Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee3390cb-a1fb-36f9-8700-e13395e8d551.roa
File:                     ee3390cb-a1fb-36f9-8700-e13395e8d551.roa (raw, json)
Hash identifier:          UVTfTDw7aXSe4eOcpzIq0+Lw0xaJbiIOpXApxD/nRQ0=
Subject key identifier:   97:0F:29:96:8E:AE:FD:63:26:4E:52:90:81:9D:65:E6:D0:7A:C2:01
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9D9DADFDA7E31ADC4200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee3390cb-a1fb-36f9-8700-e13395e8d551.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10838
IP address blocks:        74.87.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9d:9d:ad:fd:a7:e3:1a:dc:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=7d92e768-91ff-435e-8383-610bdbe513b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:5e:14:a0:38:4d:73:0a:6f:61:98:7b:9c:
                    26:ec:35:74:b2:71:d5:2f:ed:f2:22:08:7f:b9:55:
                    ec:bc:90:dd:f7:69:6c:cf:e8:8e:04:3c:d8:29:92:
                    70:cd:52:ba:c3:d1:ee:a8:0a:6a:11:52:6f:64:ce:
                    fb:93:54:cf:54:ad:f2:c1:58:cd:d1:f9:b6:7f:46:
                    63:e6:a4:93:13:e9:44:90:58:6b:46:f3:e0:4a:37:
                    d9:a9:47:f0:8a:a3:a5:2f:80:5f:37:6f:1d:77:fd:
                    d9:48:a7:e4:31:e7:43:b6:9c:0c:c2:3e:c1:93:8b:
                    f3:e2:01:4b:9f:62:fb:78:c2:7d:32:fc:d1:4f:1d:
                    1f:0d:3f:e5:8f:16:a3:66:e4:c9:97:eb:7d:aa:18:
                    fc:97:6c:17:cb:47:74:eb:2e:dc:d1:ef:d3:4c:ff:
                    b3:92:76:5d:08:02:48:fe:bb:bb:09:dd:aa:91:db:
                    90:52:7d:a3:7f:1f:1e:f6:14:ff:58:d1:b1:bb:1d:
                    58:63:fe:bc:71:8c:45:9c:0a:4d:f6:2d:16:6e:8e:
                    3c:66:50:ae:50:e0:07:4b:ac:e8:b9:9e:21:98:7c:
                    ba:a4:94:8a:bf:4a:d5:08:e2:6b:fe:4c:73:55:59:
                    c4:01:da:5e:35:51:fd:ab:33:66:aa:fc:e1:61:56:
                    dd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0F:29:96:8E:AE:FD:63:26:4E:52:90:81:9D:65:E6:D0:7A:C2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee3390cb-a1fb-36f9-8700-e13395e8d551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.87.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:f0:e0:ea:c5:b3:32:27:97:53:9f:d4:c9:c3:13:cc:e2:
         b4:20:17:19:0d:ac:90:db:cd:90:cc:7a:87:ad:37:ea:32:ae:
         cd:52:4a:d2:4a:26:08:b9:ee:30:a4:5a:9f:5b:f8:ad:12:f3:
         ab:eb:bc:f9:90:01:1a:72:e2:19:68:54:46:7b:10:a9:b9:88:
         51:e9:14:62:4e:7a:eb:7d:06:2a:d6:48:fa:2b:7a:bf:e6:d3:
         fb:0d:28:09:85:48:b7:3b:35:16:f4:4f:1f:96:6b:91:94:ad:
         d7:73:c8:f9:3a:e2:b0:c8:ce:45:fe:38:e4:9a:a4:e4:50:d8:
         c3:82:79:27:c8:da:77:26:3e:4d:4d:37:2d:84:78:a2:da:74:
         de:a6:ad:ce:2b:00:f8:d6:5b:bb:ff:6f:89:6d:b1:1b:5f:50:
         11:a9:28:18:e0:00:7b:f0:a5:90:18:88:b8:56:4b:1b:30:0e:
         ce:3c:73:bf:be:88:fc:1c:a3:44:45:04:7f:a4:a6:05:6b:70:
         bb:ed:9f:e0:56:c6:77:3b:7c:18:9a:aa:ac:89:58:2d:af:ba:
         64:20:f2:14:07:ab:4c:8b:f3:a4:bd:1a:d5:5e:30:2a:20:a1:
         e9:0a:54:d3:f8:8a:4e:c3:90:d5:75:2b:10:a1:e1:75:f5:0f:
         6b:9f:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:03:57 2025 by rpki-client