Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6aa9c528-2a30-3ed8-97c1-a49efb3b6303.roa
File:                     6aa9c528-2a30-3ed8-97c1-a49efb3b6303.roa (raw, json)
Hash identifier:          U23QmCI6ll1jCq9tQCGqJxThwRvbxKSfhviq5VFw8Oc=
Subject key identifier:   1A:63:16:4C:D5:2F:34:08:D5:6D:78:64:F8:C0:A9:B2:7D:7C:5B:0A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E683F599E823C6C9A5ED1D000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6aa9c528-2a30-3ed8-97c1-a49efb3b6303.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        65.186.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:59:9e:82:3c:6c:9a:5e:d1:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=e7e726e7-9774-4f0b-8b13-1ca8028687ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:19:d9:ea:97:12:39:b9:d4:ee:99:0c:0e:
                    cb:cf:51:2e:0b:c7:c5:d2:3f:3d:8e:5f:ac:9c:73:
                    88:1c:6a:5f:6a:d3:8b:d9:97:2d:b3:34:1c:46:0c:
                    e1:0c:88:18:37:34:c9:bb:08:1c:4a:9f:12:d2:70:
                    a4:6c:e8:bb:94:6f:d0:e4:3e:af:30:ab:25:67:93:
                    42:5d:0f:1e:71:8e:a7:c8:a0:b2:4d:c2:95:a2:64:
                    49:14:ef:f4:25:09:18:9c:47:94:0a:e0:7b:ba:9b:
                    7c:3f:c0:72:05:7e:44:75:48:6f:f8:51:14:b2:ce:
                    88:b4:63:1b:4f:be:2d:1e:a3:3f:30:dd:69:0b:96:
                    c0:a5:5c:af:c0:0c:7e:9f:6a:29:79:6c:d4:8f:16:
                    75:8f:12:3f:ec:05:44:37:86:01:db:a7:47:2c:a5:
                    8a:e7:bf:47:0b:66:c9:59:2f:58:87:7b:b5:11:0e:
                    1d:e3:ec:b8:70:94:f7:51:40:72:66:9a:fb:62:87:
                    dc:ac:7c:5a:3d:ca:90:39:fd:57:0f:c3:a6:40:f4:
                    a2:2b:a5:b1:96:8c:2e:9f:59:04:8d:a5:57:7f:64:
                    c2:c7:0c:f0:18:91:a1:77:a8:3b:ed:66:e3:28:2d:
                    93:6e:a7:1f:e5:ce:93:74:4d:87:40:dc:00:3c:f9:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:63:16:4C:D5:2F:34:08:D5:6D:78:64:F8:C0:A9:B2:7D:7C:5B:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6aa9c528-2a30-3ed8-97c1-a49efb3b6303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.186.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:b0:05:66:6e:40:01:ce:3d:0b:d6:8c:49:6c:90:db:eb:
         44:d8:b0:d4:f3:c4:30:04:1e:8e:f2:fc:de:5d:87:28:ac:dd:
         a3:d9:81:c3:01:5b:10:fa:8d:ab:6f:ba:e0:4a:69:03:6f:8c:
         c9:a6:d5:81:28:fd:e3:4e:ba:6d:da:fc:68:52:09:16:29:f2:
         ba:d9:9b:0f:59:cd:ab:76:96:0f:88:fa:be:e2:a0:ed:3c:f6:
         79:8c:d3:f5:c5:4c:12:85:4d:e6:7d:b7:5c:db:e4:7c:8f:dc:
         3a:db:70:bc:ff:de:c2:b6:aa:1e:f3:9e:58:31:45:41:8c:a1:
         61:b6:6d:52:24:4a:af:cc:ab:7c:3d:ed:49:98:a9:5d:34:82:
         cc:aa:4e:9b:66:bf:66:da:14:0a:e0:c9:a2:74:d9:e5:a8:7e:
         60:be:ca:d9:d0:a7:1c:97:69:1a:a8:47:56:17:2f:f7:e3:f8:
         da:6f:6e:35:a7:d0:40:75:20:a4:71:46:85:54:8b:57:63:b7:
         bd:20:85:4a:1a:ff:b9:52:43:b7:ba:ba:e0:f1:53:ea:08:4e:
         c3:35:67:41:62:e1:b8:52:00:5a:2c:af:e3:da:ef:c2:cb:e0:
         ea:5f:4d:a2:02:29:06:2b:ab:e3:be:ac:4c:d5:48:0d:f6:c5:
         e7:5c:80:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:08:57 2026 by rpki-client