Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596d24bb-6680-388f-b2c1-5389251cf55e.roa
File:                     596d24bb-6680-388f-b2c1-5389251cf55e.roa (raw, json)
Hash identifier:          5bqopW8zk0YyNz1m91zsLZWl0TnO7Gyd6QpqcsYdfUU=
Subject key identifier:   B1:70:9B:05:BA:8C:5C:BE:2D:7E:6B:BE:9F:2D:46:08:F6:3E:17:D9
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B5E27F96865CA30091B9FBC00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596d24bb-6680-388f-b2c1-5389251cf55e.roa
Signing time:             Tue 30 Sep 2025 15:54:14 +0000
ROA not before:           Tue 30 Sep 2025 15:54:14 +0000
ROA not after:            Mon 29 Dec 2025 16:54:14 +0000
asID:                     0
IP address blocks:        24.104.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5e:27:f9:68:65:ca:30:09:1b:9f:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 30 15:54:14 2025 GMT
            Not After : Dec 29 16:54:14 2025 GMT
        Subject: CN=4acbbe7b-92df-4396-a768-e10afb5a92a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:20:b0:a6:00:86:b8:74:91:44:58:82:16:52:
                    e4:e1:d3:74:66:31:c8:c0:93:58:4e:0a:c9:64:95:
                    25:48:01:3d:10:61:9e:b0:1a:79:c7:63:9a:97:b1:
                    bc:97:0c:c7:96:d5:db:a8:fb:d4:f0:77:2b:75:d0:
                    77:80:1f:92:69:df:37:b3:76:e8:f1:d7:7c:8c:b8:
                    c4:21:51:8a:11:a7:78:d3:50:d5:f7:73:d4:61:ad:
                    d3:01:0c:78:7e:55:b0:b7:1b:b0:0d:0a:b0:8d:1c:
                    14:e9:f9:bf:2f:d8:17:0c:c9:0d:2b:2f:03:f7:e7:
                    18:38:91:07:4c:83:d7:a3:4d:12:73:6a:95:24:fc:
                    77:25:60:e8:05:88:6a:f1:85:3e:23:d8:e6:e4:83:
                    de:d0:6a:fe:cd:27:da:8e:37:b2:89:6c:f5:c6:aa:
                    3a:26:e9:33:61:5b:dd:7e:d3:6b:64:a0:dc:02:9e:
                    40:4e:c7:59:ef:45:1c:97:02:95:9d:f7:42:03:a9:
                    9a:d7:05:2d:d3:e2:c6:c4:f0:97:99:da:2d:0d:b2:
                    7f:db:a9:1a:ea:2f:31:25:4b:07:43:f7:f2:91:0e:
                    b9:63:53:59:f5:77:1c:24:a0:44:fe:e1:68:56:88:
                    32:bb:51:80:4a:0b:da:ae:f9:4c:81:b8:aa:3f:6f:
                    e3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:9B:05:BA:8C:5C:BE:2D:7E:6B:BE:9F:2D:46:08:F6:3E:17:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/596d24bb-6680-388f-b2c1-5389251cf55e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.104.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:68:52:db:f4:51:45:18:6b:6f:52:d0:b4:1c:a5:b9:a8:9e:
         3e:35:aa:e4:bd:6b:40:d9:ae:1b:35:f2:13:1a:0a:58:d8:75:
         15:a6:94:63:e6:ad:f1:bd:84:83:24:48:cc:76:4c:c9:28:9e:
         8b:4a:56:ac:d1:4d:56:84:ee:de:c9:f2:05:7c:26:5f:04:d5:
         d1:8b:47:e4:ad:06:2f:4a:01:43:8b:7f:b2:26:c6:70:c8:6e:
         45:9b:fc:bd:23:f2:33:bd:a7:bc:32:02:c1:45:97:c9:30:1c:
         2e:ff:b7:15:9e:a1:cf:ad:7a:4b:03:91:b9:26:8d:4c:8e:53:
         cb:f4:e0:93:5d:1f:76:98:63:f3:56:0c:bc:36:21:f3:5a:9b:
         1d:8b:a3:f9:61:6f:71:cd:88:27:e4:f4:b3:d1:fc:2a:4e:c7:
         a8:69:a9:65:d1:7b:4e:a3:04:d8:ca:e9:f5:d3:d6:fe:de:15:
         84:08:ae:fd:98:e5:b2:16:9d:8f:ad:0d:1b:a2:eb:cf:38:3d:
         17:8b:87:94:6e:3d:b5:2e:d4:3b:da:65:b6:e0:50:85:b9:b2:
         e7:b2:dd:76:e5:10:07:a5:3a:a6:6d:e9:62:e1:8f:f0:0a:b5:
         d4:49:96:f0:1b:b2:15:2f:a1:96:8b:ca:9e:bf:7c:84:32:01:
         2e:f0:66:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:43 2025 by rpki-client