Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa
File:                     e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa (raw, json)
Hash identifier:          wLbHjnYLKVZk0PkeKoaTeUaO9SwSEP7ogcDiCQ9ewEU=
Subject key identifier:   0A:4A:45:05:21:03:A4:1D:79:5A:2D:F4:95:A7:26:C7:CC:E1:A5:A1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE330B071A213D6EF3B40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        72.133.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e3:30:b0:71:a2:13:d6:ef:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=beef78e2-c9af-40aa-b411-6025ca4bf409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:2c:3a:a2:8f:6a:84:3b:7b:5e:7d:31:76:
                    68:92:a1:09:6e:41:fa:09:93:86:9e:9f:c3:dc:80:
                    54:87:92:79:af:0d:3f:e5:dc:cb:b9:68:bb:7d:a3:
                    63:20:d8:38:38:3d:bb:a7:5b:b5:82:17:1e:0c:0f:
                    d4:f4:d7:81:56:84:69:59:c5:5c:b9:f2:b7:f4:d6:
                    07:4f:e9:40:fd:f9:33:09:49:b7:60:1b:02:93:80:
                    a6:b4:ed:5c:01:be:d6:60:1d:69:9c:b0:77:57:f1:
                    ba:03:27:c6:aa:cb:39:8b:46:0c:ad:02:db:4a:42:
                    e6:17:4a:fa:e1:2c:9b:92:ec:cb:95:70:48:c1:25:
                    88:71:58:9d:e3:4e:dd:09:44:79:74:11:d9:3d:61:
                    a7:b1:b6:69:7e:fa:f8:8b:50:8e:ed:c1:7b:8a:99:
                    0c:2c:06:f6:7c:6b:7e:d5:90:e9:66:72:0b:f5:bd:
                    62:cd:c9:44:55:e9:ab:55:d6:c8:bb:cd:4f:04:b5:
                    20:df:d8:10:a8:24:2d:05:74:86:16:bd:6d:4b:61:
                    8a:ed:37:a1:1a:46:f3:d0:9b:b6:70:c0:96:f1:1d:
                    23:78:19:92:35:7b:23:4b:5b:ed:4e:24:6c:9b:30:
                    0a:b5:5e:31:db:54:05:28:68:f5:f8:17:c7:11:ac:
                    a0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4A:45:05:21:03:A4:1D:79:5A:2D:F4:95:A7:26:C7:CC:E1:A5:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e33a6c8c-d7b1-34fc-b4d0-79a522cbe3bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.133.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:01:04:20:e9:2c:19:92:9f:8b:31:bd:26:25:87:1d:e1:3e:
         0a:c2:ce:80:fb:d7:1e:d4:74:2f:42:f1:65:1d:26:32:22:e4:
         37:87:dc:06:c6:82:60:d4:b8:a4:a9:59:fb:e1:4e:06:e1:1a:
         5e:f7:a0:e3:cc:b6:7b:20:13:96:02:3e:0f:b0:80:c9:fa:de:
         74:48:81:08:74:f2:b0:19:1d:96:61:eb:b0:30:28:f8:a5:e6:
         35:33:ad:c3:99:ea:72:b5:c2:28:84:ae:0d:7a:53:bf:1f:3a:
         db:1d:96:89:c6:1a:f0:d7:a5:21:53:83:1b:b6:b8:13:39:cc:
         26:15:1b:d8:16:42:c4:4c:16:50:e8:1a:00:3c:ae:6c:56:1f:
         0e:92:8d:84:54:a8:cb:83:16:51:85:61:67:1f:54:f2:78:63:
         83:45:84:3a:c8:ad:2d:46:cb:95:de:fc:77:93:e0:56:ec:82:
         cb:31:25:63:48:c2:23:a3:fd:6d:bb:09:d9:50:5b:5f:0e:a3:
         8e:8a:42:e1:8b:f7:17:9b:0b:c4:dc:eb:ae:69:69:f1:80:e6:
         3e:b4:f1:44:71:a7:68:df:24:3c:1c:ff:c9:29:a2:6d:9d:34:
         6d:3a:e1:63:76:f9:69:15:9a:4a:98:e5:90:95:e9:95:4f:ab:
         54:f3:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:14:27 2025 by rpki-client