Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/14e0d68a-e9a3-3874-a835-a415908609c9.roa
File:                     14e0d68a-e9a3-3874-a835-a415908609c9.roa (raw, json)
Hash identifier:          h1Euqdn8iAsKZne4BkZIPkK9N+iCJ8IHqjOWa3lTt0c=
Subject key identifier:   50:0B:F4:DF:D3:FB:C6:28:5B:5D:24:23:8B:BC:98:BC:BD:D7:2F:9D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584ED0020F4953927C65EC68DE80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/14e0d68a-e9a3-3874-a835-a415908609c9.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     20115
IP address blocks:        173.40.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:0f:49:53:92:7c:65:ec:68:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=c92c213e-5103-41d3-869b-85b38b8d2bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:3c:7b:af:5b:c7:d2:1a:3d:ca:81:64:9b:
                    58:89:9b:e3:c4:4a:f0:0b:ba:4c:6b:98:db:f8:80:
                    36:a2:8c:af:cc:fb:6e:7f:3b:6a:eb:85:b7:76:1e:
                    5e:65:ba:31:32:59:d4:90:fb:fd:36:b5:f1:38:ac:
                    93:c8:b5:43:c3:bf:91:ba:61:00:b2:8f:0a:32:ec:
                    69:3c:9b:26:70:d9:3f:79:73:16:7c:c3:8b:0a:8d:
                    0d:b0:2f:c2:a4:c1:71:a9:2b:40:58:48:43:8b:19:
                    13:fd:da:e7:16:35:43:1e:46:60:af:b1:98:21:34:
                    68:48:a3:d4:b4:7d:03:d2:d0:3d:a0:16:df:e1:d1:
                    7d:79:8a:49:36:c2:25:18:79:99:aa:35:ab:fb:d9:
                    28:37:7f:a9:82:1a:84:76:25:82:a0:41:6e:89:e6:
                    95:98:e8:e7:6a:6a:88:c0:66:07:ea:b8:43:3a:f9:
                    f4:25:96:6a:c3:54:de:aa:39:01:ed:59:8b:28:0b:
                    a6:e5:ea:92:95:cf:79:3b:6d:d0:b9:70:0d:e8:60:
                    87:6f:f8:f3:37:d7:3d:1d:89:a2:b1:31:25:c6:54:
                    1e:8a:3c:9a:d7:06:ac:77:f7:a7:bd:f5:93:25:46:
                    17:a3:2d:9f:97:61:f2:f2:0c:4d:7e:70:c2:a8:cd:
                    03:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0B:F4:DF:D3:FB:C6:28:5B:5D:24:23:8B:BC:98:BC:BD:D7:2F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/14e0d68a-e9a3-3874-a835-a415908609c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.40.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4f:11:9c:ed:be:96:8c:3a:eb:6f:64:32:b3:23:69:47:26:
         52:d4:d2:3c:bb:56:f9:78:ed:99:df:b5:71:e0:07:0d:bf:fc:
         04:8c:70:a3:46:fe:fd:b1:fb:5f:d6:3f:99:80:d4:3d:b2:c9:
         a7:9e:d0:f3:59:d6:4d:ea:db:a7:3e:46:60:84:ae:84:64:e0:
         1c:a7:77:9e:44:87:14:6e:7d:2e:50:82:84:b0:1e:40:61:5a:
         d7:3d:38:2b:13:f8:0e:82:0b:b3:0f:76:0a:08:46:be:c6:cb:
         34:5a:48:56:73:43:5d:51:2e:eb:fe:7c:07:db:a2:6d:7f:00:
         ad:c6:ac:21:a1:b1:73:19:8e:29:cf:d3:d9:01:bf:e7:b6:8f:
         9a:ec:25:e6:c0:5f:14:1b:ad:78:a8:00:0c:c3:cd:4c:12:f4:
         5d:52:48:7f:ec:b3:cf:06:d7:a4:12:a5:d5:4e:e2:35:02:ed:
         4a:f0:01:e4:05:9f:c3:c3:d1:a3:8b:a6:75:d1:a7:47:76:d9:
         08:1a:20:ba:ea:6b:b8:9a:34:a6:18:73:3b:a5:1f:7a:77:9c:
         fd:a6:7b:31:0d:4e:99:64:9b:30:5b:e3:7a:9e:f7:41:b4:45:
         14:32:93:f0:eb:f9:70:00:62:84:60:f6:ae:74:e5:3d:22:7d:
         fb:5c:f2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:58:47 2026 by rpki-client