Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0040caba-c681-3d29-8d47-219f20cf46fc.roa
File:                     0040caba-c681-3d29-8d47-219f20cf46fc.roa (raw, json)
Hash identifier:          tfV7aY/rYNJjv8xdwivo5F5JsIwQSfjH2e0jv6T+jRY=
Subject key identifier:   2A:CB:99:04:16:63:C4:3A:2E:FD:6F:06:F4:83:F5:78:38:2B:92:47
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584DEDE088DAA7D9B195F62B5680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0040caba-c681-3d29-8d47-219f20cf46fc.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     401827
IP address blocks:        172.254.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:88:da:a7:d9:b1:95:f6:2b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=a10d9827-78ee-4e6a-8ca8-c37b0be0e87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:14:ab:7d:fa:0f:6e:52:29:09:b2:2e:ef:
                    13:66:fa:3b:b8:59:3c:29:9b:8f:0c:4b:6d:a6:95:
                    63:4e:2b:31:f2:70:5c:7f:32:77:81:5b:d2:25:83:
                    c0:23:63:5b:c9:92:2d:5e:02:9f:56:a4:4e:d9:62:
                    d8:7d:de:89:8a:c8:18:82:39:b9:d8:f8:b4:22:d3:
                    51:60:1f:a5:58:e6:3b:55:69:c2:5a:92:44:21:8c:
                    00:20:e3:ea:f4:71:23:31:3d:ec:60:d1:94:bc:96:
                    c8:dc:14:4b:1c:94:68:87:e5:98:09:28:4f:3c:fe:
                    ed:46:03:98:77:8d:cc:a1:04:e3:da:1d:e8:95:81:
                    21:95:7c:54:5f:64:51:ae:8a:71:76:6c:ca:99:23:
                    e9:b8:e2:a2:45:95:b2:22:c7:75:76:1c:7c:4c:64:
                    84:ad:30:8c:0c:a2:e0:91:f9:57:45:3c:95:87:60:
                    e7:9a:37:aa:c3:09:d7:1e:fc:9a:d0:46:cc:24:c0:
                    01:4e:bf:ca:cf:2f:56:a2:c6:f4:b6:8e:42:e6:37:
                    fa:2a:06:dd:6e:95:56:70:e6:4f:be:96:41:92:84:
                    1c:f2:05:da:86:90:af:d8:54:fd:78:bd:4d:ac:bb:
                    0f:28:2a:1d:6e:20:aa:37:dd:af:0e:2e:2f:7c:b0:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CB:99:04:16:63:C4:3A:2E:FD:6F:06:F4:83:F5:78:38:2B:92:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0040caba-c681-3d29-8d47-219f20cf46fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.254.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:56:69:a0:22:1b:30:e5:4e:42:1d:a8:95:d9:00:e4:56:dc:
         31:a4:f9:83:1b:dc:80:7f:4b:a2:5c:ff:d2:80:41:c5:c8:bc:
         2a:40:e1:e2:d3:ab:50:13:9e:e3:98:86:ba:3f:15:3a:22:d8:
         10:a2:46:62:53:40:01:35:a8:40:b1:39:99:ee:fe:7a:32:f4:
         1d:de:f9:f5:88:75:65:72:df:22:8a:90:79:e1:79:ba:8e:8a:
         45:2f:fc:14:8e:6c:de:d0:77:bb:7f:98:3b:95:b9:cd:38:26:
         70:d0:41:c3:62:a6:1e:1e:bc:16:a3:db:cf:84:16:59:f2:f2:
         33:69:f6:c7:ae:c7:23:c2:aa:d9:af:ea:ff:65:e9:4b:37:74:
         18:e2:bc:21:36:fb:62:fe:71:3b:f0:33:8c:0b:16:7c:83:f4:
         8d:32:ac:25:af:5b:93:a6:c7:bf:c6:ed:b2:e0:f1:cc:1b:79:
         f2:d8:08:a4:85:8e:b7:2f:df:b3:e3:a2:7d:48:28:a9:18:57:
         fa:e4:fa:30:24:f8:e9:01:a9:49:11:de:4b:55:88:e6:ec:62:
         50:61:5f:5e:e0:6e:a0:ef:0a:55:18:e2:bd:0e:7f:70:81:27:
         a4:7f:12:bf:5c:0e:d3:50:17:b4:5c:5d:7e:e4:c8:f5:2b:f1:
         65:aa:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 22:45:58 2026 by rpki-client