Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e12d7502-6047-37c5-b787-799e00b77e0a.roa
File:                     e12d7502-6047-37c5-b787-799e00b77e0a.roa (raw, json)
Hash identifier:          9hYfMqWu65SO+TED2iBuEm1tVi+apmTn7+PnLkXsphA=
Subject key identifier:   6A:85:C5:3B:3A:18:38:B9:A5:88:EF:84:A6:78:14:0D:D7:BA:43:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA722594F22D71EADCD000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e12d7502-6047-37c5-b787-799e00b77e0a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        67.52.56.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:72:25:94:f2:2d:71:ea:dc:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=23ca52ec-0e12-4c78-8ab8-783675410f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:16:aa:43:61:52:26:ec:6c:d0:87:00:4d:
                    34:69:7f:54:b1:b3:eb:e0:65:f6:71:92:25:37:53:
                    53:d0:df:f6:4e:c6:ff:ad:5f:c1:89:61:93:d3:2c:
                    01:f8:61:f7:bd:7a:5e:94:28:cd:ea:62:c9:e6:b7:
                    98:35:5b:6c:0e:7b:5d:ab:91:5d:6d:b4:3f:32:da:
                    fd:d0:d8:bc:34:fd:05:fd:23:f9:f0:dc:74:2a:00:
                    ec:95:65:ad:81:7a:f1:ba:8a:e2:48:11:6e:a7:f8:
                    7b:ba:06:49:f6:e9:24:21:2d:05:ba:82:f1:9a:e5:
                    4e:7e:a3:3f:88:38:ef:b7:01:9d:da:df:fe:98:5f:
                    71:ae:dd:aa:73:bf:37:93:fd:9b:69:73:bf:ea:6b:
                    73:93:ef:97:e2:e5:1a:69:a5:9a:f1:8c:a6:d2:d3:
                    17:a1:19:e7:92:9a:30:e3:70:3f:ff:97:36:89:60:
                    b0:ed:ef:06:ae:64:4b:43:ba:47:d6:44:2d:09:bf:
                    a5:9a:26:46:b1:b4:a6:7b:59:ca:82:31:53:09:92:
                    5d:23:ec:0a:cd:86:89:c0:6f:88:60:44:a4:3d:6f:
                    ee:67:ec:a9:2e:2f:73:a1:61:ed:98:da:e0:03:f1:
                    b5:00:39:a8:30:bd:09:1d:4e:7e:8e:57:dd:f0:4e:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:85:C5:3B:3A:18:38:B9:A5:88:EF:84:A6:78:14:0D:D7:BA:43:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e12d7502-6047-37c5-b787-799e00b77e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:35:48:e1:e2:f0:b3:14:38:16:df:2b:47:36:dd:be:aa:c6:
         05:44:25:d7:af:7f:a5:98:23:14:85:10:ad:f4:66:dc:ce:e1:
         cf:73:b1:90:a1:be:c4:cd:26:00:dd:50:9a:38:b9:8e:0c:c9:
         a2:6c:31:d7:6b:98:44:2b:f9:f8:df:28:fc:0b:01:5d:3e:66:
         16:27:9c:1d:1b:2d:9b:c6:ce:5c:3e:ab:1b:47:c1:32:ea:4c:
         c0:d8:52:22:e8:45:93:37:ed:d6:b0:0b:dc:f9:dd:a0:0d:97:
         74:ec:23:1c:a8:2a:d0:a5:08:b0:0a:f7:82:ce:77:e7:ca:00:
         9d:c4:2e:e7:03:7a:09:30:0d:7f:ec:5d:32:ec:00:7f:8d:84:
         10:cf:1c:ff:8e:74:a8:d3:a3:63:6d:9b:11:fa:b7:c3:4e:f4:
         4f:7d:d0:68:17:63:da:7c:ce:d5:83:6f:87:59:d6:43:0b:fc:
         30:c3:86:36:f3:b6:44:81:86:f6:b9:d1:6d:64:9f:af:1f:39:
         57:93:2f:39:55:fb:c4:10:72:0e:a4:07:8d:f0:b4:10:db:50:
         68:ce:52:74:5b:ef:92:53:67:6b:d0:39:07:b1:fb:08:21:ea:
         d0:5b:db:f9:8e:e8:f8:29:57:57:c2:59:e7:b9:b1:8f:1b:1d:
         a3:5f:71:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:41:43 2026 by rpki-client