Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee550a1-2c22-3833-a465-35796372753a.roa
File:                     1ee550a1-2c22-3833-a465-35796372753a.roa (raw, json)
Hash identifier:          vZ9WrIcdkOLiiYvJK8qnKR5XAiqmlCqK5EXoEPlpiLE=
Subject key identifier:   3D:1A:B5:51:B1:D6:A3:1D:35:C6:89:0D:D9:B7:7B:45:3B:25:6A:A8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161136ABD119DE572030A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee550a1-2c22-3833-a465-35796372753a.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        76.89.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:13:6a:bd:11:9d:e5:72:03:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=f35043d7-d202-4650-9bbf-739dcdb6ca73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:9d:0d:31:70:ef:4d:2e:8d:46:60:ee:22:
                    16:25:6d:3b:f5:08:7c:1d:ed:d3:ef:58:86:15:b2:
                    d9:bf:ef:00:e2:68:5e:6b:d7:c8:fc:0e:e2:e5:23:
                    60:90:a7:4a:ff:a5:7a:de:4b:8d:09:f2:ea:07:6c:
                    d2:ff:dc:65:91:2f:69:e5:84:2a:55:d4:b8:6c:fb:
                    79:11:ad:b5:97:63:c7:65:85:6b:85:11:0f:a8:67:
                    bc:c1:d6:df:2f:dc:06:eb:29:a4:4a:25:93:6a:15:
                    4f:3c:32:6f:07:63:85:66:94:7b:bb:24:73:c9:62:
                    3a:c9:2f:04:8c:ed:3b:8d:21:16:2b:b7:cf:25:0b:
                    af:2d:c0:f1:6a:d5:35:c0:0d:7c:9c:ac:7e:81:47:
                    ae:73:11:7e:ca:c9:76:9a:64:99:e2:d7:21:d5:d5:
                    3a:5a:cb:dc:b1:a4:1c:b8:73:b9:ab:27:cf:0f:b7:
                    8b:02:9e:cb:cb:71:bc:22:b4:7e:b8:2f:75:e7:2f:
                    8a:7e:a1:a1:34:80:a1:21:d2:6c:14:26:02:58:20:
                    c3:3b:01:4e:d8:6d:bf:27:f0:5f:06:ca:a3:56:16:
                    e8:65:85:ba:f9:4c:4c:80:33:25:81:04:c5:87:6e:
                    c6:20:0f:1e:0c:96:8f:e8:0a:fe:46:4d:53:44:de:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:B5:51:B1:D6:A3:1D:35:C6:89:0D:D9:B7:7B:45:3B:25:6A:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1ee550a1-2c22-3833-a465-35796372753a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.89.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:5b:4b:28:1a:7d:66:48:c6:e3:ab:4a:a7:ed:f0:13:a4:
         7f:35:49:18:ca:00:d6:5a:b7:6b:fe:f5:a9:93:aa:ab:7c:d9:
         a5:4c:91:52:24:af:36:c7:f6:b6:5e:1f:21:6b:6a:52:23:db:
         e6:71:24:1e:55:de:99:37:4a:c2:14:44:a6:b6:11:d8:c6:a6:
         61:48:86:28:7b:c5:70:81:0d:23:1d:26:8a:41:8e:de:12:a6:
         ca:e6:bb:93:e4:60:7e:9f:91:59:47:61:d3:e1:db:f9:c1:88:
         a1:5c:9e:f1:17:90:97:02:5a:ee:6a:f6:f0:f6:cc:d4:2f:25:
         70:6c:4d:59:9d:4f:65:ef:76:84:88:82:66:99:90:9d:24:10:
         bb:77:4a:24:47:fd:fa:08:4e:c7:81:4f:5d:1f:be:7f:52:90:
         fc:3a:a0:57:28:95:f5:22:00:29:37:05:2b:2c:7d:ad:71:aa:
         25:e7:ed:f1:a6:3a:94:83:a1:75:6b:ca:ca:44:08:e4:be:a8:
         da:be:b7:b4:63:1a:b6:f1:5d:25:11:95:4b:ef:2f:c6:cd:cf:
         1c:8b:50:33:64:b6:0b:8c:f1:92:34:56:71:e6:4b:17:1a:75:
         20:fc:ad:04:99:43:30:97:86:36:c9:21:c0:cf:dd:9b:6c:76:
         ad:5d:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:25:29 2025 by rpki-client