Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
File:                     436c452c-7620-380a-b414-78245a407ccc.roa (raw, json)
Hash identifier:          Ag3x1yKviz4BpslYxLX6QULRbvv9mKlrhmVEER80KZs=
Subject key identifier:   65:D0:DE:88:20:BA:2A:A7:18:CF:FB:BA:A0:09:CC:C0:D1:D3:0D:F0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E815F94EB6785F8DD856D45C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     11351
IP address blocks:        2603:70bd::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:94:eb:67:85:f8:dd:85:6d:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=254137db-945f-418c-acf9-1ef9201d0ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:ff:93:ff:6e:2b:9b:39:ac:d8:06:9a:58:
                    48:17:f5:73:c5:78:ba:3c:f2:e5:bf:bf:ab:0a:b6:
                    2f:ca:fa:fc:f9:cb:57:fd:c8:80:f9:9a:89:cb:17:
                    54:cc:9e:27:37:97:d6:5d:86:9f:67:c2:6a:ee:08:
                    a6:0c:f5:d2:77:01:c9:ed:e1:a8:c2:77:c7:6d:14:
                    6c:3e:d8:fd:30:15:5b:32:aa:7a:17:4b:50:78:5f:
                    19:01:a8:15:03:d1:a4:e4:5a:8f:57:78:ad:38:59:
                    7a:b0:f4:92:65:8c:d3:25:18:6c:f7:92:34:c0:9c:
                    8a:d3:5c:49:8b:37:56:7d:df:e3:e1:e1:67:ad:d2:
                    4d:e1:06:82:97:37:8a:29:1b:27:50:16:a0:81:51:
                    97:a9:52:40:23:f2:43:ff:21:e1:fd:1d:ac:5a:6a:
                    b5:86:ae:83:4c:16:74:2e:60:8a:c4:81:e1:f8:bf:
                    64:dc:e3:12:37:52:e1:f8:0f:54:4a:40:31:09:67:
                    b2:e4:c6:93:d9:31:87:03:0b:e5:7d:c4:b4:1b:98:
                    74:27:a9:00:59:56:32:17:e7:ee:e1:7e:55:a1:06:
                    73:0e:49:74:dc:3c:b6:59:32:7f:17:af:fe:21:bd:
                    25:46:bb:39:14:60:43:ed:74:cc:c8:fe:3e:09:83:
                    76:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:DE:88:20:BA:2A:A7:18:CF:FB:BA:A0:09:CC:C0:D1:D3:0D:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436c452c-7620-380a-b414-78245a407ccc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:70bd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ee:04:d8:04:48:8e:f7:cf:64:e6:2a:6e:d5:28:36:39:db:
         3a:f2:b7:b8:6d:49:ea:f4:0f:cd:27:66:ad:c7:95:6b:be:fc:
         be:ab:b0:13:79:1e:a5:3b:3f:28:ce:e7:44:d3:96:2c:78:3d:
         c3:91:af:0a:43:93:88:b1:f7:9d:1b:26:bc:5e:e3:e3:f8:16:
         7f:27:02:bf:02:3d:74:d9:b5:8b:7c:af:05:f0:13:5d:c7:ed:
         8f:15:c4:c5:f8:b8:c5:14:d6:ab:8d:8a:48:67:cb:9f:df:2f:
         1c:09:0d:13:f3:be:df:83:0f:44:c7:04:58:ad:d7:ba:cc:17:
         8c:b7:41:a2:a1:07:fc:c4:17:ed:11:fc:e9:b5:27:ce:25:5e:
         f5:76:46:f0:14:12:e0:c5:32:15:42:85:2a:13:c8:3b:9e:ae:
         44:89:4f:3d:f4:4c:2d:e2:a0:c4:da:c4:f0:bd:a7:d3:e2:a7:
         55:04:b0:cf:32:46:eb:ff:43:6f:8b:d5:e9:7b:40:e6:8d:e1:
         3c:d5:b3:2c:3b:cd:b5:9a:85:6e:47:46:52:fb:7e:c4:f4:cf:
         1f:4e:d5:10:9b:30:93:9b:aa:66:8c:b5:1a:81:a3:d6:a0:c4:
         17:36:e7:f8:b9:12:fa:c0:3f:77:5d:ce:22:b2:0a:78:89:0d:
         21:16:58:af
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6BX5TrZ4X43YVtRcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MjU0MTM3ZGItOTQ1Zi00MThjLWFjZjktMWVmOTIwMWQwZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJD/k/9uK5s5rNgGmlhIF/VzxXi6PPLlv7+r
CrYvyvr8+ctX/ciA+ZqJyxdUzJ4nN5fWXYafZ8Jq7gimDPXSdwHJ7eGownfHbRRs
Ptj9MBVbMqp6F0tQeF8ZAagVA9Gk5FqPV3itOFl6sPSSZYzTJRhs95I0wJyK01xJ
izdWfd/j4eFnrdJN4QaClzeKKRsnUBaggVGXqVJAI/JD/yHh/R2sWmq1hq6DTBZ0
LmCKxIHh+L9k3OMSN1Lh+A9USkAxCWey5MaT2TGHAwvlfcS0G5h0J6kAWVYyF+fu
4X5VoQZzDkl03Dy2WTJ/F6/+Ib0lRrs5FGBD7XTMyP4+CYN2jQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGXQ3ogguiqnGM/7uqAJzMDR0w3wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDM2YzQ1MmMtNzYyMC0z
ODBhLWI0MTQtNzgyNDVhNDA3Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgNwvTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBq7gTYBEiO989k5ipu1Sg2Ods68re4bUnq9A/NJ2atx5Vrvvy+q7AT
eR6lOz8ozudE05YseD3Dka8KQ5OIsfedGya8XuPj+BZ/JwK/Aj102bWLfK8F8BNd
x+2PFcTF+LjFFNarjYpIZ8uf3y8cCQ0T877fgw9ExwRYrde6zBeMt0GioQf8xBft
EfzptSfOJV71dkbwFBLgxTIVQoUqE8g7nq5EiU899Ewt4qDE2sTwvafT4qdVBLDP
Mkbr/0Nvi9Xpe0DmjeE81bMsO821moVuR0ZS+37E9M8fTtUQmzCTm6pmjLUagaPW
oMQXNuf4uRL6wD93Xc4isgp4iQ0hFliv
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:10:09 2026 by rpki-client