Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/535a6d9e-1cb9-3f63-844b-0687b28ce7fb.roa
File:                     535a6d9e-1cb9-3f63-844b-0687b28ce7fb.roa (raw, json)
Hash identifier:          z6dG8Q6+10Q94oKkNWDSWPSiFhXWS325aSjowY98E3Y=
Subject key identifier:   6C:78:9E:AC:1C:AE:01:4A:A9:CE:19:A7:68:62:CA:B5:E8:14:DD:A5
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160FDB96D2F5442C8FF2FA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/535a6d9e-1cb9-3f63-844b-0687b28ce7fb.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11351
IP address blocks:        69.207.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:fd:b9:6d:2f:54:42:c8:ff:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=8423cd48-7684-4949-b168-4d839dfce45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:16:0a:91:42:4a:03:85:7b:47:7d:cb:c5:
                    56:ae:70:b6:b5:0d:5e:92:18:d9:32:b9:ac:68:66:
                    84:b3:52:b4:a3:c9:69:52:d4:ca:0e:1e:8e:58:4d:
                    a1:b7:a5:02:8c:05:0d:56:a0:47:52:13:ad:2c:f9:
                    15:e7:57:e2:c5:53:66:a2:07:bd:23:b9:ae:18:d3:
                    ef:e7:c3:0f:10:42:6b:2a:6e:3d:65:41:0b:7d:d1:
                    2a:33:a9:b1:54:c9:f3:5e:d2:ad:02:f4:4e:55:b8:
                    d5:05:46:18:30:8d:59:6c:ac:4a:e9:4a:dc:62:a3:
                    48:d9:fd:0b:76:e0:8e:09:20:3b:d6:d7:1b:da:c1:
                    be:9a:7c:d5:a4:22:c7:a2:02:81:0c:7a:14:1e:0b:
                    75:24:cc:54:43:f9:60:f4:38:cb:98:38:db:1a:01:
                    e2:55:3d:9f:da:5d:43:9d:64:68:00:2b:fe:dd:20:
                    67:6c:33:03:86:87:12:f8:fc:61:43:86:8c:43:aa:
                    8b:e3:a0:a4:46:6f:fa:7c:1a:d4:04:ca:4c:3f:ee:
                    0f:f6:ec:e2:dd:08:7a:6b:3b:b7:7a:dc:39:46:96:
                    a0:d0:1f:3b:bf:4b:3d:d9:eb:4b:c8:63:94:35:6d:
                    e1:19:3e:20:37:43:62:c3:3d:b1:24:9b:49:78:08:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:9E:AC:1C:AE:01:4A:A9:CE:19:A7:68:62:CA:B5:E8:14:DD:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/535a6d9e-1cb9-3f63-844b-0687b28ce7fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.207.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:7b:f0:ec:de:69:2c:63:93:fa:50:d0:81:0c:26:11:35:
         75:13:90:91:76:72:6f:6f:23:78:6b:5a:94:c6:aa:90:e0:40:
         2a:c0:7f:f1:42:c7:ba:14:72:d8:33:92:b5:30:7a:6c:fd:79:
         a9:fa:52:64:aa:05:bb:b7:1f:a3:69:9e:76:d9:51:49:9d:b4:
         b9:e6:c6:97:8d:1e:34:59:e3:0a:4b:26:c2:50:63:f6:a5:c3:
         2c:71:7a:21:dc:db:6d:89:e0:cb:d8:3b:37:07:e8:62:d3:57:
         1b:0e:ab:79:5f:f4:e9:78:8f:b2:0e:be:88:a5:7a:c5:01:d4:
         80:b6:89:0a:d2:49:8f:be:61:fc:0b:b3:1a:35:a3:52:9e:1e:
         b0:ee:df:28:08:24:0b:a5:2e:1c:33:1a:19:d1:e3:bf:15:ce:
         6f:1b:6b:4d:35:0c:27:e6:ce:6a:aa:13:26:99:1b:3e:b8:32:
         53:b0:03:4e:78:44:2c:c9:08:a6:2d:db:7f:a0:63:23:eb:f4:
         91:3c:b0:a8:bb:95:d4:8a:68:36:f4:10:42:c8:eb:8a:3c:85:
         4f:41:85:c4:92:ad:fa:73:c6:70:ef:d7:03:57:8e:bb:c2:b3:
         0a:1a:3d:61:ba:28:20:ce:7c:39:f7:c3:6c:ec:93:d8:d3:3b:
         72:a3:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:19:06 2025 by rpki-client