Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1d64aa1-6d64-3c2d-815d-1ceb688a1d17.roa
File:                     f1d64aa1-6d64-3c2d-815d-1ceb688a1d17.roa (raw, json)
Hash identifier:          3gNJ1wgXhaOJT9SH0nWF0dm2XD/cPrGKcRPmcZq+Z6g=
Subject key identifier:   DE:32:D9:23:6A:55:7B:D3:8D:8E:D1:B7:7E:4F:67:33:CE:68:0A:C5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA98DAA4298AA798562080
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1d64aa1-6d64-3c2d-815d-1ceb688a1d17.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        76.83.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:98:da:a4:29:8a:a7:98:56:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=3efde20c-391a-4215-aa3b-66f64d8d56e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:5c:ab:d5:6a:54:8c:70:32:61:20:15:0b:
                    48:4b:22:74:b2:6f:8f:72:36:36:64:df:52:3f:61:
                    a7:e2:20:c6:1f:65:e1:f4:fd:aa:67:2e:41:0e:65:
                    52:20:9b:06:be:43:e2:29:9b:6f:37:40:33:ac:42:
                    22:6a:d4:16:3c:8a:43:e1:f5:46:5b:8d:95:97:f3:
                    98:1b:81:e3:f8:e1:0b:a9:dd:f9:fc:9d:6f:2a:98:
                    17:9c:0e:8d:50:bd:3d:c8:c5:39:0b:7c:67:52:8b:
                    10:2d:a5:28:a1:76:7a:4b:26:2a:e3:3f:4e:e6:bd:
                    b2:c7:24:30:31:dc:53:ee:9d:ba:f1:c9:97:a5:7f:
                    14:94:2d:84:22:a1:3b:a8:16:ba:10:31:64:8b:8c:
                    69:4b:20:63:da:a9:c8:96:0c:83:61:c0:ed:8d:5a:
                    a7:cd:25:a2:59:93:39:1c:b5:9d:1f:17:fd:7f:44:
                    95:db:60:48:96:34:57:57:f9:48:13:e7:69:0c:dc:
                    1c:14:77:1d:f3:ef:18:81:d2:ad:12:3f:2d:b5:06:
                    3a:64:92:57:0c:ba:f5:2f:1b:8e:c0:ef:53:15:02:
                    a5:30:63:a1:5a:f5:e4:67:42:2d:fc:f3:c6:fe:dd:
                    45:d1:a0:fd:2a:ee:fc:40:38:45:76:0f:60:1f:74:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:D9:23:6A:55:7B:D3:8D:8E:D1:B7:7E:4F:67:33:CE:68:0A:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f1d64aa1-6d64-3c2d-815d-1ceb688a1d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:b5:22:87:07:09:ce:a5:01:9e:f1:ae:4f:c3:73:67:28:d8:
         fb:1b:b0:bf:4b:0a:50:a4:8d:f3:e5:37:21:39:14:44:78:a8:
         08:87:27:b3:ce:b9:fd:28:8d:c0:36:52:02:ce:3b:34:1e:4a:
         53:3f:97:f8:4e:43:3f:3d:df:67:d7:26:c0:76:54:72:7a:29:
         42:68:96:ab:cc:67:e5:de:9c:44:c7:ec:15:65:62:b1:ab:cf:
         28:c1:b7:96:a7:97:7c:a1:fc:3d:9d:83:e9:d9:be:c0:bf:31:
         37:9f:b5:b3:64:41:8d:cd:16:e0:8b:a5:85:b9:80:c6:40:e1:
         bd:72:41:64:5f:cf:c7:85:e3:be:64:9d:b4:d9:7b:c3:21:1d:
         bf:41:03:af:c7:8c:10:85:4a:e3:03:aa:e1:ff:36:5e:3c:a8:
         50:4a:79:3d:3b:f9:c8:e9:bb:dc:bd:74:cc:d6:be:33:8d:81:
         39:5e:60:71:3a:e3:e5:35:6b:8d:ba:0d:fe:de:5c:7f:82:63:
         a6:49:6f:ab:dc:f2:49:e1:ed:7a:85:48:09:d3:c3:79:09:d7:
         67:63:2a:88:dc:2d:bd:de:45:24:68:c9:26:54:d7:f4:fd:1e:
         74:13:f8:34:68:e4:fa:aa:ee:0e:df:97:0c:08:f0:c7:1c:a1:
         01:ab:ae:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:04:06 2026 by rpki-client