Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e877cc81-f105-326b-8a87-95f9962cb971.roa
File:                     e877cc81-f105-326b-8a87-95f9962cb971.roa (raw, json)
Hash identifier:          a9w78pz5I8Grk4HuAEc/F4XH/AM9ald4nEIMlig/5BE=
Subject key identifier:   11:18:C8:70:1B:2B:6C:16:54:AF:FE:25:DE:58:0C:4C:D5:0A:FD:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D97D7E002A483F0A9E140
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e877cc81-f105-326b-8a87-95f9962cb971.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        65.28.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:97:d7:e0:02:a4:83:f0:a9:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c02fa1b0-d3a3-4f84-92c1-3b3c2b6d2462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0a:d4:7a:e2:ee:73:7d:e1:30:32:77:d4:53:
                    8a:63:fa:c0:9b:c6:97:6a:68:16:48:bd:f1:c8:24:
                    ec:b3:60:e2:a3:b1:a0:18:b0:85:1f:ea:2e:40:43:
                    44:7c:cd:47:a0:a5:dc:ca:0e:69:e4:db:4b:9a:ff:
                    a1:f5:a8:2e:f4:4f:07:a8:e9:24:da:f3:14:50:16:
                    1e:18:dd:70:cd:9e:af:1e:3b:2c:6a:80:63:e9:0f:
                    96:1b:c6:e6:75:49:e0:6a:46:53:3e:bd:ae:b4:0e:
                    6d:0f:6f:af:86:66:1b:7b:8f:70:79:2f:72:00:c4:
                    7b:d3:0e:56:b2:14:1e:38:ef:a1:05:84:45:9c:39:
                    e2:95:a9:84:4c:36:dd:96:09:e4:4e:7c:5a:d4:9c:
                    8f:7e:df:ab:83:52:44:c3:49:cc:7f:90:90:dd:9f:
                    e4:db:93:6b:d8:a4:16:c1:e0:0c:63:13:2c:1a:cc:
                    c1:f4:5f:c0:fa:f3:16:87:83:ac:c6:1e:e5:36:cc:
                    a9:f5:3e:a5:d7:3d:85:b1:b9:0e:17:56:d0:71:7f:
                    43:58:5e:20:1c:36:40:aa:51:68:79:26:49:7b:7a:
                    53:2a:f7:77:5f:96:29:47:02:21:48:9b:3b:8a:4c:
                    c2:b0:72:a2:c6:2c:03:36:05:6f:8d:2b:00:15:d3:
                    ee:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:18:C8:70:1B:2B:6C:16:54:AF:FE:25:DE:58:0C:4C:D5:0A:FD:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e877cc81-f105-326b-8a87-95f9962cb971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.28.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bc:85:bb:6b:04:b9:95:f2:97:43:09:a4:d5:02:94:c3:9d:
         a2:88:ef:88:7f:dc:9d:be:55:4e:bb:c0:e1:77:7f:e4:83:ef:
         50:32:d8:dc:06:ae:06:f4:4a:fd:f4:ec:a6:4f:84:e7:92:f5:
         cc:a6:3e:63:de:36:a8:7f:ac:cb:f3:3e:e7:fa:7f:51:d5:6e:
         d8:93:b2:2b:33:c5:69:10:9b:14:52:0d:5c:c8:2b:85:88:62:
         c7:a0:97:eb:83:b7:40:11:7d:c2:d2:37:02:34:54:da:07:da:
         c6:ff:43:f1:19:bd:05:c0:c3:41:7e:fc:35:78:19:51:b8:96:
         19:e9:89:d3:5c:2e:69:3e:c8:b2:82:80:4d:80:57:2a:04:9f:
         c9:d6:17:ee:2e:c5:a7:90:13:b8:2a:38:2a:3d:95:14:b3:4e:
         99:3b:6d:ea:4d:51:27:1b:ae:61:de:01:4b:84:9a:d2:04:94:
         bb:d6:c9:9f:17:f1:6d:10:27:55:52:5b:0d:ad:71:f3:0a:56:
         cd:ca:dc:eb:42:ca:e0:a0:15:d3:22:db:99:91:21:69:dc:cf:
         39:95:5e:76:36:b4:d1:d4:1c:fc:76:89:f1:85:83:69:3a:72:
         52:7f:c7:b2:ac:e0:a6:67:88:ff:5b:70:dc:20:a2:f2:f2:d0:
         57:6b:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:38:32 2025 by rpki-client