Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/589825f3-616d-3e62-bce2-7b777620188c.roa
File:                     589825f3-616d-3e62-bce2-7b777620188c.roa (raw, json)
Hash identifier:          LqieIAlcgcWao1k5/m2MctQOVpPBNtczoEPz2PH8yzc=
Subject key identifier:   DC:77:3D:08:70:33:E1:32:DF:B9:EB:2B:D7:8F:63:94:5B:E0:F6:3B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F6C58161F12CCB3CB6785D9C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/589825f3-616d-3e62-bce2-7b777620188c.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     20115
IP address blocks:        24.161.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:16:1f:12:cc:b3:cb:67:85:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=2077126b-472f-40ba-b05d-aab02a940899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:ab:58:7a:b3:8f:10:93:2f:a2:16:8e:7b:
                    d8:04:d1:10:88:68:9f:f7:f3:06:e9:95:25:c1:16:
                    49:50:71:7a:84:3f:e1:c4:bc:cb:96:b8:e5:1c:b1:
                    76:92:c9:47:2b:2c:58:2a:b4:9b:f7:15:88:44:92:
                    4f:93:0d:d7:47:39:c0:8e:5f:af:5a:e3:04:d7:85:
                    8f:60:16:0e:be:30:42:02:b8:e6:ab:6a:02:2f:04:
                    c5:3f:11:8f:ee:cd:2a:b2:35:3b:f7:96:a4:f8:84:
                    4a:3e:2a:08:e6:c6:4a:b5:c9:fb:23:11:de:45:b1:
                    e7:e1:b9:bb:d1:96:ba:83:c7:90:23:4c:1f:a1:92:
                    73:f7:c6:c0:b0:3e:ce:f3:ee:27:52:ec:d2:dc:40:
                    bd:48:dd:f2:63:6b:8b:f2:f5:2f:dd:12:75:7b:bc:
                    05:15:e7:77:ff:ea:a5:d5:f6:c4:74:65:0f:e0:a6:
                    0d:63:b4:fd:b4:cc:74:91:53:d9:73:42:2e:8a:22:
                    cd:11:db:11:92:54:6e:06:1a:5f:3e:24:52:ca:34:
                    fd:86:31:2b:fe:67:68:f0:16:18:e6:00:ff:27:3e:
                    84:45:28:53:0c:90:cb:39:a5:c9:c3:99:bc:07:3e:
                    06:fa:7a:f0:8c:49:54:6e:81:5f:a4:ec:5e:a1:fe:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:77:3D:08:70:33:E1:32:DF:B9:EB:2B:D7:8F:63:94:5B:E0:F6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/589825f3-616d-3e62-bce2-7b777620188c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.161.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:3d:65:20:10:22:a9:a0:5d:d3:55:bc:a8:93:7c:d4:14:
         d7:94:86:b9:d8:6a:74:08:e5:95:2d:58:33:f2:79:83:5b:cc:
         7a:15:86:fb:90:c7:e6:67:60:49:cf:aa:fd:fd:a3:9f:92:cd:
         ea:f4:df:0c:69:c1:3f:5f:71:46:ea:af:fb:13:76:e5:33:e2:
         df:46:f1:3d:22:81:54:dc:57:54:36:d5:e8:f9:b4:7e:55:be:
         78:03:71:f1:31:17:66:f4:14:b9:c4:48:aa:be:0a:62:50:cc:
         48:03:08:3e:3e:c0:be:46:a1:cd:09:da:60:ab:ea:1d:75:85:
         70:7e:de:29:da:39:c2:5e:b1:c4:41:da:b5:bf:6a:33:d2:89:
         4d:1a:18:c8:e6:89:8b:6d:1f:75:89:e1:f1:c1:09:e9:9e:87:
         7e:f1:e2:3b:4d:ac:71:db:75:68:19:59:56:0c:3e:4b:c7:31:
         c1:d1:56:c5:20:65:91:3e:35:17:1d:55:22:bd:60:57:3c:55:
         cf:57:aa:54:d7:0b:01:8c:dd:bc:04:16:5a:c6:d3:bc:a5:6b:
         8f:f6:49:76:f2:38:d5:1d:9d:c9:16:99:a5:c2:21:6c:50:aa:
         bf:e8:35:ef:d2:0a:88:a8:76:89:36:5c:7b:d1:7e:c3:83:17:
         d4:eb:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:14:22 2026 by rpki-client