a7:a2:da:
         80:0b:80:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:31:23 2026 by rpki-client