Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d87e553-f426-3935-baf4-fb3615752ace.roa
File:                     9d87e553-f426-3935-baf4-fb3615752ace.roa (raw, json)
Hash identifier:          8MhnT9mZD2qv6y0bvGM9tRu0q3WXhrlMLbuoFXgRpFg=
Subject key identifier:   C0:02:0E:23:57:B9:9D:ED:B0:38:71:E0:9B:71:AE:12:77:3A:D4:10
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E69A4BAD8A75C8298E4A69A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d87e553-f426-3935-baf4-fb3615752ace.roa
Signing time:             Mon 06 Jul 2026 21:00:13 +0000
ROA not before:           Mon 06 Jul 2026 21:00:13 +0000
ROA not after:            Sun 04 Oct 2026 21:00:13 +0000
asID:                     0
IP address blocks:        76.63.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:69:a4:ba:d8:a7:5c:82:98:e4:a6:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul  6 21:00:13 2026 GMT
            Not After : Oct  4 21:00:13 2026 GMT
        Subject: CN=8a642434-8214-467d-8118-b8a360a42980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:8b:5b:5f:2f:36:60:1e:0d:8b:36:e7:9e:
                    da:1a:74:3b:ee:6b:f8:2b:9b:f7:a1:72:08:8f:e5:
                    a0:a2:e9:4e:18:39:d5:3f:3e:b4:27:18:9c:37:4f:
                    3f:fb:2c:c4:30:ef:a2:fe:45:36:60:b3:a3:37:3d:
                    89:15:41:7d:3a:0d:02:98:77:d3:b4:c2:05:0a:5f:
                    2f:15:aa:5c:a4:d9:3a:14:e7:62:b7:1f:28:6d:03:
                    3a:bd:99:d6:12:2d:c2:57:bd:7b:06:ac:ee:a8:e3:
                    a2:65:d9:9c:25:9a:53:08:84:a1:c5:3e:3b:e4:01:
                    a4:e9:6c:b9:68:81:ac:6c:30:c9:e3:e3:f7:55:89:
                    b0:88:c4:3e:6f:41:cc:82:41:ae:0c:2d:06:77:6b:
                    e6:2d:a1:76:1b:79:0f:f4:bc:42:69:20:56:90:d3:
                    c4:8c:d6:d8:55:ac:96:6b:f7:99:be:47:1d:d8:e7:
                    9c:da:a3:00:d3:17:01:77:24:b1:2e:fe:29:f9:47:
                    6e:54:e9:9e:f9:cb:83:1f:8b:98:43:ec:21:78:d1:
                    60:5b:37:e6:e9:87:91:28:0b:e3:6d:a7:22:f3:cd:
                    a8:f3:0b:9a:f7:35:78:d3:28:da:cf:37:5b:b3:27:
                    94:8f:35:05:b4:22:96:e9:99:b4:07:9a:86:76:67:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:02:0E:23:57:B9:9D:ED:B0:38:71:E0:9B:71:AE:12:77:3A:D4:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/9d87e553-f426-3935-baf4-fb3615752ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.63.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:db:40:05:a9:f8:e0:44:1f:e4:8a:3d:ba:38:d2:71:5e:36:
         ca:7a:8c:f9:f2:13:27:24:07:12:29:a2:40:9a:58:92:0f:11:
         0a:74:1d:80:ec:3d:41:c0:bd:d1:c7:12:28:0e:35:45:e2:ef:
         40:6a:a5:e4:62:e2:cd:d0:eb:62:53:cc:cc:bd:ff:5f:f3:25:
         da:21:7c:d0:15:94:03:05:90:62:09:2e:09:71:b6:a5:ff:36:
         67:20:9d:95:e2:b6:42:ef:fb:c0:2c:28:d6:a5:4f:69:1e:6a:
         20:14:64:3b:e5:c5:27:6d:68:15:4c:8b:65:d8:62:e1:06:37:
         b2:7b:81:d7:c4:2f:cd:87:7f:fd:b4:85:fe:17:6f:3b:dd:11:
         52:f5:20:f5:e6:7e:6d:99:80:fd:94:85:57:d1:37:81:5f:92:
         89:29:25:8b:c8:63:b3:d8:77:ed:4c:2d:10:68:e7:8a:06:8a:
         ef:f4:30:15:72:8b:9c:7a:f2:ac:ff:0d:3b:f6:9f:8c:40:1b:
         24:f9:82:d4:31:e1:b3:42:e9:1b:b1:65:c0:c0:74:e5:ff:76:
         e8:36:cf:73:c2:dd:f0:f6:58:5d:8c:46:fc:f0:58:8c:23:c2:
         af:f2:a9:0e:64:26:1f:2c:7c:d2:a6:05:31:21:ee:8a:33:68:
         30:d2:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:10:45 2026 by rpki-client