Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bad55b69-3f8a-3b9e-9375-3bd6348ff4db.roa
File:                     bad55b69-3f8a-3b9e-9375-3bd6348ff4db.roa (raw, json)
Hash identifier:          ehgEyXel3ynrZkZBRUOby5M1J3edXO1JlfTAbCOIMMA=
Subject key identifier:   55:8B:91:68:1F:D8:AB:EA:89:61:5A:4A:72:83:40:7D:44:FF:E3:78
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E7634C433E9867CECDAFB3D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bad55b69-3f8a-3b9e-9375-3bd6348ff4db.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     20115
IP address blocks:        24.161.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c4:33:e9:86:7c:ec:da:fb:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=88a52bff-123c-4416-8ea4-9e9aec743b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:b5:23:43:65:fb:b4:f3:ff:04:fb:eb:62:
                    53:7b:d0:06:6e:a1:be:2d:81:6d:48:c1:2f:0b:c2:
                    e0:ed:4f:bf:5c:9b:5b:e0:96:1c:e4:5a:10:40:e0:
                    31:0f:2e:76:46:9c:95:77:a2:e9:a9:50:f8:5a:c7:
                    5e:90:5c:b3:24:13:ac:9d:a4:51:58:17:1c:60:ce:
                    50:d4:fd:d1:b3:3b:50:5a:0b:47:7d:d6:30:7a:20:
                    16:5b:4b:bd:dc:b3:3a:7a:d3:f8:ec:ff:0b:cc:f9:
                    0f:d1:7b:82:ef:bd:41:f0:a4:1d:7c:7e:87:07:c6:
                    ed:f4:cb:25:ab:18:6e:22:82:30:8b:b7:67:d5:41:
                    c8:4a:19:38:cd:22:48:bd:46:49:40:17:22:a9:ed:
                    7a:6d:c3:ea:bc:2e:42:14:e1:9b:a7:9e:48:26:09:
                    96:4d:3b:00:75:8d:b2:c7:58:50:75:bc:b9:fd:05:
                    57:b3:59:cc:59:9c:66:1e:ed:ae:37:c6:d5:84:ed:
                    ee:4d:db:aa:8a:5f:59:fb:ea:f5:c9:d0:94:a3:ee:
                    15:e7:82:2b:ed:95:53:e8:02:fa:02:85:9d:6f:f3:
                    31:73:50:ad:13:51:08:d0:fb:48:88:e4:3f:80:11:
                    f7:49:2c:a6:2c:a8:b5:3e:6e:d1:95:5d:79:f3:72:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:91:68:1F:D8:AB:EA:89:61:5A:4A:72:83:40:7D:44:FF:E3:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bad55b69-3f8a-3b9e-9375-3bd6348ff4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.161.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:c3:5d:af:67:4b:03:ce:a5:cc:a2:db:39:8c:30:0e:fa:
         8a:a1:cb:15:f0:e5:b4:63:2b:8b:96:99:7c:9b:42:fc:ab:49:
         01:25:aa:c2:c9:c7:0c:d8:2a:9e:c6:e5:0a:0b:73:ce:e5:b5:
         c0:b4:95:77:49:57:d0:4b:19:46:f5:ff:fa:69:0a:fb:65:19:
         3b:a5:d3:d3:40:6b:64:3e:d2:b0:4c:85:ff:91:28:24:48:e6:
         ec:a8:d0:09:59:39:57:53:e2:e5:07:80:c7:60:4b:9d:4a:d1:
         57:6f:d9:f6:19:72:f0:af:cf:6c:1e:27:24:60:86:73:92:db:
         50:77:cb:b6:b8:88:10:90:e7:1d:98:3b:7b:3b:58:f3:fe:92:
         8f:a3:97:7c:f9:d6:da:d1:cc:96:f7:82:c2:71:21:78:a3:e3:
         de:88:be:1a:c6:ab:65:86:ac:69:c8:85:6f:c5:16:05:8c:d2:
         c4:3f:e4:26:88:2a:b1:a2:f4:d4:92:27:96:cb:14:a7:04:71:
         1f:b0:7a:b0:14:86:ef:a3:88:e1:0d:32:3a:02:3d:dc:67:9d:
         50:ef:34:9f:02:16:21:35:cb:98:c1:2f:a9:bc:77:f9:81:44:
         14:fe:b4:5d:15:a9:62:91:7f:28:3f:69:19:7a:f0:6f:16:bb:
         f2:3d:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:53 2026 by rpki-client