Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
File:                     ddb07463-be38-35e3-a789-7b573b75adc3.roa (raw, json)
Hash identifier:          8rhXMdyYg1dNYbSa/M5leEWMzD3G4WsGMykoz/y665k=
Subject key identifier:   59:E8:2C:B0:9F:6B:8A:00:40:7B:5A:A7:2F:91:CB:2B:59:AC:45:12
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CF796313B0738ABB62130
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        67.252.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:f7:96:31:3b:07:38:ab:b6:21:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=34d8df51-bb95-421f-a032-24edcaceb51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:85:ea:9b:c0:31:1f:65:ed:c4:12:15:1e:29:
                    b1:06:9b:05:df:02:bc:a0:f1:30:34:4a:03:1c:88:
                    3f:25:cd:75:ab:62:9a:4d:d0:f5:38:66:b7:16:6f:
                    48:5c:4c:42:a4:65:c9:77:7b:ae:28:be:b0:3d:b4:
                    d5:05:7d:0b:6e:3d:89:51:95:1d:ab:83:74:1a:8a:
                    41:e0:98:a6:45:c7:57:a5:c7:20:f1:40:28:05:9f:
                    91:40:2e:24:8a:d3:79:a0:c7:a7:16:24:43:36:68:
                    48:12:00:ed:a9:9a:3c:5a:e4:79:2e:a7:80:25:20:
                    1d:04:38:82:81:dd:5a:3f:1f:f5:9a:f3:4c:9b:37:
                    8c:53:b4:f2:31:8e:cb:68:c3:1b:be:29:61:8d:c5:
                    2b:7a:c9:53:45:8e:b3:04:e5:ba:75:46:31:75:c4:
                    40:76:25:91:1d:98:bd:56:76:02:53:b7:4c:aa:54:
                    c9:ea:ba:78:c6:ee:7f:49:97:7d:6e:68:49:c2:6d:
                    f0:93:4a:ee:fd:61:0e:a4:0c:05:0a:db:6f:30:1d:
                    81:e2:3c:ab:dd:a8:11:2e:07:23:a3:19:1b:f7:3b:
                    94:92:2f:99:22:53:aa:bd:5e:6a:17:2e:9f:e2:33:
                    82:64:66:55:b1:d6:b2:8c:d5:60:a9:af:55:5c:87:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E8:2C:B0:9F:6B:8A:00:40:7B:5A:A7:2F:91:CB:2B:59:AC:45:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ddb07463-be38-35e3-a789-7b573b75adc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.252.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:09:16:dd:c1:74:0b:4a:03:78:d7:7c:5f:91:d9:3b:83:1a:
         99:64:2d:7b:b1:58:e9:cf:f0:ab:4b:dd:37:87:98:ac:4f:13:
         86:0f:a2:b5:5b:ad:6d:7c:d6:e9:42:cb:dd:e8:f0:84:65:60:
         29:99:a9:65:83:cc:f9:75:7c:b0:b5:56:6b:3d:08:2c:5e:43:
         80:24:60:5b:ca:1d:30:17:5c:10:6b:ff:bb:07:08:fe:90:00:
         28:65:3c:06:15:37:00:41:bd:bf:0a:2c:5a:fd:55:04:d5:b2:
         98:e0:77:5f:cf:e6:98:60:d9:f9:65:7e:4c:43:48:25:9b:db:
         55:cc:93:d2:5b:b5:58:8c:4b:bd:4d:30:d5:15:53:4e:2d:44:
         05:bb:2b:d9:c8:88:77:64:0e:1b:67:20:dd:8d:ff:e7:81:64:
         c9:15:f0:09:a8:4b:04:25:4f:a9:86:90:fb:f3:7e:0e:6b:cd:
         89:e3:85:8f:25:2f:cc:e2:e2:56:07:11:ce:2a:58:22:c8:27:
         ff:8b:63:e8:7d:66:9f:df:69:5c:51:d8:9f:ad:ab:13:5a:b4:
         0f:44:f7:0f:d5:30:07:af:ce:0c:72:90:40:0d:d6:8a:a5:f7:
         b4:16:d4:b9:9c:3c:2a:37:01:9d:19:45:3c:6b:45:62:d5:83:
         5f:ef:bc:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuCHPeWMTsHOKu2ITAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MzRkOGRmNTEtYmI5NS00MjFmLWEwMzItMjRlZGNhY2ViNTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIXqm8AxH2XtxBIVHimxBpsF3wK8oPEwNEoD
HIg/Jc11q2KaTdD1OGa3Fm9IXExCpGXJd3uuKL6wPbTVBX0Lbj2JUZUdq4N0GopB
4JimRcdXpccg8UAoBZ+RQC4kitN5oMenFiRDNmhIEgDtqZo8WuR5LqeAJSAdBDiC
gd1aPx/1mvNMmzeMU7TyMY7LaMMbvilhjcUreslTRY6zBOW6dUYxdcRAdiWRHZi9
VnYCU7dMqlTJ6rp4xu5/SZd9bmhJwm3wk0ru/WEOpAwFCttvMB2B4jyr3agRLgcj
oxkb9zuUki+ZIlOqvV5qFy6f4jOCZGZVsdayjNVgqa9VXIfn6QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFnoLLCfa4oAQHtapy+RyytZrEUSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGRiMDc0NjMtYmUzOC0z
NWUzLWE3ODktN2I1NzNiNzVhZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQ/wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdwkW3cF0C0oDeNd8X5HZO4MamWQte7FY6c/wq0vdN4eYrE8Thg+itVut
bXzW6ULL3ejwhGVgKZmpZYPM+XV8sLVWaz0ILF5DgCRgW8odMBdcEGv/uwcI/pAA
KGU8BhU3AEG9vwosWv1VBNWymOB3X8/mmGDZ+WV+TENIJZvbVcyT0lu1WIxLvU0w
1RVTTi1EBbsr2ciId2QOG2cg3Y3/54FkyRXwCahLBCVPqYaQ+/N+DmvNieOFjyUv
zOLiVgcRzipYIsgn/4tj6H1mn99pXFHYn62rE1q0D0T3D9UwB6/ODHKQQA3WiqX3
tBbUuZw8KjcBnRlFPGtFYtWDX++8tw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:56:12 2025 by rpki-client