Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a6a7c420-68b1-3fa4-83a8-33e3b307ddbd.roa
File:                     a6a7c420-68b1-3fa4-83a8-33e3b307ddbd.roa (raw, json)
Hash identifier:          2SPZQSiSCw0A3OLuseMC78/Ey0Svqm6UPhOVvjIZ2hY=
Subject key identifier:   39:B0:13:0F:17:9C:F9:C3:CF:A3:A7:91:20:FE:9C:6A:E7:BC:EC:CD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC371E8926A81F962D1422D00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a6a7c420-68b1-3fa4-83a8-33e3b307ddbd.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11427
IP address blocks:        75.81.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:e8:92:6a:81:f9:62:d1:42:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=3698f809-83a3-43ba-8a1a-a9f9aa2352ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:e1:5b:7c:08:f5:f9:aa:e8:7d:c1:54:c5:
                    1b:3d:8a:ca:d4:3a:20:f4:3a:63:db:31:7e:03:4c:
                    e3:6c:06:c7:18:f5:be:46:a6:78:65:6e:04:8b:8c:
                    71:7a:8a:66:fb:bf:b7:0c:3a:d7:e0:fe:b1:27:82:
                    a3:2b:3a:e1:dd:b1:c3:c1:cd:de:8c:93:a7:fc:15:
                    68:3b:00:a9:97:ac:49:02:06:84:9e:06:db:d7:10:
                    3c:b7:98:c0:f5:7a:c2:84:ec:d5:41:78:48:bd:48:
                    1f:fe:19:cf:80:b0:b1:90:04:cb:cb:37:b5:03:10:
                    0b:3f:47:0e:62:3c:44:64:c3:98:5e:66:c0:c6:00:
                    cd:c3:21:bb:5d:ad:9e:b2:51:1e:0c:56:03:2f:f0:
                    6b:13:0e:f3:df:19:9e:13:7c:59:fc:31:84:7d:55:
                    96:a6:70:70:f8:87:60:9d:17:5e:67:c1:b8:40:54:
                    fc:be:0e:a0:70:29:40:98:60:a4:ac:56:0e:84:95:
                    96:cc:a4:c9:be:68:b6:02:8e:04:8a:fe:08:72:e6:
                    d7:96:ea:de:6f:bd:38:70:ce:ee:ed:fd:34:f0:a7:
                    52:cd:35:dd:91:74:22:be:d9:c6:4d:a8:e0:01:5e:
                    83:f5:b3:f9:35:e9:6d:03:cd:9b:08:f2:3f:5a:d9:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:13:0F:17:9C:F9:C3:CF:A3:A7:91:20:FE:9C:6A:E7:BC:EC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a6a7c420-68b1-3fa4-83a8-33e3b307ddbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.81.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:ae:31:96:6b:67:c3:58:b5:c6:dc:57:fc:e0:fa:06:8a:
         d2:1a:29:c7:13:ef:20:b5:51:12:2f:d9:95:65:56:06:ab:ac:
         b0:a4:9a:f3:d9:ca:b7:18:f8:b4:1f:84:54:ee:09:95:8f:fd:
         a2:93:9b:cc:e7:6e:62:62:a1:d7:b4:88:a3:c8:62:0b:18:8d:
         90:b5:fd:7b:19:99:aa:f2:f0:da:54:49:f4:a5:62:a4:48:14:
         cd:23:32:4b:0b:00:92:74:8c:3d:ab:77:c0:67:07:db:fb:aa:
         ae:ad:0b:95:18:ca:b3:24:a5:c3:e3:91:95:49:96:6e:3c:8f:
         40:11:9c:da:de:57:06:36:72:a9:c8:6d:bd:42:6d:41:db:10:
         fa:43:94:51:cc:00:88:78:f8:e5:32:d4:b7:a2:d4:bd:b9:73:
         7c:43:d6:df:c4:32:3e:8d:22:f4:60:27:36:97:49:64:6c:8a:
         e3:a2:d5:29:db:e9:5f:a7:56:b6:6a:6b:ea:f4:b1:4c:bb:38:
         7b:77:e2:be:2f:2b:5f:eb:8b:b1:8c:b3:a1:ec:36:8b:b3:cd:
         df:46:a9:28:0c:1e:da:60:3a:20:5a:e3:23:6f:63:69:1a:95:
         50:eb:e9:6d:dd:59:7d:8b:03:c0:6f:f6:e6:7a:08:29:c8:32:
         5e:de:62:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DceiSaoH5YtFCLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
MzY5OGY4MDktODNhMy00M2JhLThhMWEtYTlmOWFhMjM1MmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GDhW3wI9fmq6H3BVMUbPYrK1Dog9Dpj2zF+
A0zjbAbHGPW+RqZ4ZW4Ei4xxeopm+7+3DDrX4P6xJ4KjKzrh3bHDwc3ejJOn/BVo
OwCpl6xJAgaEngbb1xA8t5jA9XrChOzVQXhIvUgf/hnPgLCxkATLyze1AxALP0cO
YjxEZMOYXmbAxgDNwyG7Xa2eslEeDFYDL/BrEw7z3xmeE3xZ/DGEfVWWpnBw+Idg
nRdeZ8G4QFT8vg6gcClAmGCkrFYOhJWWzKTJvmi2Ao4Eiv4IcubXlureb704cM7u
7f008KdSzTXdkXQivtnGTajgAV6D9bP5NeltA82bCPI/WtnJkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDmwEw8XnPnDz6OnkSD+nGrnvOzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTZhN2M0MjAtNjhiMS0z
ZmE0LTgzYTgtMzNlM2IzMDdkZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1GgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuUrjGWa2fDWLXG3Ff84PoGitIaKccT7yC1URIv2ZVlVgarrLCkmvPZ
yrcY+LQfhFTuCZWP/aKTm8znbmJiode0iKPIYgsYjZC1/XsZmary8NpUSfSlYqRI
FM0jMksLAJJ0jD2rd8BnB9v7qq6tC5UYyrMkpcPjkZVJlm48j0ARnNreVwY2cqnI
bb1CbUHbEPpDlFHMAIh4+OUy1Lei1L25c3xD1t/EMj6NIvRgJzaXSWRsiuOi1Snb
6V+nVrZqa+r0sUy7OHt34r4vK1/ri7GMs6HsNouzzd9GqSgMHtpgOiBa4yNvY2ka
lVDr6W3dWX2LA8Bv9uZ6CCnIMl7eYkU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:15:17 2026 by rpki-client