Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d03d1762-b0a5-373b-b38e-0cfeb0804e7a.roa
File:                     d03d1762-b0a5-373b-b38e-0cfeb0804e7a.roa (raw, json)
Hash identifier:          mj9g5iTbEuRId31dexATGAKTJxP8n/AaV+0Ev7vRVjk=
Subject key identifier:   F6:99:F0:A1:CD:11:30:07:43:0E:F4:59:C8:2E:6B:9C:75:93:AA:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B66B73434E4638A76398DC280
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d03d1762-b0a5-373b-b38e-0cfeb0804e7a.roa
Signing time:             Fri 03 Oct 2025 17:29:17 +0000
ROA not before:           Fri 03 Oct 2025 17:29:17 +0000
ROA not after:            Thu 01 Jan 2026 18:29:17 +0000
asID:                     0
IP address blocks:        24.43.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:b7:34:34:e4:63:8a:76:39:8d:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  3 17:29:17 2025 GMT
            Not After : Jan  1 18:29:17 2026 GMT
        Subject: CN=c9adea2c-c441-4c0a-9275-577d4990ba7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:23:30:8f:07:5a:7a:d2:f2:a0:33:46:3e:43:
                    e3:94:aa:6b:cb:66:68:48:ef:70:59:d2:5c:78:d2:
                    90:be:ea:c7:c4:c2:34:da:6a:47:e7:92:43:23:61:
                    04:12:1d:fb:b7:e7:2d:89:f7:17:ad:44:69:ae:64:
                    8c:3e:6a:a0:96:ca:c7:b3:a6:5a:c0:59:9b:4d:1e:
                    cc:4d:ba:62:71:3f:5b:85:c6:59:16:f1:17:65:21:
                    9c:02:ef:ef:5c:4c:1e:65:e4:52:ac:a3:59:b0:dc:
                    07:55:96:e6:a5:f0:44:1b:4e:54:95:44:10:6b:32:
                    8d:b3:7e:74:30:fc:6b:c7:90:32:e2:1b:a4:dc:61:
                    77:2c:86:23:05:6a:9f:9d:7d:19:f4:4c:ca:8c:61:
                    e7:6a:24:0a:0c:16:cf:c4:94:c9:41:4a:9d:a5:fe:
                    0c:28:44:58:17:8b:9c:26:0c:34:e3:37:24:8d:8e:
                    a4:fe:17:83:93:14:e5:11:a9:e2:1f:67:19:9a:92:
                    bf:28:49:e7:56:ff:db:7f:d7:ac:93:ee:fb:27:4c:
                    d1:9f:e7:fb:6f:79:58:93:f8:c1:d5:5d:3d:fc:5e:
                    97:58:ca:aa:75:24:21:6d:f5:3f:4c:17:b1:ed:b6:
                    cc:ee:d6:1e:67:8a:a5:63:60:93:99:da:55:77:9b:
                    2b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:F0:A1:CD:11:30:07:43:0E:F4:59:C8:2E:6B:9C:75:93:AA:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d03d1762-b0a5-373b-b38e-0cfeb0804e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.43.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:90:2c:b4:05:66:90:95:ed:8c:78:f0:cf:1c:b0:6c:15:
         b9:23:fa:49:12:e1:4e:49:dc:8f:07:65:42:da:7c:d9:34:e5:
         d4:42:be:d9:d0:1a:c5:2f:92:e3:a1:50:bf:a3:72:23:63:f4:
         81:94:cc:02:2c:bb:3a:ea:ec:68:c9:7c:d4:72:57:bf:9e:ce:
         f1:4a:5e:75:c5:60:f2:77:79:2c:8e:f7:a4:8e:70:1d:65:1a:
         20:f3:f3:4a:75:44:3c:08:5a:dd:23:e8:65:00:57:1b:db:96:
         f7:b7:4d:d7:bf:4d:3e:1f:58:a4:de:f0:dd:10:43:18:81:b5:
         3d:96:1e:cd:96:d1:e5:6b:78:f3:6c:af:09:97:17:a4:dc:42:
         95:b8:9c:ca:8c:0a:d1:d8:0c:6f:cf:05:de:27:1b:de:de:7b:
         a6:58:60:fa:fb:0d:c2:ba:eb:9d:75:b0:51:4e:1e:b0:73:70:
         d4:f4:8d:03:af:88:05:74:da:16:86:50:59:10:8a:9c:96:0d:
         a6:51:a8:03:88:16:94:06:52:d1:66:62:3c:ff:c5:73:68:e1:
         6f:0f:ed:fa:ea:fb:2b:79:60:4c:e1:66:67:4e:8b:a1:8a:45:
         a5:5e:04:e7:20:b5:e9:24:54:bd:d8:7c:5a:a8:ac:61:e6:94:
         53:9b:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:06:38 2025 by rpki-client