Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa
File:                     d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa (raw, json)
Hash identifier:          B8srePeMEEoXzoVg9qKUH3eICz4Lo2Xe9kz91hPTbuI=
Subject key identifier:   8A:6A:DB:7E:00:28:4C:83:04:E6:02:7F:DA:AE:EF:FF:B8:7C:B3:D8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655E259A9A2B9368C8578180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        97.78.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:25:9a:9a:2b:93:68:c8:57:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=3162a9c5-3721-4236-a185-adaebd913516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:b4:34:ea:dd:73:62:55:b8:52:47:f8:e6:
                    b4:73:e6:00:f5:19:57:b9:a0:28:74:b3:ef:be:af:
                    ed:d7:91:ab:59:1b:75:b7:3a:c7:0c:af:5a:78:5f:
                    c9:39:55:54:de:d6:12:9c:16:54:a5:a1:b7:b9:e9:
                    0f:e3:bb:b6:78:9b:98:39:2d:a6:4a:20:86:1f:ae:
                    a3:8a:f6:95:dd:6a:98:dc:7c:e3:17:e1:a4:d0:2b:
                    bc:02:14:b1:0c:f7:21:51:30:25:56:db:7c:99:63:
                    dd:40:bf:81:5f:3b:3e:2e:30:5f:24:20:87:ce:b1:
                    39:13:1e:25:d6:32:7e:5e:4e:b2:64:9b:ba:b5:a7:
                    61:06:ea:65:5e:5f:ec:de:5a:4d:07:dc:bd:0e:e0:
                    78:c5:28:8f:a4:76:f8:2b:47:f3:f4:e9:8a:9a:42:
                    89:0b:fc:d5:3f:72:bb:f4:29:16:5d:58:c1:81:eb:
                    ef:46:c9:df:0d:c2:f9:c2:92:75:7a:de:ee:ba:ad:
                    59:dc:74:24:ee:5a:f1:46:27:bf:10:79:20:f9:52:
                    23:fa:5f:24:ca:5d:7d:d2:6f:00:f4:60:6e:44:c0:
                    43:1c:dc:10:83:bf:6b:18:ed:cf:2b:68:1a:0c:15:
                    6a:55:93:4e:4b:98:62:93:d9:d2:a2:8b:e3:4e:35:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:6A:DB:7E:00:28:4C:83:04:E6:02:7F:DA:AE:EF:FF:B8:7C:B3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d2ada5bd-d925-34d6-845a-c9f0eb68be4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.78.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b8:d2:2f:b6:7f:4c:c3:c4:11:8d:ae:6f:99:10:3d:7d:c2:
         84:5f:7c:0d:a7:81:f6:e7:d5:5e:41:c2:31:33:74:32:fc:04:
         94:15:73:93:b9:d8:3d:29:95:03:35:85:99:93:38:a6:57:82:
         51:aa:41:70:20:85:7d:33:66:6b:41:33:ca:d2:2d:3a:c6:4a:
         72:11:9b:6f:95:2b:f3:2f:0b:13:8a:8d:f2:f7:52:a2:92:cb:
         da:2b:63:63:12:e0:de:b6:8c:6e:ba:d1:e5:74:2f:97:8d:74:
         4b:97:78:9f:82:fb:6f:6c:28:a0:e7:0e:97:7e:00:34:e6:27:
         8c:00:85:55:0a:52:05:3d:d1:48:c6:95:e4:8a:2a:e6:40:1d:
         48:08:45:01:37:19:f5:c5:b9:5f:c5:cc:2b:1f:5d:07:32:82:
         59:e3:8e:bc:47:0e:14:7f:47:81:a7:09:1d:be:dd:18:ea:07:
         63:5c:0a:da:3f:29:33:dc:5f:86:ba:81:1a:a7:ac:44:3d:89:
         fd:42:29:b3:e5:a0:5d:a4:61:9d:40:82:21:de:ac:58:4d:3a:
         9c:50:0c:5e:95:8d:e0:a1:ac:2c:1a:fd:c7:49:f5:45:76:d7:
         58:04:11:cc:ef:12:83:6c:69:43:d1:ae:ff:e2:23:4e:1d:b8:
         c3:02:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:44:04 2026 by rpki-client