Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c4200c4-6971-3be1-bd01-965db6b01a4c.roa
File:                     4c4200c4-6971-3be1-bd01-965db6b01a4c.roa (raw, json)
Hash identifier:          MCQWHSPYgrGg+vGiD0c8iauCVf0kG6pS3BdHEzvVFQc=
Subject key identifier:   9A:65:F8:56:F6:09:55:DA:75:60:C8:F2:21:6C:E8:0E:40:B8:DA:1E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E69A4BA1950810C29DE87E580
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c4200c4-6971-3be1-bd01-965db6b01a4c.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     0
IP address blocks:        76.57.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:ba:19:50:81:0c:29:de:87:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=43c89d53-2b0b-4253-8c21-fbf1a8359d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e2:10:bf:c7:61:bf:85:42:51:0d:5f:ec:bf:
                    b4:58:9f:7b:ff:dd:27:a2:44:d9:6e:01:88:5a:5b:
                    76:33:59:ca:c8:a2:c9:90:34:6f:55:07:03:ab:55:
                    c7:60:d8:21:43:73:e3:4a:10:36:10:a3:5c:6b:fa:
                    0b:f1:7b:a4:20:1d:77:69:be:59:53:c9:65:d4:b1:
                    e3:31:d6:5c:ac:71:f4:51:e9:ee:d7:67:97:b4:84:
                    2a:d2:79:53:cb:39:a2:34:ed:2b:4d:d0:61:f0:c5:
                    0b:ab:4f:ec:09:c3:c3:b0:f8:c5:9c:4a:0a:68:18:
                    6f:f6:5f:eb:f2:f2:85:1f:20:42:35:47:d0:42:24:
                    71:07:c1:0d:19:5f:76:50:58:87:49:c2:fc:fb:0b:
                    61:5a:68:d6:07:84:d5:59:6d:6d:9b:74:04:40:7c:
                    57:6a:e9:cf:84:1f:56:cb:bd:87:0e:b1:05:f6:9a:
                    aa:e1:34:3c:1e:65:b6:20:9c:83:94:fe:db:8b:20:
                    6e:b8:12:3a:fd:f2:7e:9c:03:92:e6:16:39:b8:5c:
                    48:9f:63:3e:63:20:b4:20:8c:ae:6e:7b:d3:a2:9f:
                    6f:fe:c5:1f:d7:a8:59:4c:3c:59:cb:6a:03:6d:eb:
                    14:c6:67:ad:c8:64:2f:6e:9c:ce:bc:f2:84:05:a0:
                    69:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:F8:56:F6:09:55:DA:75:60:C8:F2:21:6C:E8:0E:40:B8:DA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4c4200c4-6971-3be1-bd01-965db6b01a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.57.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:0e:d5:00:79:45:ef:4f:cf:85:03:e3:3f:d3:b7:f1:b0:
         68:33:49:2b:1b:f5:aa:7e:2f:42:91:c5:3b:c1:44:c7:c0:92:
         81:f1:06:e8:87:c8:d7:45:17:6b:f3:62:60:1b:a8:ee:6a:4f:
         4d:37:1d:61:fe:05:a7:49:4f:27:f4:68:0a:22:db:95:aa:63:
         d5:da:50:fe:e2:f4:76:03:7e:9c:4c:f5:4a:a4:b2:b3:75:b1:
         58:2c:e7:0c:9d:71:c7:10:10:49:3f:42:28:08:7e:c2:d0:7e:
         bb:07:8d:22:ce:46:b8:3a:73:0c:03:b7:b7:dc:66:16:02:b0:
         87:06:56:4c:2a:0a:ef:3b:80:83:2f:95:98:76:9b:46:6f:b6:
         1a:2a:1b:ca:c8:fc:26:58:3f:6a:5b:12:27:2e:ae:ae:c3:54:
         bb:44:42:32:d8:27:fc:ad:80:78:08:6d:39:30:4b:6e:22:dd:
         2e:73:ce:83:1a:f3:5a:39:3d:0d:fd:06:0d:f4:85:83:32:fe:
         39:a3:4a:d5:1e:4a:ad:fb:80:11:f8:38:4a:78:a5:43:15:d7:
         6b:ea:51:35:23:02:7b:9f:43:df:af:9a:bf:0a:f0:9e:fb:f6:
         f6:43:bc:76:3a:8a:08:d1:5f:79:d9:e7:42:f1:2f:94:c1:98:
         0f:ad:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:09:01 2026 by rpki-client