Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
File:                     4940253e-5c1f-3c42-8c4a-acf90d596176.roa (raw, json)
Hash identifier:          EhcJk6qNfZ4S9rjtYUg0g0GFUSivm3Ul4Uoftez80w0=
Subject key identifier:   47:2A:4F:DC:C3:F3:9D:CC:4F:F3:1E:46:E6:54:0F:11:8F:63:26:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC371DA531F301237961A4CFC
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10796
IP address blocks:        70.60.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:da:53:1f:30:12:37:96:1a:4c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=b7b4bf74-d2a7-4120-a00e-005c89fd8020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:06:9f:69:1f:6e:da:b7:41:db:e4:e7:e6:30:
                    0f:c9:80:41:9d:dc:e6:5e:5a:f8:b0:86:32:59:c0:
                    2e:12:d9:6a:ef:32:59:48:9b:16:98:34:a9:33:ba:
                    6f:64:26:82:b9:f1:95:9d:2d:7d:14:13:c9:19:13:
                    9b:cc:04:ce:bf:19:8e:17:9e:58:a1:cb:b8:dc:07:
                    e0:05:f7:95:79:2f:6f:a0:f1:ad:62:a3:fd:ed:00:
                    00:26:57:18:69:04:f6:8f:85:1c:e5:ff:5b:64:19:
                    e1:d5:98:45:4c:ba:66:d4:e6:bb:6c:30:b1:eb:47:
                    86:bb:18:fc:22:86:43:5d:ab:ac:28:55:ba:02:40:
                    a6:5e:bc:91:59:fc:f6:9e:fd:b8:e2:95:ae:b7:e5:
                    06:45:61:6e:5f:f8:90:35:a6:2d:1e:9f:7c:c5:7a:
                    1a:45:69:ea:7d:b7:c8:85:db:bc:4c:30:23:e7:f5:
                    5d:bd:dd:ed:30:0a:f6:df:32:5e:98:5f:a6:14:25:
                    8f:98:b4:22:76:0e:1c:2a:ee:1b:91:bb:46:ca:83:
                    45:c2:f0:54:f2:99:ed:d1:f4:87:53:7a:3b:2f:f3:
                    65:12:27:c6:15:2e:56:e5:f9:a8:37:b0:92:51:09:
                    69:36:3f:9a:3c:ac:5a:72:98:dd:8f:9c:bb:2b:3a:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2A:4F:DC:C3:F3:9D:CC:4F:F3:1E:46:E6:54:0F:11:8F:63:26:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4940253e-5c1f-3c42-8c4a-acf90d596176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.60.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:44:83:ba:0f:7b:be:b4:5b:c3:67:a7:18:82:7e:4b:de:75:
         20:51:16:fc:24:47:f6:b5:96:bf:57:bc:84:6b:f6:5f:90:51:
         1e:85:83:a9:f2:27:e7:94:7e:31:fd:64:94:ed:61:c3:57:c3:
         e2:9d:90:9d:3e:86:2c:d5:19:04:2b:6b:df:e9:c1:1c:6a:c5:
         b6:25:bf:e0:74:13:5c:da:3e:ac:d3:c3:e3:c1:66:a7:46:f2:
         b4:50:fd:b4:26:c1:df:0c:8d:1c:0e:88:8a:5e:09:32:65:aa:
         6a:49:d2:2d:fa:8f:46:72:79:04:bb:cc:d7:fd:9e:1b:46:de:
         cb:ef:8b:1c:bf:a6:6a:7e:3d:92:6a:e7:64:cd:1c:9c:50:af:
         1d:08:22:25:7e:27:b4:3b:19:55:63:c4:9b:74:a6:cd:45:02:
         a6:a3:c5:d2:00:ff:4f:9d:95:01:bd:7f:93:f5:7e:0d:f7:92:
         24:35:0c:1d:1a:8e:32:db:c7:57:56:0c:a5:cf:5c:e0:a0:69:
         c3:d2:18:e3:c0:76:ce:25:44:0f:d9:8b:8a:c8:a3:e8:b2:54:
         9f:0a:e6:7d:c6:a1:29:27:9d:11:3a:e4:fd:4c:52:8a:5b:97:
         54:74:87:46:c7:53:45:98:7f:fd:7a:0b:fa:21:bb:d6:ba:91:
         5a:61:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:03:39 2026 by rpki-client