Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df528633-d988-34f3-b6af-b60d30c0a659.roa
File:                     df528633-d988-34f3-b6af-b60d30c0a659.roa (raw, json)
Hash identifier:          ELW+HzKwg1HyAeyliBaZk+SR6XbomnD5vh5HOlbN1g0=
Subject key identifier:   EF:56:79:BE:49:CE:21:D6:08:F2:CE:54:11:35:84:8C:64:DA:29:DA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC3725E471A2C06E476AC4000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df528633-d988-34f3-b6af-b60d30c0a659.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11427
IP address blocks:        71.41.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:5e:47:1a:2c:06:e4:76:ac:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=89963bc6-ea1f-4724-89a8-6161b6b0766e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:75:7b:6b:23:cd:82:10:28:05:38:a8:fd:
                    91:0b:85:71:b2:05:51:07:0c:fa:e4:12:62:7e:aa:
                    c0:20:b2:6d:06:07:12:6e:94:dd:21:bc:0a:1d:9f:
                    a0:5b:cb:98:ea:94:1d:df:29:32:b8:32:bb:40:c9:
                    75:82:17:86:f0:8c:74:8f:70:f7:2c:58:fb:e7:71:
                    cc:77:b9:8d:e6:13:12:8c:8b:16:35:86:be:fe:7e:
                    7e:d6:73:05:e0:96:95:27:ce:8f:53:a5:0e:ed:ab:
                    9b:65:26:cc:ad:4b:92:56:da:4f:fe:da:07:81:75:
                    61:3c:cf:93:14:d5:8d:04:64:75:d3:81:81:12:54:
                    a7:9d:5e:96:aa:1c:91:51:a8:23:8e:e5:7f:f6:cb:
                    6f:5b:82:19:b5:1e:72:2b:81:41:78:05:a9:be:b0:
                    0e:be:6f:11:67:a1:e3:d7:38:f0:53:ff:90:a1:44:
                    c8:a4:79:72:6e:16:1f:0c:dc:a0:e6:60:02:95:1b:
                    dd:e7:23:d1:75:a3:a8:18:58:99:91:d1:02:af:2c:
                    75:6a:04:b2:73:95:66:ae:e7:ba:2c:83:fe:e3:66:
                    d1:c6:31:3a:8c:5e:38:89:50:c9:e6:35:88:c3:6b:
                    fc:6b:ea:3e:76:85:28:80:de:98:bb:90:4b:c2:a7:
                    af:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:79:BE:49:CE:21:D6:08:F2:CE:54:11:35:84:8C:64:DA:29:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/df528633-d988-34f3-b6af-b60d30c0a659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.41.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:bb:14:d2:13:31:4c:18:ff:ce:ae:f7:6d:7b:17:89:ba:e9:
         6a:dd:78:fe:7f:a7:b3:6d:53:d9:25:3c:2d:62:c9:5a:cc:06:
         79:03:72:00:d8:ed:1d:20:bf:1c:62:e4:c7:12:28:b2:b5:24:
         00:63:66:6f:0f:e6:5d:81:7d:1a:b7:5a:9a:1f:b0:53:cf:a5:
         72:2b:66:f5:f3:40:f2:46:96:af:00:90:e4:35:15:c9:d5:14:
         78:df:b0:29:45:0a:ef:f7:19:b8:7a:3c:59:e2:93:4a:6f:f5:
         41:c3:b7:bb:82:c4:70:18:01:50:69:20:00:cd:d6:d5:02:2e:
         cb:11:3e:7f:28:73:4b:99:72:9d:54:c8:dc:01:2b:49:10:bf:
         62:79:47:11:3d:18:7f:be:a9:dd:36:e5:cc:01:68:53:b3:0a:
         2f:94:09:b7:fa:fd:bb:9b:bd:0f:11:93:fa:d2:02:2c:84:b8:
         40:d5:5b:2d:51:12:71:76:05:4c:5d:8a:2e:5a:ae:64:e3:31:
         cc:01:17:0b:b2:6b:8b:ec:93:04:c6:ab:80:c9:24:ed:95:c3:
         50:55:32:24:14:a9:18:fb:0e:d2:5e:f2:a3:bf:ad:13:6d:a3:
         72:00:9f:a2:7d:80:62:f0:1c:42:6d:82:67:4e:bb:1b:89:fd:
         6b:8c:1b:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcl5HGiwG5HasQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ODk5NjNiYzYtZWExZi00NzI0LTg5YTgtNjE2MWI2YjA3NjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tR1e2sjzYIQKAU4qP2RC4VxsgVRBwz65BJi
fqrAILJtBgcSbpTdIbwKHZ+gW8uY6pQd3ykyuDK7QMl1gheG8Ix0j3D3LFj753HM
d7mN5hMSjIsWNYa+/n5+1nMF4JaVJ86PU6UO7aubZSbMrUuSVtpP/toHgXVhPM+T
FNWNBGR104GBElSnnV6WqhyRUagjjuV/9stvW4IZtR5yK4FBeAWpvrAOvm8RZ6Hj
1zjwU/+QoUTIpHlybhYfDNyg5mAClRvd5yPRdaOoGFiZkdECryx1agSyc5Vmrue6
LIP+42bRxjE6jF44iVDJ5jWIw2v8a+o+doUogN6Yu5BLwqevMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO9Web5JziHWCPLOVBE1hIxk2inaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZGY1Mjg2MzMtZDk4OC0z
NGYzLWI2YWYtYjYwZDMwYzBhNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRyngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADG7FNITMUwY/86u9217F4m66WrdeP5/p7NtU9klPC1iyVrMBnkDcgDY
7R0gvxxi5McSKLK1JABjZm8P5l2BfRq3WpofsFPPpXIrZvXzQPJGlq8AkOQ1FcnV
FHjfsClFCu/3Gbh6PFnik0pv9UHDt7uCxHAYAVBpIADN1tUCLssRPn8oc0uZcp1U
yNwBK0kQv2J5RxE9GH++qd025cwBaFOzCi+UCbf6/bubvQ8Rk/rSAiyEuEDVWy1R
EnF2BUxdii5armTjMcwBFwuya4vskwTGq4DJJO2Vw1BVMiQUqRj7DtJe8qO/rRNt
o3IAn6J9gGLwHEJtgmdOuxuJ/WuMG5s=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:52:16 2026 by rpki-client