Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa
File:                     dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa (raw, json)
Hash identifier:          nkyo8RdndC6OMN2DQA+IKkdlMZAEt3GUoqj2egdHLb4=
Subject key identifier:   AA:42:37:91:27:2F:8B:3F:5E:F1:73:B8:38:F3:91:3A:4B:84:09:96
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC372585BF06E80297FF52F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11426
IP address blocks:        65.188.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:58:5b:f0:6e:80:29:7f:f5:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a4fe09de-4f50-4df3-94ef-8fdc1a693646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1c:3b:7c:7f:4d:4f:14:74:45:72:fd:65:a7:
                    1b:bf:ba:45:92:94:ad:9e:40:fe:bf:81:32:ff:a2:
                    c7:b7:fe:0d:bc:f4:25:31:e2:01:86:00:e5:61:05:
                    8c:94:45:d4:fa:33:40:2f:a8:8a:23:ee:dc:9c:bc:
                    96:e1:00:48:59:57:e4:60:39:22:24:04:23:0c:70:
                    7a:ad:b7:37:1d:d6:46:cd:bd:17:01:21:a5:98:6f:
                    65:a7:8c:0d:6a:10:98:d7:3f:02:1e:58:c0:8d:bb:
                    37:77:dc:3b:19:9f:7f:92:88:d1:fa:a6:19:21:dc:
                    c3:4f:88:06:e3:15:0f:8f:1c:43:c2:86:6d:58:eb:
                    c7:1b:81:4e:7b:b4:ef:33:d6:96:78:ad:3a:3c:ec:
                    32:d0:d0:04:fa:f9:69:cf:6e:03:51:f7:9b:c8:5d:
                    78:20:23:a4:08:ee:58:68:46:d1:73:31:ec:67:ef:
                    d8:f6:2f:9f:66:c3:73:31:e3:c4:63:21:6c:af:1d:
                    92:40:f4:e2:2e:40:e7:85:08:de:01:86:2e:82:af:
                    73:5b:c4:c6:0d:20:55:c3:21:73:1a:9c:aa:e3:a1:
                    21:53:07:a8:d5:93:a2:d1:2a:8d:0b:87:d4:96:f1:
                    5f:2b:ef:94:6e:e5:e4:55:21:74:ce:79:dd:2f:be:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:42:37:91:27:2F:8B:3F:5E:F1:73:B8:38:F3:91:3A:4B:84:09:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/dcfb9198-9eff-3ce0-9a34-812368d01a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.188.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:09:da:7a:d5:ce:b3:37:6e:7f:8d:d6:f9:bf:09:5d:c1:
         a7:9f:f7:0e:aa:3d:c2:f6:d0:c7:0f:7d:aa:c3:3c:7a:5d:db:
         19:1f:5d:7d:cb:33:ca:a9:20:02:b9:0b:bf:be:fb:7a:f4:6e:
         61:1d:e9:a7:d4:c5:ec:3d:32:04:8d:2a:bb:a6:d5:e7:f5:09:
         fe:4d:52:9f:58:37:0d:ed:7c:80:5c:16:24:7a:16:99:91:47:
         7e:2d:b3:07:e5:bc:7d:4c:85:cc:b0:98:93:dd:5f:06:76:f0:
         ac:bf:c9:e8:2f:46:81:18:dc:52:be:c3:b2:d4:a4:19:a5:ce:
         3d:40:35:0e:aa:75:91:53:32:61:c1:32:d5:f9:fc:b6:33:cc:
         05:bd:95:06:e4:9b:22:b0:86:69:ba:e0:44:9f:c5:7f:d6:90:
         93:cc:71:85:dc:23:4a:25:5b:2a:16:59:1d:c5:75:b3:8b:d7:
         63:b2:72:78:4b:66:9b:93:c9:0b:f0:79:4f:c5:33:ff:2c:e9:
         fe:60:e6:3a:03:15:d8:42:61:75:c2:91:e4:b0:e2:49:33:7d:
         ed:75:86:e9:c0:cb:bc:65:ca:91:bb:a3:59:a5:d8:ec:4a:01:
         de:3d:09:3f:22:d3:60:c7:3d:eb:53:5e:6e:43:05:17:e0:67:
         ed:f9:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:44:23 2026 by rpki-client