Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/de736cdd-e0f5-34e6-87ad-48b85cb8d310.roa
File:                     de736cdd-e0f5-34e6-87ad-48b85cb8d310.roa (raw, json)
Hash identifier:          yMlgmtxX0T9CrT00SaGrebsuaog/RtClLTnKbrPGOZo=
Subject key identifier:   E2:9D:D3:A5:51:0C:E2:E3:1D:B9:EF:BC:45:73:8E:77:83:72:4C:38
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655E09C0DC41E5221FE1FB80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/de736cdd-e0f5-34e6-87ad-48b85cb8d310.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        67.52.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:09:c0:dc:41:e5:22:1f:e1:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=956cb90e-3285-4f1a-8dee-2ae44e272915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:d9:0a:75:5e:1e:2d:ae:4c:5d:d5:74:a2:
                    c5:b4:10:ed:70:02:b7:20:3d:c8:e6:05:ab:74:02:
                    bb:82:bb:cf:4e:bd:0d:f0:5f:57:a0:c8:18:8c:e4:
                    4b:15:b3:6c:e1:6d:71:25:24:d3:4d:f9:27:c4:0f:
                    d6:63:a5:9a:c8:40:fb:a6:2b:02:a0:e3:55:6f:30:
                    56:ee:b5:f9:32:7a:50:f3:72:fc:d5:0e:7b:35:77:
                    5b:56:be:71:d8:e7:1f:93:ec:a6:56:88:c0:df:87:
                    2e:68:ac:2d:81:79:45:9f:8d:ce:7c:02:82:8b:cc:
                    92:2e:e8:7a:b1:ab:e5:12:3d:57:0b:de:26:e0:c3:
                    6f:39:03:c8:50:91:7d:d8:bf:7e:fa:b8:3b:8e:91:
                    37:96:3e:a5:af:f8:b9:11:f3:c5:0b:18:35:23:93:
                    a5:91:02:5d:45:26:33:44:ff:33:67:27:fd:d1:37:
                    b2:25:ea:b6:b5:f2:b3:3f:d5:2b:85:5a:73:de:00:
                    53:06:c0:c7:b5:0c:8f:12:ec:da:8d:e9:79:89:08:
                    cf:be:c1:7d:c6:95:a3:5a:cf:4e:81:db:d9:22:d4:
                    2e:84:85:9a:62:0b:15:6a:7b:64:c3:55:f2:1d:88:
                    de:fe:2c:c0:11:fb:98:01:d4:9a:41:3a:fb:de:69:
                    0a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:D3:A5:51:0C:E2:E3:1D:B9:EF:BC:45:73:8E:77:83:72:4C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/de736cdd-e0f5-34e6-87ad-48b85cb8d310.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b7:6a:de:1b:0d:f5:2a:71:19:aa:e6:47:94:bc:06:94:35:
         36:27:d8:5a:c4:f4:df:4c:2f:b0:90:d2:d1:80:ed:8a:4e:b9:
         47:c7:0d:4d:81:5c:1e:21:dd:62:f9:cc:47:f8:ab:f1:9d:8e:
         e7:44:76:11:f6:da:e9:1f:0c:5d:22:f8:e0:cd:8d:d6:7e:80:
         48:41:14:ea:d0:a6:41:26:d3:5e:2d:7c:47:bb:a9:98:19:13:
         1b:26:ef:83:31:06:36:84:f7:6f:b0:6a:eb:17:d8:46:c4:b7:
         54:53:9f:77:ce:cb:5f:4b:46:3c:29:c1:e1:56:2e:98:9e:b0:
         56:94:eb:39:63:b1:2f:02:bc:16:dc:9a:1c:57:72:54:08:14:
         f0:05:4b:01:c6:57:12:d7:ae:84:fb:30:13:a6:7a:8c:9d:60:
         66:6b:30:8d:d4:34:45:12:b5:a5:1a:3d:36:32:ec:61:b2:5d:
         e4:1d:76:e8:ad:7b:ac:fd:6a:a8:ee:05:d6:07:a9:9e:b9:6f:
         c5:20:0c:cc:5d:86:ed:31:a2:16:da:d8:5e:14:40:f4:ab:f4:
         31:62:00:57:bf:06:bc:d2:f5:26:d8:d7:d2:d3:01:2e:66:42:
         a7:ae:e6:c8:6e:11:3e:fd:3b:2f:5f:75:fd:27:64:d4:43:9d:
         a0:70:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:58:33 2026 by rpki-client