Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/353d5a58-584d-3c7e-97ff-f89a4fa4e167.roa
File:                     353d5a58-584d-3c7e-97ff-f89a4fa4e167.roa (raw, json)
Hash identifier:          QYvJn7DBT4qZjJFrLMX4T5v6mPMA1xLAE8JRtSsyF18=
Subject key identifier:   71:67:A3:3B:1B:7C:40:10:59:EC:D2:62:A5:91:AD:D4:FB:CA:05:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655E08FF5435F90004716E80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/353d5a58-584d-3c7e-97ff-f89a4fa4e167.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        162.152.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:08:ff:54:35:f9:00:04:71:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=390e7dea-cc0c-4b7f-acf8-138981caf5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:f8:ff:c8:a2:8c:56:0d:b3:14:e1:d0:7c:
                    31:56:05:66:0d:cf:7b:b0:e6:7d:9a:b1:09:fa:2e:
                    8a:b1:e3:54:65:d6:f9:2e:a4:a4:ef:c1:6d:7a:67:
                    3f:b6:b4:33:84:a3:0c:ef:15:15:64:c6:25:87:e7:
                    2d:1a:81:f6:a9:cd:17:4b:95:3d:14:e7:7b:a1:a9:
                    0f:2f:bb:a9:81:4a:9a:15:65:72:27:40:62:8c:38:
                    a3:d1:f5:bc:ae:df:98:9b:f2:d6:c3:de:9f:6b:98:
                    64:77:10:c3:c2:e0:ad:2d:92:f3:3c:e6:40:ef:9e:
                    47:a5:b0:2f:a9:b5:8b:1a:c3:61:b0:5c:d4:5d:25:
                    c4:b4:a2:49:a3:a3:7f:ae:52:d8:7b:1b:34:65:fd:
                    72:39:19:e5:b2:42:ea:7e:1c:13:b3:86:4d:b7:8b:
                    64:bd:0c:0f:a6:17:c8:90:e3:54:5a:2a:21:11:3b:
                    47:f6:f8:27:29:4b:b6:66:28:3a:40:cc:eb:6f:13:
                    9e:00:d7:ab:85:7b:f0:96:9f:73:4e:58:19:3a:f9:
                    2d:b4:2a:bf:2f:a7:80:73:cd:02:b8:84:76:66:d1:
                    52:5f:bf:91:b6:ed:87:14:2f:43:44:7c:29:c7:c3:
                    0d:9a:1c:32:fe:8a:01:64:78:36:8c:b7:89:04:49:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:67:A3:3B:1B:7C:40:10:59:EC:D2:62:A5:91:AD:D4:FB:CA:05:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/353d5a58-584d-3c7e-97ff-f89a4fa4e167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.152.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:be:81:bd:92:7d:48:8f:73:e8:6d:90:7c:72:c3:b4:4c:2a:
         cd:17:e7:26:66:3a:d5:e4:7a:ff:db:1d:0e:72:53:9f:3e:3e:
         a3:aa:2c:68:2e:da:f0:c7:c9:67:ce:d9:34:33:ae:aa:5c:b4:
         27:fb:6e:b0:e9:43:ba:29:6c:b0:3d:c6:ce:76:9a:2e:ac:62:
         dd:ae:b5:8f:be:16:f1:29:be:ad:fa:f6:95:76:e8:b7:24:d9:
         e6:d6:c2:a0:db:06:47:71:34:d7:1a:de:0c:62:58:60:60:15:
         4e:ff:c6:b5:1f:ff:76:45:2e:06:56:61:71:48:80:b5:a6:c6:
         14:b6:62:3b:7f:3a:94:51:ef:46:cd:d6:3a:7e:1c:40:ff:6b:
         4b:98:40:54:c0:4f:86:0b:28:03:65:fa:da:ca:e0:64:44:59:
         9b:c0:70:2b:f4:3f:51:40:cc:27:23:80:28:fd:ab:d3:3f:d6:
         7a:41:98:65:08:95:20:d2:77:db:68:88:63:a6:26:9a:88:ee:
         48:ee:ed:4f:01:bd:0e:db:63:cd:67:bd:41:a4:a0:8a:1f:f9:
         98:81:08:f3:00:04:eb:ae:97:a3:3f:90:eb:d0:35:82:69:12:
         0d:32:cb:44:6b:92:35:f6:f3:3b:c8:d6:23:10:7c:45:87:e4:
         67:cb:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:32:47 2026 by rpki-client