Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8472c42a-34e7-36da-b0f3-68bab2ea446a.roa
File:                     8472c42a-34e7-36da-b0f3-68bab2ea446a.roa (raw, json)
Hash identifier:          zyR0TLEHcUlGe/jqKqeux9+xOcSoR35PPgDuGHMfEmo=
Subject key identifier:   66:1C:1D:05:4B:4C:A1:52:00:51:7F:79:EE:60:63:8D:3F:43:27:B2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B66B7390C1ABEB6DA8DE3D380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8472c42a-34e7-36da-b0f3-68bab2ea446a.roa
Signing time:             Fri 03 Oct 2025 17:29:19 +0000
ROA not before:           Fri 03 Oct 2025 17:29:19 +0000
ROA not after:            Thu 01 Jan 2026 18:29:19 +0000
asID:                     0
IP address blocks:        24.173.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:b7:39:0c:1a:be:b6:da:8d:e3:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  3 17:29:19 2025 GMT
            Not After : Jan  1 18:29:19 2026 GMT
        Subject: CN=147bea75-492a-48bf-9d35-7b8ce97223d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:96:10:ce:18:3a:e7:b5:6e:e5:2b:08:62:
                    6d:bb:67:2d:69:a2:4c:36:5f:69:0e:53:e9:77:92:
                    61:ad:f0:0e:84:1d:a7:d4:a7:1d:4f:58:42:ba:92:
                    19:20:a2:1f:92:94:9f:2a:1f:fe:87:e0:78:41:fe:
                    03:53:52:ff:7d:3e:38:5b:be:c7:e5:d4:c2:8a:42:
                    39:f8:74:3e:c7:f4:f9:a5:9c:1b:ba:4a:5f:09:78:
                    95:f3:f2:4d:66:e5:d8:dd:f8:00:d6:df:ca:f7:59:
                    60:b7:c0:bd:79:99:f8:8e:07:db:54:8f:8f:7c:f1:
                    6d:59:32:24:66:05:ba:2b:c4:61:46:8b:c7:d5:77:
                    2a:73:7f:5c:6a:be:87:09:75:36:54:b7:b3:e8:12:
                    8b:07:71:79:d0:8b:1b:7f:a9:4c:3a:97:06:50:3c:
                    1f:25:d1:38:86:a9:b5:8c:d8:3c:9b:50:2e:b9:fc:
                    ef:ff:be:fe:5f:0c:84:5c:6b:fe:01:95:99:27:32:
                    a2:4d:31:a9:8d:f1:ed:6e:de:a9:72:01:99:e9:5b:
                    25:9b:65:65:31:a1:be:03:eb:03:f7:6c:f3:1b:09:
                    0b:85:bc:80:b1:04:4d:63:84:dc:c9:7b:19:32:83:
                    2e:94:73:8d:58:67:8c:95:03:07:7c:ff:c4:50:c5:
                    a8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1C:1D:05:4B:4C:A1:52:00:51:7F:79:EE:60:63:8D:3F:43:27:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8472c42a-34e7-36da-b0f3-68bab2ea446a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.173.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:86:ff:ae:c7:b0:89:fd:34:e5:1c:b7:df:c2:75:03:f8:78:
         bc:b1:16:fe:9c:c3:35:61:d9:f8:8f:2a:df:f1:9c:f0:d4:b2:
         93:bc:b6:96:78:4b:0d:02:c9:19:25:6a:29:ef:a1:68:35:3c:
         a8:fe:b4:f4:4b:de:01:42:fa:e5:49:f3:25:80:37:fb:3d:c0:
         c1:24:1a:53:38:88:b7:c9:93:1a:4f:45:31:01:cc:5e:94:bc:
         84:5e:75:d7:ee:c6:b0:30:d9:b8:0b:30:93:ce:5a:95:fb:7f:
         b5:50:b7:ee:fa:68:94:be:32:23:e3:ed:49:76:c5:81:3c:f3:
         e6:74:b8:e8:63:18:2e:47:76:49:5d:86:ce:7a:54:85:5b:d8:
         dc:a0:c7:b7:27:72:71:de:38:f3:9a:b5:b7:b4:98:65:18:4d:
         9d:ad:f2:6a:20:90:2e:de:6d:29:f9:bb:c5:12:87:42:15:bc:
         f2:8a:25:3e:fe:47:b7:e0:53:ec:70:cb:ff:09:bb:66:36:c2:
         cb:b4:07:4c:4d:16:74:17:1e:74:6b:d7:b4:4c:fa:68:3d:72:
         a1:62:08:1b:05:73:d3:3a:98:9f:f8:4a:92:2d:78:89:ae:1b:
         6c:a6:84:18:77:64:97:e3:7b:42:be:48:7b:ff:7a:df:e2:1e:
         5a:fd:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:59:45 2025 by rpki-client