Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa
File:                     f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa (raw, json)
Hash identifier:          3FSi/y3/qEDZ2PAHzfFSEHNrrhYontkvEPpk9FYJTRQ=
Subject key identifier:   F6:FF:2A:F7:25:AF:02:E8:A9:F1:F4:C9:6F:3C:FC:F5:73:84:E5:CA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D87F324B2F6A6D4E4D490
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        24.209.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:87:f3:24:b2:f6:a6:d4:e4:d4:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=8f6bcbd8-5a9f-4439-89ad-4c037ac79fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:27:4f:90:fa:fd:e7:7e:fd:18:35:30:fc:
                    c9:5a:9b:02:3c:c7:5b:c7:4d:b4:08:94:90:f9:84:
                    94:34:6b:d6:c6:9b:b4:85:da:9c:42:f1:7b:6f:f4:
                    2f:5e:aa:ea:0a:b6:5f:21:b7:70:80:10:e5:e1:e5:
                    f8:7b:bd:c9:90:1e:e9:20:67:39:32:d9:f1:1a:5a:
                    73:cb:34:cb:a5:17:73:c5:00:5f:b6:cb:e0:d0:88:
                    37:9d:46:fa:0b:36:d2:9b:4a:f4:d7:a6:6f:9b:1b:
                    8b:6a:13:40:2f:42:ec:12:e2:02:48:28:8a:10:6c:
                    f9:8e:d4:f2:c5:2e:9c:7d:b9:49:7e:60:df:02:e8:
                    32:5c:e8:7c:59:f1:2a:4e:97:32:37:02:f7:54:06:
                    99:c6:b0:79:d1:76:f0:50:46:c5:aa:a8:f4:ee:1a:
                    ba:a7:a0:6d:b2:c6:f8:42:cb:e8:e2:d7:ed:73:db:
                    c2:e6:1c:4b:6f:a2:18:c9:05:a0:5f:76:5b:86:80:
                    d9:91:65:6a:e9:8d:40:83:db:7b:0a:52:0b:1d:de:
                    a8:28:7f:87:29:91:b6:2d:82:bc:6a:0c:77:b2:5a:
                    61:c2:f4:28:71:d1:c7:a8:c9:3f:76:91:2a:b0:bb:
                    66:59:ae:e8:57:f5:d0:54:3b:24:e4:44:9e:74:1c:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FF:2A:F7:25:AF:02:E8:A9:F1:F4:C9:6F:3C:FC:F5:73:84:E5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f53d1b14-d039-3596-bcbe-8a4a67ea930b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.209.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:87:be:86:7e:19:dd:de:d3:d0:22:bd:53:38:ae:fd:a7:1b:
         bc:bf:30:1c:95:9d:bb:4d:73:f8:48:ed:0c:35:19:3b:cd:7c:
         bb:4a:fe:f8:9e:77:8e:96:77:43:91:bb:dc:64:6b:b1:b1:e0:
         39:cd:a8:59:76:53:40:2e:bc:1f:dd:00:24:f1:87:11:a0:97:
         fd:57:5f:1b:6d:35:3e:7e:30:05:5c:6b:f8:47:24:e3:d1:f2:
         40:52:4e:ed:1b:89:f9:06:3e:11:49:68:61:af:23:04:e8:34:
         8c:d7:69:f1:c1:cf:f5:e9:2e:0e:af:63:3a:ba:b5:ee:b7:db:
         ab:82:76:8e:21:a4:cb:9b:a3:e6:ea:e8:0d:12:cf:3d:da:1d:
         1e:ff:37:85:8e:9c:b7:0d:f6:1a:83:5a:10:45:a4:ed:5d:f7:
         f2:e7:26:aa:2c:55:06:76:eb:aa:d7:5c:58:fc:f8:1b:ff:3d:
         91:eb:54:59:d0:8e:1d:82:bd:e5:b3:4c:8c:6e:78:f2:9f:a7:
         26:e6:0d:2b:5f:bc:6e:50:bb:0c:0c:d4:65:cd:1f:64:50:16:
         c0:31:2c:f9:1b:a1:82:52:5d:8b:31:97:38:41:68:c9:26:9e:
         06:2a:7f:f5:f4:73:53:81:dd:68:74:aa:09:b8:51:5d:11:6d:
         09:77:7c:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYfzJLL2ptTk1JAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk
OGY2YmNiZDgtNWE5Zi00NDM5LTg5YWQtNGMwMzdhYzc5ZmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPknT5D6/ed+/Rg1MPzJWpsCPMdbx020CJSQ
+YSUNGvWxpu0hdqcQvF7b/QvXqrqCrZfIbdwgBDl4eX4e73JkB7pIGc5MtnxGlpz
yzTLpRdzxQBftsvg0Ig3nUb6CzbSm0r016ZvmxuLahNAL0LsEuICSCiKEGz5jtTy
xS6cfblJfmDfAugyXOh8WfEqTpcyNwL3VAaZxrB50XbwUEbFqqj07hq6p6Btssb4
Qsvo4tftc9vC5hxLb6IYyQWgX3ZbhoDZkWVq6Y1Ag9t7ClILHd6oKH+HKZG2LYK8
agx3slphwvQocdHHqMk/dpEqsLtmWa7oV/XQVDsk5ESedBwJ1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPb/KvclrwLoqfH0yW88/PVzhOXKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZjUzZDFiMTQtZDAzOS0z
NTk2LWJjYmUtOGE0YTY3ZWE5MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGNGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKHvoZ+Gd3e09AivVM4rv2nG7y/MByVnbtNc/hI7Qw1GTvNfLtK/vie
d46Wd0ORu9xka7Gx4DnNqFl2U0AuvB/dACTxhxGgl/1XXxttNT5+MAVca/hHJOPR
8kBSTu0bifkGPhFJaGGvIwToNIzXafHBz/XpLg6vYzq6te6326uCdo4hpMubo+bq
6A0Szz3aHR7/N4WOnLcN9hqDWhBFpO1d9/LnJqosVQZ266rXXFj8+Bv/PZHrVFnQ
jh2CveWzTIxuePKfpybmDStfvG5QuwwM1GXNH2RQFsAxLPkboYJSXYsxlzhBaMkm
ngYqf/X0c1OB3Wh0qgm4UV0RbQl3fKw=
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:10:50 2026 by rpki-client