Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa
File:                     86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa (raw, json)
Hash identifier:          Iw8RqRZ3gDDIvhr4pTXWUKbtWZObmv3j7E4T4k7yweo=
Subject key identifier:   FB:8A:90:20:46:5D:14:9B:63:5D:D6:36:14:AC:23:5D:AE:0A:23:30
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584ED431F4CEF096732053682810
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     11030
IP address blocks:        67.52.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f4:ce:f0:96:73:20:53:68:28:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=cd17120a-6366-4eef-b849-f66477eee31e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:87:be:39:2f:ea:17:9f:b1:7d:36:a1:be:5c:
                    3d:3b:0c:2e:c5:41:2b:83:65:f0:d7:cd:83:7d:56:
                    22:1e:bf:8e:03:12:2d:57:55:59:33:26:16:6a:57:
                    d2:49:83:57:7f:85:d5:63:d4:35:c9:1b:5c:ea:dd:
                    a7:ed:a3:0b:25:60:47:94:77:dd:c9:ac:96:b4:b4:
                    33:69:e7:44:20:6d:7d:89:ed:2d:33:59:72:9f:d3:
                    51:d0:90:88:9a:ac:49:cd:78:7a:03:95:78:fe:d7:
                    e7:80:fb:7a:ed:7e:83:e1:33:9a:d8:cc:fb:b0:85:
                    67:04:0f:b4:84:ef:f2:3a:0f:40:9c:d6:80:dc:09:
                    75:ee:dd:c6:37:a1:85:f8:3b:0b:f1:c3:31:7d:9b:
                    38:47:d2:bf:42:54:59:fa:b3:cd:1a:85:6a:60:0c:
                    92:dc:f5:c7:87:72:e9:d1:f0:52:92:f1:f4:f5:fa:
                    7d:1a:64:9b:ce:e9:9b:71:5b:19:fa:03:e8:d6:ac:
                    17:fe:46:39:fe:f8:7c:9f:cd:33:86:99:d4:52:e4:
                    bc:41:b8:1e:be:c4:31:0f:75:75:7c:5b:b0:14:1f:
                    ff:e5:f4:6b:83:43:77:b0:17:fd:99:18:49:f5:12:
                    04:e7:89:9b:5b:a0:be:b9:65:af:d8:bc:91:57:fb:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8A:90:20:46:5D:14:9B:63:5D:D6:36:14:AC:23:5D:AE:0A:23:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/86cd5f9b-6152-3f24-973f-c04ae90eb6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:a4:10:3f:32:25:37:6c:47:37:27:2b:61:05:b9:e6:aa:
         7a:9a:30:4a:9b:9f:f8:0b:5f:3f:69:0a:4e:eb:ce:49:28:a1:
         a2:f6:0a:67:96:dd:67:4d:4c:b2:0c:c6:32:d3:41:60:37:30:
         e3:7a:3a:46:0d:cd:f2:7d:27:21:49:02:e2:45:18:8b:1a:e4:
         3e:8d:ca:32:5c:5f:6b:c3:38:0c:72:8f:ed:67:d6:4c:38:ac:
         77:70:d6:3a:20:00:6f:5c:86:45:90:c7:39:46:78:77:c9:74:
         84:6e:ab:e0:26:53:44:6b:8a:e4:a0:ed:70:97:86:3e:3c:db:
         e4:c4:18:8b:22:14:8c:21:c2:11:df:97:bf:85:9d:07:93:57:
         b2:97:c9:3f:90:b6:7a:06:78:ee:ec:da:ac:07:f1:87:e5:3f:
         a2:76:93:83:00:b3:bb:a4:31:29:eb:2a:7e:83:1a:f3:79:b1:
         f5:3e:34:13:2f:9b:e3:ef:2a:67:0e:32:49:f1:13:4e:06:0f:
         2f:49:1e:9c:db:a0:8c:f2:e8:ce:44:30:72:95:2b:09:8c:c7:
         c1:4d:0d:d4:dd:ef:eb:94:6b:25:e9:5b:a6:0c:ff:b5:6c:48:
         6b:6d:21:60:0e:c8:0a:3a:39:76:6c:5d:3b:b0:f7:e1:b0:fe:
         ac:63:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:06:23 2026 by rpki-client