Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbf8d3df-38e2-3665-b0c8-de4c44cc4974.roa
File:                     cbf8d3df-38e2-3665-b0c8-de4c44cc4974.roa (raw, json)
Hash identifier:          wjbrlc9vRg/7tc4Y1gvY2yN7mQ+U+lST5xq9UmYOqF8=
Subject key identifier:   9B:4C:43:0D:40:87:FE:29:E9:95:A0:E5:17:34:8C:7A:BF:FE:42:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC372544979205601C2E6B800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbf8d3df-38e2-3665-b0c8-de4c44cc4974.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11351
IP address blocks:        24.94.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:54:49:79:20:56:01:c2:e6:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=aa01f5b2-62f1-4e3c-a069-21bce8030a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b0:ee:2d:f1:12:6e:20:a1:d2:95:2e:26:86:
                    32:8b:1c:dc:bc:14:80:8e:6d:61:49:cc:ec:75:5a:
                    2a:5a:ff:c1:38:25:36:96:ae:10:a0:73:7c:49:d2:
                    44:63:6c:89:99:49:81:52:f4:fd:ac:28:33:9f:22:
                    3b:4d:15:29:0b:24:1f:51:d8:a0:1e:0f:e4:d2:d7:
                    d6:ef:24:be:86:b6:a2:53:db:03:00:ea:08:3b:fe:
                    3c:17:e2:86:d1:14:9c:68:6d:d0:f4:44:a1:c1:d1:
                    fb:c9:9b:b1:46:90:50:d7:e6:f2:cd:6d:f0:f9:9b:
                    1b:ec:2f:a7:89:ef:77:cc:30:8f:a8:f4:61:14:60:
                    c8:46:e7:81:30:e7:4f:26:7c:11:27:6c:33:8e:e6:
                    79:52:d0:d6:2b:d8:95:b6:00:9f:1e:c8:62:ac:d6:
                    f1:1f:03:94:12:a2:cf:b5:c3:1b:ec:4b:c4:70:70:
                    e5:20:ec:2b:81:d8:40:55:70:d0:e3:cf:83:67:43:
                    b7:c2:1c:d1:78:18:13:2a:54:ea:8e:8c:b3:ee:12:
                    cb:5c:40:bb:32:94:a3:06:a5:b8:75:18:04:2b:38:
                    df:a4:74:46:ff:6a:75:3d:5d:ce:86:7c:1b:02:67:
                    36:a3:f7:b5:af:96:77:e0:eb:8b:b0:de:4f:a0:ea:
                    d0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4C:43:0D:40:87:FE:29:E9:95:A0:E5:17:34:8C:7A:BF:FE:42:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cbf8d3df-38e2-3665-b0c8-de4c44cc4974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.94.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f7:1f:1e:27:b8:36:ae:1a:d7:2f:20:68:98:f6:59:37:4b:
         92:49:63:55:1a:bc:f5:bd:26:66:0f:f1:86:61:25:03:99:7b:
         f5:b9:d5:13:7e:14:7d:38:77:09:9e:2b:43:9b:9d:d0:82:17:
         e1:bb:87:24:d4:db:d3:7e:d1:2d:58:cd:7b:fe:85:e0:ed:05:
         0b:b6:5d:77:dc:51:21:95:10:98:65:5b:cd:be:b8:4d:27:b1:
         d2:0b:b5:3b:88:ae:75:cd:9b:74:e0:50:8f:aa:5d:18:a6:1d:
         f4:16:ef:4e:6a:39:de:f3:70:eb:1d:b1:02:7f:3c:e9:7d:fc:
         2f:32:f1:0c:9b:9a:ce:55:4a:c0:bb:50:55:81:a2:a1:99:d1:
         a7:ff:9f:8e:c9:80:f2:7c:2e:66:b6:05:8b:a3:b4:11:31:72:
         88:a5:57:9c:92:1f:40:fe:55:e5:e7:d6:35:7d:b1:62:8f:04:
         65:7d:5d:e5:f6:f2:7a:6d:87:0e:21:e1:0a:31:57:dd:6d:a8:
         6a:ea:5d:82:4c:ec:1c:ad:bf:77:0f:30:cc:fe:f6:c5:22:4b:
         6e:bf:23:2a:b1:36:40:8b:48:d2:bb:e8:12:fe:3e:0b:60:3d:
         0a:2c:9b:fe:d8:cf:9b:e7:5a:3e:cc:8f:14:7e:c3:dd:11:37:
         79:c8:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:03:56 2026 by rpki-client