Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f4f2f764-a281-309f-bf83-6b465297251e.roa
File:                     f4f2f764-a281-309f-bf83-6b465297251e.roa (raw, json)
Hash identifier:          xjP7YEiOAtqP7JcCdw03A6CkAzE9PmYZv0egI4rjJp8=
Subject key identifier:   B1:72:2F:23:33:22:8C:71:0D:9C:2D:93:52:CB:D6:88:DA:00:1D:F7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DA7E4310A05A73FC2BD78
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f4f2f764-a281-309f-bf83-6b465297251e.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20001
IP address blocks:        24.160.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:a7:e4:31:0a:05:a7:3f:c2:bd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=99885a32-9346-4934-8072-0f9a9f10057b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:96:11:b5:ab:88:f4:2d:df:3a:6c:c2:8d:
                    89:e9:52:d2:20:4f:10:25:23:be:9c:b5:20:75:62:
                    ac:7d:60:07:d1:f2:9b:42:2e:cc:66:49:0d:af:7b:
                    76:b7:4a:94:2b:0b:fb:32:de:2c:00:7f:b1:af:33:
                    88:3b:86:e8:dc:0e:bd:e3:95:cc:a6:4e:72:5d:9a:
                    f0:4e:2a:90:50:fa:ad:66:d2:e3:11:49:7b:b0:6b:
                    30:c3:4a:d3:49:e5:48:a7:a0:ad:00:6f:e1:68:fe:
                    fd:dd:79:84:cb:76:a1:75:eb:26:39:f2:57:29:72:
                    f9:2e:40:b4:24:14:c4:9b:79:fa:38:ef:4b:cd:0e:
                    54:b3:71:12:a6:e5:40:27:a4:27:24:c9:43:f6:a1:
                    f8:8d:fd:d6:b4:42:1c:88:11:fe:94:1d:aa:4d:45:
                    d6:38:4e:ad:99:85:a4:61:68:9e:91:67:da:eb:72:
                    f3:bb:39:59:7f:52:16:f1:72:cb:0b:32:5b:c0:eb:
                    8e:56:75:7e:20:ed:cd:14:b1:33:b7:af:c8:33:00:
                    67:e4:69:dd:3f:42:eb:06:5b:d5:23:92:cd:e9:13:
                    1b:bb:c9:fd:65:19:96:01:84:eb:65:fe:2f:a8:cd:
                    f8:d7:91:4a:8b:0f:38:32:84:86:a1:33:f8:aa:74:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:2F:23:33:22:8C:71:0D:9C:2D:93:52:CB:D6:88:DA:00:1D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f4f2f764-a281-309f-bf83-6b465297251e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.160.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:5d:d3:25:1b:5a:8a:98:60:93:99:51:0c:9f:b3:a6:f8:11:
         7c:dc:b2:75:9e:84:26:68:23:6c:7a:9e:31:6d:ee:db:34:24:
         30:27:04:f2:38:22:80:06:e2:09:53:81:35:0d:e5:0f:ab:07:
         60:6f:37:1b:6c:cb:0f:5a:00:69:e0:b1:00:15:7e:3e:cd:55:
         ce:d9:08:89:91:8c:97:ba:65:09:70:79:c9:a1:5c:52:e4:fc:
         d2:61:a5:a5:b3:ee:05:92:84:21:41:25:45:14:6a:38:d2:c7:
         39:28:a4:80:0d:7c:49:b5:cc:21:e3:ce:4b:8a:dc:05:2a:81:
         af:5d:2a:6a:77:46:72:48:e2:21:10:9b:8b:f5:82:c5:f4:31:
         8a:b3:d1:d5:51:64:ac:10:fa:10:b2:23:41:94:3b:34:8a:5d:
         ef:fb:63:3e:59:8e:5b:57:16:1f:d1:f3:9f:e7:f2:3a:b5:33:
         c6:73:bb:52:0a:53:64:96:45:1d:be:fc:5c:fc:1d:ac:36:2c:
         37:c7:5b:d3:10:35:d8:7e:4d:ce:c6:fa:c2:69:ff:77:29:ef:
         23:e5:6f:91:97:84:6f:d9:a6:06:5e:5b:43:b2:a3:99:86:74:
         cb:b1:3e:94:90:74:59:ff:4b:1c:86:05:c9:82:46:70:4c:95:
         4c:59:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:52:17 2026 by rpki-client