Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e4de9e73-681d-396d-9a7f-326dc46dfe6a.roa
File:                     e4de9e73-681d-396d-9a7f-326dc46dfe6a.roa (raw, json)
Hash identifier:          DHlcxdOXUQrjwdFdbe7xJN1GWAGnJieGVU2BcJZE7D4=
Subject key identifier:   F7:AB:88:D8:7D:38:05:93:27:C5:2C:C0:11:98:BC:A8:BB:0C:6F:F5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE0F9A37F84CE4A338090
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e4de9e73-681d-396d-9a7f-326dc46dfe6a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        173.89.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e0:f9:a3:7f:84:ce:4a:33:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=bef97895-2080-45f7-981c-9efe47d54001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:30:6e:f0:dc:b0:02:90:ed:d2:b1:36:47:
                    44:57:ec:d3:d5:07:99:52:e6:4d:40:f4:34:20:72:
                    75:a5:e0:b6:95:62:ab:88:49:c8:7a:b4:41:69:9c:
                    af:2b:e2:2f:6a:bd:d1:9a:8c:eb:6c:71:f0:d3:8f:
                    a1:5b:db:13:35:68:f5:74:5d:31:06:60:56:18:3d:
                    a2:b3:88:64:f5:d1:be:10:68:3e:97:0c:d1:b4:2e:
                    51:fe:80:81:98:17:e6:d2:fb:c5:8a:b7:ae:0e:df:
                    70:76:c4:f5:95:a7:f6:8e:06:40:17:d8:aa:74:f4:
                    3e:72:65:2b:80:c1:2f:5d:b4:22:64:6e:ab:a0:c7:
                    b5:42:f5:13:a8:9c:d6:51:df:c9:67:f2:df:34:80:
                    a0:b8:b2:56:c1:30:6b:d8:00:a3:a9:ef:6e:15:6c:
                    43:43:a4:c2:ad:dc:02:7b:17:37:47:5f:b5:82:0d:
                    94:1f:e2:02:4c:56:6f:91:3d:a6:b6:39:2b:08:61:
                    e3:8a:ed:ba:86:f1:de:e6:57:51:b9:db:c3:0d:d7:
                    db:63:e0:dd:8b:11:9f:ad:92:b2:78:d1:52:33:79:
                    d5:52:af:41:e9:75:bd:47:7b:9d:80:d8:16:74:3d:
                    c9:4d:5b:34:09:b4:26:ca:68:de:ff:ec:fb:56:1a:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AB:88:D8:7D:38:05:93:27:C5:2C:C0:11:98:BC:A8:BB:0C:6F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e4de9e73-681d-396d-9a7f-326dc46dfe6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.89.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0f:cc:39:dc:6f:95:05:2b:29:31:83:db:ad:03:02:b6:44:
         d3:37:af:a0:62:6d:7e:78:13:ed:a5:f4:92:b6:c3:de:f5:de:
         89:7e:66:e7:09:d1:ae:07:98:24:39:6e:02:5a:f6:92:4f:34:
         e0:9b:5c:73:36:34:aa:a5:4d:6d:97:00:6e:8b:3a:ba:c4:4b:
         a5:42:17:7d:34:d1:ea:82:55:98:cd:a2:ed:41:c5:59:b3:04:
         85:5a:48:b8:95:1d:da:09:36:3c:40:59:36:a3:83:d6:d2:b9:
         d7:df:87:9a:35:6a:ca:4a:78:49:3e:b1:00:b5:1e:06:21:3c:
         44:75:9b:38:f8:36:59:63:61:23:2b:3b:d6:9a:2a:b5:8a:cc:
         a3:74:55:c8:07:d2:94:b9:d3:04:61:df:ec:66:46:6a:76:38:
         09:d2:43:f2:40:25:2a:b4:44:36:00:a7:53:43:98:6c:43:62:
         12:43:7b:5f:7d:12:0d:86:a6:c0:3f:df:4c:0c:de:7b:34:33:
         a9:b5:0b:6d:b6:2a:58:70:a3:b0:c3:4e:57:9b:07:45:cf:2f:
         c5:3f:7e:f1:d0:68:01:b3:56:f6:e9:3f:71:c5:bf:79:0f:c7:
         28:3d:c9:34:df:da:e1:1a:23:f7:6d:df:9a:84:4f:cd:d3:2f:
         93:7b:a2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:19:11 2025 by rpki-client