Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/11693c64-09b8-3e69-af26-3f039b5eecfd.roa
File:                     11693c64-09b8-3e69-af26-3f039b5eecfd.roa (raw, json)
Hash identifier:          QQWjVDZx0zi0fHOz5AZoUqUj5+eAJZveXiMz8lZPzJw=
Subject key identifier:   CD:B3:5C:F0:0F:F4:E8:90:B6:26:3E:ED:21:35:94:D8:08:16:E7:D4
Certificate issuer:       /CN=5028ee72-1629-4552-a11f-947b5a925519
Certificate serial:       010D0C9F4328584AFAB6838E4CE138985F1DF840
Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/11693c64-09b8-3e69-af26-3f039b5eecfd.roa
Signing time:             Tue 26 Aug 2025 01:00:32 +0000
ROA not before:           Tue 26 Aug 2025 01:00:32 +0000
ROA not after:            Mon 24 Nov 2025 02:00:32 +0000
asID:                     63023
IP address blocks:        204.136.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fa:b6:83:8e:4c:e1:38:98:5f:1d:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519
        Validity
            Not Before: Aug 26 01:00:32 2025 GMT
            Not After : Nov 24 02:00:32 2025 GMT
        Subject: CN=84e9ff11-4ad6-4942-939f-fad3a363dab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:00:c4:b2:5d:ac:78:66:d5:26:81:33:6e:e7:
                    e7:af:66:23:74:96:4f:9e:cc:bb:b4:4b:c5:f7:23:
                    c1:91:fa:00:08:3d:f6:6f:fb:c6:22:61:7a:48:6f:
                    8e:95:8f:c7:16:ef:68:10:6f:56:b6:2c:84:30:3c:
                    a0:61:1d:f0:42:32:de:f2:14:35:2a:c7:73:dd:80:
                    0d:1e:58:c7:c1:cf:de:39:c4:d7:48:b6:40:30:98:
                    70:50:5d:be:93:31:42:2e:51:59:03:93:50:d7:c2:
                    cc:70:31:ad:46:a6:ed:f3:05:c8:db:83:42:cc:61:
                    c6:a3:b5:05:bc:22:cf:cd:30:05:ad:fc:f1:fb:2d:
                    05:1a:ca:17:06:b8:fa:d6:c5:d6:17:c4:50:cb:2d:
                    f7:28:9f:60:96:a0:fa:7b:1c:35:a9:1f:23:78:c7:
                    3e:94:e4:16:f4:eb:48:a5:e2:b9:9f:d2:aa:70:72:
                    ce:a9:b1:57:54:a8:6e:a4:14:f7:bd:e9:e0:26:bb:
                    7b:71:2e:82:9b:b9:3c:39:85:e9:59:18:0a:98:a3:
                    eb:fa:2f:1b:db:f9:a3:2b:83:bb:ed:18:e5:b4:c4:
                    45:6b:b7:8e:9a:cc:32:9f:33:f0:4a:e7:27:31:21:
                    a9:07:31:2c:50:f6:6a:ee:a6:d4:7f:a5:60:fb:a5:
                    cf:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B3:5C:F0:0F:F4:E8:90:B6:26:3E:ED:21:35:94:D8:08:16:E7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/11693c64-09b8-3e69-af26-3f039b5eecfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl

            X509v3 Authority Key Identifier:
                keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.136.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:81:4b:b1:9d:be:02:8d:da:09:aa:ba:ab:a5:9e:0f:30:
         95:0e:52:b0:cc:0a:23:b9:10:1c:4c:c8:e9:b8:6e:82:15:69:
         77:dc:ac:fb:49:94:64:18:d8:81:40:22:89:09:af:a9:8c:36:
         75:13:70:e6:e9:cd:f2:ae:fb:db:08:b3:de:1e:63:69:61:b8:
         28:2a:78:e5:b8:f9:12:32:b4:59:60:35:f9:3f:e2:1a:12:a8:
         dd:a6:e8:0a:4a:a2:7d:74:9a:ca:2e:63:f1:53:db:91:3f:99:
         7b:44:99:a0:f3:eb:33:fa:ad:19:45:6b:6a:fa:76:4b:3b:bf:
         23:1b:ed:63:de:19:76:32:23:dc:1f:e8:bf:2c:ef:34:03:98:
         44:3b:20:69:e0:5b:17:dd:27:57:ec:ac:95:b1:46:62:42:45:
         12:23:87:d8:77:2e:d4:99:7b:ab:05:eb:46:f1:14:22:e0:fd:
         2a:79:5d:52:34:5c:58:e0:83:6f:6b:f0:6b:a5:eb:4c:1e:18:
         91:4f:5e:59:d5:2a:82:70:88:69:69:2b:c0:0d:d1:ff:1d:80:
         d8:ed:4b:02:f6:f6:ef:df:95:82:6b:13:ee:62:41:96:45:7d:
         9f:1d:1b:36:41:f8:ec:63:5c:b7:8e:f8:23:e4:af:3f:84:6b:
         68:de:97:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:18 2025 by rpki-client