Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e7a71e89-dc10-3c7d-9e51-5f41fd2f4fb6.roa
File:                     e7a71e89-dc10-3c7d-9e51-5f41fd2f4fb6.roa (raw, json)
Hash identifier:          z06voA2Xup8lQQZTOCJTpDqYd7rblY40xeTJ5fPzHp8=
Subject key identifier:   6D:47:CC:8A:BF:D1:B6:D9:E6:18:04:4C:0A:17:54:56:6E:BD:37:08
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D8257B267160AB64A2700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e7a71e89-dc10-3c7d-9e51-5f41fd2f4fb6.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     3456
IP address blocks:        67.48.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:82:57:b2:67:16:0a:b6:4a:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=b505d3d5-f953-447c-acf2-c44c5b9935f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:19:b9:d5:15:df:43:1c:ed:f8:50:7d:c3:
                    62:21:1b:5e:c1:06:7c:17:88:5c:df:e9:75:a9:c3:
                    c0:fb:36:29:c7:3f:bf:fc:66:cc:59:a4:bd:82:5f:
                    12:58:26:95:4c:80:ff:6c:e7:4c:42:38:51:15:42:
                    dd:e4:3e:09:a5:5f:e8:af:82:d5:2b:03:cb:7b:66:
                    45:53:f6:5f:99:81:6b:3b:68:1a:a0:1f:33:eb:24:
                    7a:25:0e:21:e4:4a:97:5a:5c:1a:1a:37:90:05:53:
                    ea:47:15:15:7a:b6:a0:79:b1:8e:03:c5:f6:29:f6:
                    99:01:c2:c6:bb:37:9f:ea:d1:2a:fc:39:a4:b9:54:
                    e3:b0:95:50:89:92:20:53:0d:8b:40:44:0e:4a:2a:
                    3d:d3:e9:52:0d:39:b8:05:dc:ac:6d:81:13:06:7e:
                    fa:d8:0d:92:55:2a:54:82:21:ab:78:d3:f8:05:71:
                    56:da:cd:e5:66:eb:14:93:33:bc:eb:08:57:46:5f:
                    82:ef:16:be:a2:6b:f3:1f:23:f7:cd:e8:e5:18:86:
                    ba:33:81:86:4f:73:f6:4b:8f:5e:93:2d:3d:4b:44:
                    ff:57:ac:a1:fb:2f:6a:48:cc:f8:ca:65:69:d1:dc:
                    8a:9b:7a:e3:7c:34:02:14:45:e2:d8:98:21:56:21:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:CC:8A:BF:D1:B6:D9:E6:18:04:4C:0A:17:54:56:6E:BD:37:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e7a71e89-dc10-3c7d-9e51-5f41fd2f4fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.48.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bc:d9:7b:6b:96:01:fc:d4:9e:25:1f:28:d5:b0:e7:ee:06:
         0b:b8:d4:5a:b6:d1:84:65:5f:c3:df:ab:fe:1d:e8:59:b3:0b:
         52:37:09:b7:be:c9:4c:82:76:36:cc:92:1f:93:84:56:d8:ac:
         c4:41:dd:6a:e5:b2:1c:06:66:a2:a5:db:16:0b:0a:2b:d2:ba:
         6f:15:ff:d3:ce:02:55:32:8f:da:3c:a6:87:e2:91:4a:c3:32:
         98:99:45:e8:1e:bf:83:63:6a:63:f6:7b:06:b5:8d:52:44:f9:
         3e:75:28:b8:02:20:2d:c4:a7:ef:e9:db:e8:e9:df:e9:fa:e7:
         47:26:32:44:e7:b5:c7:f7:ad:c7:26:84:b8:29:d4:c9:23:bb:
         05:99:ff:1d:6d:7b:93:b4:3b:a2:22:4f:6c:74:cf:f5:08:6f:
         d9:72:d4:73:07:1b:4f:16:70:ae:39:86:37:0c:51:90:dd:11:
         0f:72:37:27:8e:19:75:5f:90:57:22:ad:68:a6:da:6b:b4:f7:
         35:a8:7e:2a:1b:12:88:2c:53:5d:80:52:cb:84:4f:09:69:b5:
         06:02:4d:98:15:63:69:9a:99:d5:fc:58:da:a8:3c:b2:11:0e:
         39:f7:af:12:27:97:79:cf:62:a3:c0:ba:96:8b:28:8b:23:e3:
         ec:e7:ea:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYJXsmcWCrZKJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
YjUwNWQzZDUtZjk1My00NDdjLWFjZjItYzQ0YzViOTkzNWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhEZudUV30Mc7fhQfcNiIRtewQZ8F4hc3+l1
qcPA+zYpxz+//GbMWaS9gl8SWCaVTID/bOdMQjhRFULd5D4JpV/or4LVKwPLe2ZF
U/ZfmYFrO2gaoB8z6yR6JQ4h5EqXWlwaGjeQBVPqRxUVeragebGOA8X2KfaZAcLG
uzef6tEq/DmkuVTjsJVQiZIgUw2LQEQOSio90+lSDTm4BdysbYETBn762A2SVSpU
giGreNP4BXFW2s3lZusUkzO86whXRl+C7xa+omvzHyP3zejlGIa6M4GGT3P2S49e
ky09S0T/V6yh+y9qSMz4ymVp0dyKm3rjfDQCFEXi2JghViFawwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG1HzIq/0bbZ5hgETAoXVFZuvTcIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZTdhNzFlODktZGMxMC0z
YzdkLTllNTEtNWY0MWZkMmY0ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQzDgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAm82XtrlgH81J4lHyjVsOfuBgu41Fq20YRlX8Pfq/4d6FmzC1I3Cbe+
yUyCdjbMkh+ThFbYrMRB3WrlshwGZqKl2xYLCivSum8V/9POAlUyj9o8pofikUrD
MpiZRegev4NjamP2ewa1jVJE+T51KLgCIC3Ep+/p2+jp3+n650cmMkTntcf3rccm
hLgp1MkjuwWZ/x1te5O0O6IiT2x0z/UIb9ly1HMHG08WcK45hjcMUZDdEQ9yNyeO
GXVfkFcirWim2mu09zWofiobEogsU12AUsuETwlptQYCTZgVY2mamdX8WNqoPLIR
Djn3rxInl3nPYqPAupaLKIsj4+zn6jw=
-----END CERTIFICATE-----
Generated at Thu Oct 22 13:49:43 2026 by rpki-client