Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/704bd01d-a103-3b0d-9a40-7f3af106f853.roa
File:                     704bd01d-a103-3b0d-9a40-7f3af106f853.roa (raw, json)
Hash identifier:          EGzNDOg8dOJFGAPKsxb1jqeBONcYmUmlev0giOb2Qzg=
Subject key identifier:   90:DB:A2:BC:FE:06:73:DC:DB:71:5E:6C:A3:4D:A9:42:99:AB:75:11
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC3724E4F216340B1B8335600
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/704bd01d-a103-3b0d-9a40-7f3af106f853.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10796
IP address blocks:        24.123.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:4e:4f:21:63:40:b1:b8:33:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a7ff56a3-3beb-40f4-b55a-e5ab6d128e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:af:a4:42:30:0c:15:a6:b1:68:07:9f:e0:
                    5b:3f:5a:b4:0a:23:a4:4d:a5:86:6f:ba:bd:7d:c9:
                    15:55:af:ea:a8:7a:24:66:5a:68:77:0b:da:46:63:
                    0e:18:d8:66:9e:2c:9b:e0:e0:3b:27:05:69:90:ba:
                    87:13:0c:5c:4b:2e:fc:a5:5e:48:77:af:3e:1c:fe:
                    3f:9f:bc:5f:73:4c:88:34:0d:ee:6a:c6:6f:14:aa:
                    1a:0e:6e:05:91:a7:4a:81:6d:8a:ae:15:ba:79:06:
                    c0:f3:e5:f5:74:03:38:44:00:d6:97:f9:21:f8:32:
                    bf:32:37:72:22:5d:c5:af:01:3d:33:7c:5d:ca:67:
                    2c:26:f3:f0:4e:a1:0c:53:04:4d:18:e8:d7:af:ee:
                    74:c0:e4:ed:76:48:d3:5c:cd:55:41:1b:3e:25:d6:
                    fa:7a:61:46:a8:f3:3d:6b:7d:64:85:50:ef:9f:30:
                    88:14:1c:7d:d2:fd:04:79:32:bf:c6:a8:23:7b:48:
                    38:40:d1:ef:e4:72:ed:62:00:80:78:b2:40:ca:64:
                    ae:b6:34:87:42:22:69:86:ea:14:dc:14:e7:b4:e3:
                    37:a0:93:84:fd:3a:a4:48:d9:fb:c9:49:02:79:1d:
                    fe:c8:0f:aa:33:2f:7d:91:9b:99:17:de:21:a7:4d:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DB:A2:BC:FE:06:73:DC:DB:71:5E:6C:A3:4D:A9:42:99:AB:75:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/704bd01d-a103-3b0d-9a40-7f3af106f853.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:52:a7:e8:d2:4d:49:01:8e:90:e4:4b:09:bc:f6:e5:ff:
         74:c7:c1:bc:39:f9:90:fe:80:dd:6e:80:92:18:25:bb:7f:54:
         84:5d:55:9f:70:70:0f:19:e0:2e:32:b8:f6:89:c2:ab:da:f2:
         ae:28:d0:68:eb:32:38:fe:bf:14:89:49:03:5a:35:6b:72:74:
         87:c2:eb:4e:43:a1:77:3c:01:16:0d:9d:df:95:38:ed:a8:c8:
         e2:12:eb:c4:e8:a0:2e:aa:3f:0a:f3:b2:ec:c6:07:32:8f:bd:
         f5:02:91:65:e8:10:f3:f1:96:d6:58:6b:74:97:73:28:94:25:
         ff:94:f4:aa:45:68:08:78:cb:01:18:19:33:b5:77:dc:5c:dd:
         5d:f2:01:4c:c5:4c:f1:b5:07:0f:99:c7:7e:e8:7c:da:c6:7e:
         9d:0e:5d:4b:56:df:c3:98:85:57:65:31:a6:44:10:36:61:f0:
         83:0c:80:82:00:85:2d:ac:8a:a8:68:15:a4:b2:13:4d:50:da:
         2a:09:6d:46:9b:15:5d:14:b3:6f:64:41:92:f1:44:b4:66:cc:
         71:2f:da:e1:d8:38:e9:f8:92:d5:9d:cf:17:c3:27:88:a1:2e:
         50:81:e7:f8:a0:f7:32:f6:e1:bc:9e:1b:50:72:91:7e:3f:db:
         ac:2d:10:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:09:54 2026 by rpki-client