Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9cd2d929-eb91-30f2-920a-4eacfda2342f.roa
File:                     9cd2d929-eb91-30f2-920a-4eacfda2342f.roa (raw, json)
Hash identifier:          vsNWKtIjJOyn5HmDqAkFJHVt/YhThdbe1NZ0i+akPKs=
Subject key identifier:   6F:CD:6C:B6:57:4B:52:0D:CB:1A:F2:44:F3:91:C8:98:B7:F6:61:49
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DB2720C6663C46DB98840
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9cd2d929-eb91-30f2-920a-4eacfda2342f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        24.73.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:b2:72:0c:66:63:c4:6d:b9:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=c2c1a3a7-da5f-4f6d-afd5-e40856e37647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:0a:e4:5e:f9:ff:19:66:8c:b4:28:0b:2f:
                    0c:d7:e7:2c:59:10:ba:49:e1:d1:1f:c5:d1:d1:35:
                    ec:18:2f:eb:83:ad:31:19:ea:d6:b0:75:6c:3a:be:
                    ed:30:02:03:9f:0b:63:74:6f:9a:3c:de:e0:a2:d3:
                    1d:c1:11:14:bd:a5:76:80:ef:46:51:aa:55:cd:48:
                    5b:1c:75:0d:8e:cc:07:7d:48:64:4c:a5:64:57:b5:
                    7c:a1:0e:74:ba:ae:7b:9e:0a:11:8b:f5:07:2a:1b:
                    02:00:c7:55:a3:27:13:4c:b3:8d:fa:84:d0:25:35:
                    ee:ba:31:05:00:c9:74:be:21:4e:4f:47:b7:5f:f9:
                    67:73:cd:2c:f5:d6:02:4e:16:dd:67:90:59:85:09:
                    a3:62:b5:53:e2:14:00:e3:86:1e:b6:4c:21:f1:40:
                    b0:3a:f4:8b:77:43:a8:43:17:d1:fc:ee:e6:23:39:
                    60:f9:2b:8d:84:72:4f:bc:5c:05:ea:e4:d1:67:a2:
                    9c:bc:b6:80:19:a2:7c:05:3d:93:1b:ca:b2:9b:5c:
                    53:bd:ed:ea:1b:e8:c5:8f:5f:93:b3:41:7c:5f:af:
                    62:05:a5:a3:47:63:f5:17:2d:87:87:a2:49:4f:69:
                    2c:c1:85:04:4a:27:00:10:bc:48:85:84:a9:32:4b:
                    15:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CD:6C:B6:57:4B:52:0D:CB:1A:F2:44:F3:91:C8:98:B7:F6:61:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9cd2d929-eb91-30f2-920a-4eacfda2342f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.73.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:3c:20:dc:69:4e:66:ea:11:e4:d1:76:51:4a:b9:a7:8b:
         0f:62:11:b5:2f:0d:7a:f8:92:d6:cd:82:37:f5:aa:11:7c:ef:
         25:1a:52:7f:fb:fc:00:e3:44:1e:59:3c:db:93:00:93:b4:f7:
         a3:d5:dc:63:8f:fa:bd:dc:b5:04:36:b9:08:61:9f:f0:3e:4b:
         c2:15:b9:40:26:03:44:39:e2:69:6a:f8:2a:d7:13:57:27:e6:
         be:6a:d6:97:b4:82:46:f1:ad:cf:38:b3:b3:c7:3f:d1:5e:ab:
         55:cf:e3:17:c2:60:b2:6a:9b:cb:92:83:d4:2e:d1:3d:1b:6b:
         fa:fb:aa:21:4d:13:67:68:d2:ab:b5:6e:f1:b7:eb:9a:7d:64:
         68:36:b8:46:6a:fd:9b:53:b7:a7:dc:a8:7c:5b:74:9f:89:cd:
         b2:2d:e2:8b:23:de:5f:c5:7e:b5:09:51:4b:94:98:10:10:31:
         f9:62:43:89:c0:e1:04:3d:23:d0:ee:46:94:eb:b1:fb:01:54:
         91:e5:ba:76:54:c1:4f:a8:14:e5:2c:2a:7b:06:79:4b:bd:81:
         a9:82:36:13:7f:58:c4:a0:c1:a2:13:3c:9f:f8:21:1f:bd:69:
         ae:1f:15:40:9a:9d:2e:5b:9c:f7:fa:cf:63:e4:28:9c:19:90:
         be:9b:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:43:47 2026 by rpki-client