Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e70b7acc-6c76-38b4-bff3-258784b894de.roa
File:                     e70b7acc-6c76-38b4-bff3-258784b894de.roa (raw, json)
Hash identifier:          O40DeQDojXgCA6yLR8c9Au8pQzvBKULG5YdX8g/bNXk=
Subject key identifier:   D4:F5:66:14:02:8A:12:14:3B:40:BC:7D:CE:58:0D:01:81:59:E4:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DAC0024B701AE016A2280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e70b7acc-6c76-38b4-bff3-258784b894de.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        65.28.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:ac:00:24:b7:01:ae:01:6a:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=08140961-a17e-426b-976d-f415acb879a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:c7:8d:bd:ed:37:54:68:0b:25:b9:68:3f:
                    a8:27:f8:2e:9e:30:eb:77:33:31:fc:9e:2f:31:fe:
                    d4:08:60:0e:71:42:09:20:a3:2a:53:0c:6c:e5:b9:
                    07:06:66:36:f0:5c:13:50:56:f1:b2:ad:89:08:66:
                    66:fb:82:f6:92:60:c0:6c:25:d7:d6:14:e4:d7:2b:
                    dd:e9:a2:a9:b5:c0:ee:72:02:89:64:18:d0:95:94:
                    d0:90:38:25:16:ad:65:b6:01:d6:ce:af:fe:b4:ae:
                    22:3d:b5:47:1c:1f:a9:88:75:18:5a:ee:ba:cb:32:
                    6f:0d:08:7f:5b:dc:e7:a4:68:98:37:85:ca:65:d3:
                    42:2f:fa:d3:ff:30:7b:1d:34:39:ab:f6:ae:f5:f6:
                    bf:5a:87:45:f8:a7:fd:1b:6a:4f:9d:8c:de:4d:6b:
                    a8:ec:1f:20:19:44:b4:f3:f8:d8:d6:ba:ed:24:d0:
                    52:d9:1d:b7:92:7a:d5:02:58:2e:5b:8b:3a:3b:4a:
                    0e:1f:d9:f5:00:63:58:53:92:47:f2:05:34:f7:6f:
                    00:af:cc:f3:08:27:5a:af:dc:6f:79:de:6d:af:4e:
                    af:82:70:53:1a:ea:5d:de:7b:15:9d:b7:1e:25:cc:
                    61:5a:6a:9a:2c:30:5d:a1:1c:f3:71:f3:ae:c1:53:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F5:66:14:02:8A:12:14:3B:40:BC:7D:CE:58:0D:01:81:59:E4:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e70b7acc-6c76-38b4-bff3-258784b894de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:90:0c:bf:5c:19:e3:49:53:39:51:ed:4d:74:cb:f7:a5:ff:
         9b:46:ac:70:76:33:8e:08:b2:71:74:7b:6d:ac:d1:24:70:b3:
         7e:6b:4b:d9:a0:19:8f:af:c3:da:49:68:78:a1:53:76:31:6f:
         58:77:4c:c5:75:0b:a0:6b:00:36:4f:1d:1d:a6:7d:79:0e:3b:
         6c:05:46:b6:41:1f:e6:28:3b:fd:ce:da:cc:8b:22:2b:c8:da:
         24:a1:ed:0d:cf:78:18:48:d1:32:ad:b4:df:77:35:46:53:6a:
         fd:57:3f:97:ef:1b:a8:d3:80:6a:ec:94:3c:3c:19:2d:a0:20:
         65:b1:77:4d:a8:2d:3c:77:ea:d1:3e:0a:9d:73:ba:87:88:67:
         49:22:8b:58:cb:04:8b:eb:d6:eb:b3:a0:f1:5f:a1:96:68:04:
         bf:09:a6:d4:7b:3f:ab:59:86:6d:24:cc:7c:75:4a:a2:90:20:
         ba:c4:04:8c:7e:e2:32:cf:4e:9d:98:b1:b7:42:44:ce:18:72:
         7f:b0:d7:f1:69:9f:4b:37:12:8e:b5:84:57:1e:28:90:a2:88:
         15:44:c4:dd:96:6d:74:c0:93:40:f4:c6:08:87:70:fa:4e:4c:
         ca:c9:a3:47:c8:09:b5:03:fd:95:d6:9c:3d:ed:18:54:98:5a:
         b4:5d:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:06 2025 by rpki-client