Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
File:                     fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa (raw, json)
Hash identifier:          +FERjSyVRwbYaTsJlEMCTlmwTvbi2tC41ci3oi5lpNc=
Subject key identifier:   73:50:3C:5C:9B:4C:8E:F9:D2:66:F0:9E:A0:52:97:7E:00:D1:B1:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DAA27FEF274C18794B280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11427
IP address blocks:        70.119.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:aa:27:fe:f2:74:c1:87:94:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=2b63152d-5197-4bd1-91e1-ae02a0654e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:71:bf:2c:98:f8:fc:46:38:23:a4:06:24:29:
                    bb:32:d0:fe:4d:28:82:8d:4b:29:f9:8d:32:12:8b:
                    aa:1b:7f:99:87:9e:55:1a:73:b9:ea:27:59:ca:ff:
                    82:58:b4:3c:3b:63:64:b5:e8:1a:4f:74:3e:19:47:
                    44:3b:99:08:be:8d:da:6e:12:e6:b1:9e:ab:66:b2:
                    d9:4c:01:7e:79:64:fd:53:de:be:b1:80:2d:e9:b2:
                    d0:6d:2f:75:a4:90:e7:4b:33:97:48:41:e9:9d:c8:
                    57:06:1d:51:9e:17:68:45:34:38:34:90:c2:55:97:
                    38:50:da:85:96:8b:5a:ce:e4:b6:4f:14:50:ac:c0:
                    c3:26:09:3b:41:b6:be:d2:a1:07:9a:29:73:81:ca:
                    8a:45:c8:29:50:8a:b7:05:ba:c5:c2:1d:8a:b0:97:
                    fe:50:7a:d6:98:50:17:1f:75:a2:e7:0f:64:99:85:
                    dd:a0:90:21:c4:b1:db:ed:40:d3:9a:72:4a:53:d0:
                    12:32:a9:58:7b:16:04:f7:56:38:99:34:fe:45:29:
                    dd:fb:9e:9e:37:ef:b9:19:a5:e1:85:1a:20:97:20:
                    a3:68:66:71:8c:25:af:0a:08:79:a3:d4:b5:db:26:
                    9d:0a:dd:7f:de:77:b8:16:65:c8:ba:a9:6f:63:87:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:50:3C:5C:9B:4C:8E:F9:D2:66:F0:9E:A0:52:97:7E:00:D1:B1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fa8a26f6-2b91-3e1b-8f2e-0ca55b7444fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.119.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:09:fa:36:75:51:62:4c:f9:bc:29:b4:7f:58:59:47:88:
         23:7b:43:c7:ad:34:1d:c3:95:8c:a1:5b:b2:1e:87:3e:1b:bc:
         12:8a:9a:5f:c6:4a:9d:42:c1:dd:89:d4:27:1b:63:1f:09:29:
         fc:10:33:d9:58:42:80:50:1e:ab:72:ac:9c:03:80:be:7e:e7:
         d9:72:40:f7:f7:5f:60:53:4f:4f:34:74:c1:ad:19:aa:38:58:
         a3:ff:27:5b:e2:cf:fd:0d:6f:8d:cb:2a:2e:aa:02:d5:2a:d1:
         ee:93:eb:f1:75:f6:91:42:6c:20:0e:93:e9:1d:9a:bc:5d:10:
         c3:eb:33:8b:e2:df:5a:86:75:00:35:cf:cf:dd:6c:6e:0d:83:
         66:a7:d0:1e:15:52:fe:ab:2c:32:91:a0:a5:32:fb:11:d6:b2:
         cd:a6:9f:67:5f:2c:a2:6e:0d:7a:2d:0a:c3:aa:23:b3:5d:38:
         aa:d1:e6:63:60:d3:52:d7:fe:7f:b1:d1:f4:54:4a:79:06:25:
         4b:52:f1:4a:e0:ce:15:8e:09:2f:5e:f5:46:c0:3b:06:eb:a5:
         bd:d5:ac:c8:42:05:cd:84:b5:04:82:be:88:c0:99:20:8d:0f:
         e8:16:3d:35:2c:0e:d3:33:41:99:f0:e3:0a:e1:ce:5a:50:29:
         b1:88:c9:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEuCHaon/vJ0wYeUsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MmI2MzE1MmQtNTE5Ny00YmQxLTkxZTEtYWUwMmEwNjU0ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHG/LJj4/EY4I6QGJCm7MtD+TSiCjUsp+Y0y
EouqG3+Zh55VGnO56idZyv+CWLQ8O2NktegaT3Q+GUdEO5kIvo3abhLmsZ6rZrLZ
TAF+eWT9U96+sYAt6bLQbS91pJDnSzOXSEHpnchXBh1RnhdoRTQ4NJDCVZc4UNqF
lotazuS2TxRQrMDDJgk7Qba+0qEHmilzgcqKRcgpUIq3BbrFwh2KsJf+UHrWmFAX
H3Wi5w9kmYXdoJAhxLHb7UDTmnJKU9ASMqlYexYE91Y4mTT+RSnd+56eN++5GaXh
hRoglyCjaGZxjCWvCgh5o9S12yadCt1/3ne4FmXIuqlvY4eR5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHNQPFybTI750mbwnqBSl34A0bEfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZmE4YTI2ZjYtMmI5MS0z
ZTFiLThmMmUtMGNhNTViNzQ0NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARncwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAN34J+jZ1UWJM+bwptH9YWUeII3tDx600HcOVjKFbsh6HPhu8EoqaX8ZK
nULB3YnUJxtjHwkp/BAz2VhCgFAeq3KsnAOAvn7n2XJA9/dfYFNPTzR0wa0ZqjhY
o/8nW+LP/Q1vjcsqLqoC1SrR7pPr8XX2kUJsIA6T6R2avF0Qw+szi+LfWoZ1ADXP
z91sbg2DZqfQHhVS/qssMpGgpTL7EdayzaafZ18som4Nei0Kw6ojs104qtHmY2DT
Utf+f7HR9FRKeQYlS1LxSuDOFY4JL171RsA7BuulvdWsyEIFzYS1BIK+iMCZII0P
6BY9NSwO0zNBmfDjCuHOWlApsYjJuA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:38 2025 by rpki-client