Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa
File:                     2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa (raw, json)
Hash identifier:          QWqSoeMi2SJag7cAmECBCUw/ur2c4a68KCmogc0EMiI=
Subject key identifier:   DB:7E:E4:C5:FE:2A:E1:DA:11:48:85:78:EF:86:E4:CF:D0:A0:9B:B9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC37251530DAC359D6C7D5000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10796
IP address blocks:        70.62.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:51:53:0d:ac:35:9d:6c:7d:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=2f685782-4200-4566-9134-721a56783ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:f2:17:a7:db:c0:fc:96:9e:36:e9:52:ba:
                    65:c9:be:d0:d3:bc:e1:7e:58:4a:6b:eb:32:a7:14:
                    df:dc:96:07:b4:5f:cb:9f:a6:e0:c8:16:4c:79:91:
                    80:cb:bc:42:9d:a0:09:9c:2a:cc:fd:8b:6c:e8:46:
                    09:e6:fb:11:3a:c4:14:b0:b4:5a:04:a2:12:73:c1:
                    ec:ba:12:3b:5f:d7:b2:7e:44:4a:f3:53:58:31:ad:
                    1a:a4:73:f3:ec:c9:3e:e3:e6:08:68:1b:e6:87:49:
                    00:10:86:02:2f:dc:3e:75:6b:a2:4a:73:ed:9f:4c:
                    d1:a8:40:d9:e5:55:ac:25:d5:35:dd:e9:9b:e4:a7:
                    cf:30:57:74:91:97:60:69:c7:ac:11:1f:db:c4:2d:
                    4c:23:52:6e:f6:b6:c2:88:78:4c:67:4a:ce:24:86:
                    b5:f3:0a:3d:c6:5c:33:b8:7d:58:1f:ff:a6:16:98:
                    bf:58:97:f0:09:d6:b8:2f:af:fb:08:f5:e2:b5:2d:
                    ef:d3:ad:56:80:9d:a2:ad:c0:35:c9:6d:02:e3:09:
                    13:00:41:8c:fa:86:10:13:90:5e:5b:1b:a3:59:c8:
                    35:a9:2a:c5:42:12:96:12:c0:e5:99:ef:db:c4:1e:
                    b7:07:73:52:d5:51:90:03:66:66:fb:93:51:17:88:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7E:E4:C5:FE:2A:E1:DA:11:48:85:78:EF:86:E4:CF:D0:A0:9B:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2e8aec8c-21e7-31f6-8ff3-9da670688bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.62.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:45:d4:ea:c3:13:65:68:22:61:ca:63:b6:51:da:79:e6:0c:
         b2:bb:da:00:1b:00:c4:2f:15:03:e7:74:56:82:b9:19:00:7e:
         5f:75:16:eb:c0:7e:a2:62:0c:f8:4c:1a:9e:43:f9:60:24:eb:
         81:fe:8b:f3:03:72:d5:1c:73:47:6d:b8:a0:b0:af:03:09:f2:
         6b:88:40:5d:f5:90:48:30:a1:98:d0:7e:82:f6:d0:66:89:70:
         12:0b:31:bf:b9:a0:6f:2b:5c:04:8d:60:90:e3:ba:fb:43:2d:
         10:f4:c3:bf:c6:cc:dd:53:36:52:fa:58:f9:99:0d:c2:78:88:
         15:6e:32:11:45:e2:bd:5f:7a:db:71:20:dd:6f:a4:f8:ba:0e:
         59:b6:24:c5:b9:41:07:9c:da:3b:56:7d:5b:16:7d:a1:a8:04:
         a5:a5:bd:7c:a2:b9:07:89:69:33:8e:4c:cc:f6:ef:c5:28:76:
         0a:11:eb:cc:95:6c:68:16:e0:6e:0f:db:3f:bc:f0:59:79:ca:
         a9:a6:ae:57:11:5a:43:ae:d9:55:2c:a3:3d:2f:80:95:a8:5e:
         09:16:03:de:c8:6a:40:4b:3a:7b:58:2e:44:dc:f5:02:13:55:
         e0:68:89:71:15:e1:fb:57:74:91:81:34:a3:f0:9f:e7:8a:47:
         09:44:29:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DclFTDaw1nWx9UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
MmY2ODU3ODItNDIwMC00NTY2LTkxMzQtNzIxYTU2NzgzZWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7HyF6fbwPyWnjbpUrplyb7Q07zhflhKa+sy
pxTf3JYHtF/Ln6bgyBZMeZGAy7xCnaAJnCrM/Yts6EYJ5vsROsQUsLRaBKISc8Hs
uhI7X9eyfkRK81NYMa0apHPz7Mk+4+YIaBvmh0kAEIYCL9w+dWuiSnPtn0zRqEDZ
5VWsJdU13emb5KfPMFd0kZdgacesER/bxC1MI1Ju9rbCiHhMZ0rOJIa18wo9xlwz
uH1YH/+mFpi/WJfwCda4L6/7CPXitS3v061WgJ2ircA1yW0C4wkTAEGM+oYQE5Be
WxujWcg1qSrFQhKWEsDlme/bxB63B3NS1VGQA2Zm+5NRF4gN7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNt+5MX+KuHaEUiFeO+G5M/QoJu5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMmU4YWVjOGMtMjFlNy0z
MWY2LThmZjMtOWRhNjcwNjg4YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERj4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVF1OrDE2VoImHKY7ZR2nnmDLK72gAbAMQvFQPndFaCuRkAfl91FuvA
fqJiDPhMGp5D+WAk64H+i/MDctUcc0dtuKCwrwMJ8muIQF31kEgwoZjQfoL20GaJ
cBILMb+5oG8rXASNYJDjuvtDLRD0w7/GzN1TNlL6WPmZDcJ4iBVuMhFF4r1fettx
IN1vpPi6Dlm2JMW5QQec2jtWfVsWfaGoBKWlvXyiuQeJaTOOTMz278UodgoR68yV
bGgW4G4P2z+88Fl5yqmmrlcRWkOu2VUsoz0vgJWoXgkWA97IakBLOntYLkTc9QIT
VeBoiXEV4ftXdJGBNKPwn+eKRwlEKQI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:03:44 2026 by rpki-client