Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec05ba4d-f627-3bd8-a131-263d7d06db62.roa
File:                     ec05ba4d-f627-3bd8-a131-263d7d06db62.roa (raw, json)
Hash identifier:          Lhihoyk6qYKa3Gp0wJ8Rqk84kUS2l62wQH2au4tyFTE=
Subject key identifier:   06:F0:D2:36:B0:C9:44:9C:9D:C8:A4:27:F6:F9:1F:BD:AA:9F:F2:99
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE79FD5D65B44F2B0C208
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec05ba4d-f627-3bd8-a131-263d7d06db62.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        24.123.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e7:9f:d5:d6:5b:44:f2:b0:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=6e9d014c-ff0c-4963-a617-e7b51a2586c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:75:4a:6c:ad:6f:6a:f0:9e:0a:48:28:96:
                    b6:ab:8e:99:c1:08:e8:6d:06:84:d9:f9:52:15:a3:
                    ed:9c:93:a1:e1:fc:08:ae:13:57:62:e5:85:48:dd:
                    cf:db:12:a9:61:9b:59:7f:cc:9e:29:8c:27:37:be:
                    5c:4f:18:76:ab:a6:66:53:c3:63:96:db:7d:c6:e9:
                    e7:54:5f:36:6e:a7:c2:e0:fa:e0:39:37:0c:4d:02:
                    db:1a:4f:28:90:75:dd:1e:b0:f8:3d:96:3e:d6:79:
                    b3:36:e2:17:f7:d1:20:cc:bc:1e:13:a1:f5:81:88:
                    fd:9f:3e:35:14:50:17:53:3c:53:14:b3:24:73:ec:
                    3b:1e:c4:81:ae:2a:e6:9f:c7:00:18:63:7f:04:53:
                    5b:b1:f5:0a:5f:31:dd:b7:2d:17:91:c0:7a:bb:ea:
                    6a:f3:bd:0c:ce:e1:69:7d:0a:6c:95:76:f3:4d:80:
                    44:d4:05:1e:56:2b:75:a4:3e:2a:41:69:c5:6a:f3:
                    84:0a:b0:a8:ca:98:9d:8a:30:6f:e8:78:5c:24:f8:
                    79:92:52:07:23:d8:4f:5a:90:bf:30:c4:96:10:1d:
                    f2:d4:a2:40:db:64:7e:c3:4e:54:9d:59:65:5b:ff:
                    b8:4d:26:c6:a8:f3:71:dc:31:07:65:bf:3c:a4:79:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:D2:36:B0:C9:44:9C:9D:C8:A4:27:F6:F9:1F:BD:AA:9F:F2:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ec05ba4d-f627-3bd8-a131-263d7d06db62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:6e:6e:bb:eb:fe:47:ca:d8:8c:0a:8b:15:c5:85:5c:1d:3c:
         9d:57:51:9e:24:08:d5:30:97:90:7f:19:41:37:45:1a:ac:73:
         5e:c6:f1:4b:10:a0:e5:e8:d0:c6:a4:fe:c7:53:40:2a:31:57:
         40:ec:4d:ca:28:45:83:42:c5:4f:2b:0f:e1:7f:a9:8f:6f:ba:
         5c:25:30:ee:41:61:52:78:3f:49:fa:28:64:ca:0e:64:b0:28:
         0c:9b:76:89:5e:86:cc:53:9d:6b:14:87:4a:90:bd:e9:79:63:
         50:e9:87:4d:b7:97:80:a0:23:11:38:b6:d2:ea:99:01:07:3e:
         c9:8b:87:22:86:24:fb:86:1c:c4:1d:7a:6f:e0:9e:62:7c:8f:
         84:96:95:14:57:4d:81:a5:f2:57:51:5b:2e:48:9b:79:a2:08:
         7f:6f:a6:c4:b1:6f:72:28:b1:e7:cf:f6:7e:b0:87:64:c1:c8:
         3a:f2:6f:18:f9:b3:79:1d:3c:3e:6d:92:1d:77:a0:3b:61:ab:
         f5:0e:4c:83:ba:65:9b:9e:27:7c:67:f8:c6:51:9d:9b:fb:90:
         3f:ee:cb:48:a0:03:59:6e:18:f5:03:bb:93:a4:ad:5a:b7:d9:
         c1:27:40:0a:03:fa:71:8b:ab:da:9a:be:53:c5:62:de:3d:33:
         59:09:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:24 2025 by rpki-client