Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1ba6d1c-a7a6-3d82-bc02-9bf85caf3ae9.roa
File:                     f1ba6d1c-a7a6-3d82-bc02-9bf85caf3ae9.roa (raw, json)
Hash identifier:          EBMOIJNeSlB2jjsZKm9wXG46saiY0YcbkYlceVX+oko=
Subject key identifier:   D4:69:6C:01:02:54:01:B7:61:38:29:78:5F:4B:EB:BF:33:A5:FA:4A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B3F1C5D66A526146A967BE500
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1ba6d1c-a7a6-3d82-bc02-9bf85caf3ae9.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     12271
IP address blocks:        68.174.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:5d:66:a5:26:14:6a:96:7b:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=9ae078c7-1d30-4258-9c01-b95a693db3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:16:94:6c:2d:e2:93:21:59:4d:68:68:30:
                    5c:c1:bf:b0:61:7b:df:ec:ef:15:f6:5e:3c:fb:1c:
                    87:85:1d:af:ac:3d:8d:0f:eb:37:b4:0f:ff:8a:91:
                    9f:f4:0a:68:fd:55:d5:ba:9a:94:cd:4a:f8:17:25:
                    b5:09:ac:a6:a5:17:31:1d:f9:5d:b8:c4:73:e2:02:
                    78:f6:f0:09:32:eb:f8:21:2b:55:bc:f4:71:98:71:
                    c0:53:e3:87:5c:ec:d9:90:63:bf:ad:a6:15:e6:5c:
                    2a:8d:2e:45:10:2f:30:59:70:43:14:db:4e:19:42:
                    99:f3:4a:16:c4:eb:b0:1c:ae:7b:69:6e:7f:ed:7b:
                    5c:d6:ec:92:b8:0a:50:b5:88:04:ac:57:24:2f:ac:
                    83:0e:f4:77:be:44:e6:6b:df:f5:9c:1d:cc:e0:46:
                    79:4a:6b:7d:ce:93:1b:a3:cd:c1:9a:6f:45:52:79:
                    7f:f4:70:92:5b:29:21:4c:39:b2:de:83:17:3d:63:
                    82:ae:b3:fc:bb:84:d6:71:d9:ea:ef:d1:35:02:56:
                    96:b2:35:3e:83:81:1d:90:c5:fe:de:a2:9b:1f:d3:
                    ec:54:74:38:01:d2:70:55:90:cf:4c:88:1f:67:12:
                    1d:6a:cf:0e:78:db:80:ad:1b:d8:86:af:7f:0e:9d:
                    ed:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:6C:01:02:54:01:B7:61:38:29:78:5F:4B:EB:BF:33:A5:FA:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1ba6d1c-a7a6-3d82-bc02-9bf85caf3ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.174.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:5b:14:68:0d:44:ed:fe:2f:fd:8f:53:0d:90:b7:b8:dc:e9:
         9b:fe:f6:5b:43:86:2e:58:cd:f5:a7:40:58:56:70:a9:24:8e:
         c5:c1:82:92:9d:b0:da:11:ea:70:91:ed:2a:8c:90:60:20:56:
         21:4c:4c:f4:77:9a:94:c2:73:93:f2:17:1c:6e:3e:56:ad:e7:
         66:40:4d:43:2b:0f:01:2f:80:93:c8:8d:d9:b5:42:84:75:06:
         0c:43:6f:a9:b5:ef:78:f5:73:a1:88:89:7c:1f:87:48:04:bf:
         3f:2f:fd:57:44:d7:e4:58:65:b6:02:7f:42:64:23:b6:c4:5e:
         04:01:25:6f:60:6c:c4:20:4b:6d:6d:75:ca:7f:b1:2a:37:59:
         8c:24:8c:54:43:22:25:cc:65:8a:55:c8:7d:af:e4:c5:ed:d7:
         12:98:70:42:da:dd:4c:9e:32:9f:0a:c0:74:eb:b6:83:db:a4:
         9f:d8:04:d6:aa:c5:e3:14:11:e6:d8:fc:ed:ce:2e:92:a5:b2:
         09:02:f9:a9:7d:0f:27:c9:9d:cb:41:86:60:f1:e7:39:26:67:
         80:78:a7:31:3b:2c:06:1f:b3:0a:08:3a:10:4e:43:6d:19:24:
         91:7e:ce:1c:6d:51:07:0c:47:62:fd:5a:a3:13:bd:51:54:45:
         3c:e8:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:17:23 2025 by rpki-client