Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa
File:                     3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa (raw, json)
Hash identifier:          9uK5Fy5G6+N8u4BuX3HENmjUgYXXtiLY83h3BXOL6QA=
Subject key identifier:   B5:F6:40:AC:CA:80:75:41:20:A4:DB:81:B4:E8:8D:20:C4:73:FE:38
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC371F2C97A9826402DCD0970
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     20001
IP address blocks:        24.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:f2:c9:7a:98:26:40:2d:cd:09:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a952bec2-bbec-46de-962d-4b15547947bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:de:84:fb:2b:5a:15:b6:1d:56:e8:ce:f5:4b:
                    fd:9c:a7:b1:29:e9:79:7c:0f:39:06:a3:4b:d2:70:
                    70:09:ca:00:11:f5:8f:6a:f9:9d:f1:11:7f:e5:a4:
                    f0:1a:e2:17:1b:20:83:3b:54:e5:d6:46:1b:62:f8:
                    9c:ca:83:93:b4:5c:11:8d:50:51:8e:03:5b:61:13:
                    45:14:fc:b4:64:11:27:c7:db:73:44:57:ee:b8:8f:
                    9f:44:d7:01:8d:69:a2:a9:83:b6:65:c8:86:0e:61:
                    1a:94:b4:5b:c0:ea:c3:94:2d:1e:9a:49:13:0a:89:
                    95:02:43:a2:e0:7a:c3:bf:7a:5f:2e:bd:7c:b2:c2:
                    29:f5:c0:42:3a:30:2b:22:60:2c:92:c6:cd:98:be:
                    ff:0b:b9:e4:f1:e7:d3:ef:76:87:33:54:25:e9:c4:
                    06:2d:00:51:73:c3:eb:93:ed:47:0f:21:7d:d1:42:
                    f7:2a:e9:87:7e:8f:cd:f7:81:64:d1:07:98:f3:51:
                    72:07:29:ad:9f:5d:42:56:06:fa:39:0f:f1:e4:3b:
                    8d:3e:6d:67:33:da:e2:24:7f:c9:f3:68:38:0c:ee:
                    2b:66:a6:33:71:7c:95:f3:8b:b8:6f:fb:88:7c:f0:
                    46:c4:24:51:5a:1f:39:7e:8c:b4:4e:6c:52:29:89:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F6:40:AC:CA:80:75:41:20:A4:DB:81:B4:E8:8D:20:C4:73:FE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3653ce5e-686a-3dc5-b7cb-8b8434f6e812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:57:15:35:41:16:c7:7e:46:5d:d1:56:db:7b:cc:6d:e7:cd:
         b7:ce:c6:02:79:7c:b3:c3:21:7e:42:08:90:88:5c:b9:a9:c8:
         9d:f4:32:73:5a:8d:6d:2e:de:83:bd:42:09:b8:96:65:35:a0:
         01:11:f1:f4:5a:5b:18:2a:77:54:fd:3d:68:d8:4f:5e:8a:09:
         79:23:99:e9:27:27:60:83:5c:bd:7a:aa:70:06:4e:eb:76:d7:
         22:06:d3:ab:fa:b1:6e:df:7f:69:1f:a7:f0:74:fd:10:14:e8:
         d0:aa:0a:dc:b3:d9:f8:cf:1a:99:81:b3:0b:71:9a:8c:46:a8:
         81:3d:81:fa:77:cf:52:e3:2d:38:6d:6f:31:3d:88:42:36:87:
         ca:b8:7f:32:c3:99:12:86:b8:f6:f7:23:10:a2:92:29:79:17:
         3c:a4:d0:5c:29:ff:7d:f3:c4:4c:ac:e4:ac:77:20:92:a7:ef:
         ba:a8:a7:c7:22:a7:ae:85:a6:25:4b:03:a3:1a:b6:67:49:5a:
         76:43:3c:e8:b0:33:8e:16:e2:db:7a:7d:c5:9d:01:f8:a8:f6:
         63:8f:28:60:cf:73:44:e5:11:b2:cf:66:ff:51:cc:63:91:ff:
         28:90:b5:68:d1:4c:7c:e6:13:90:1d:1c:db:1a:aa:0d:ba:83:
         22:8b:ed:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:15:25 2026 by rpki-client