Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36adac9f-30bd-34d2-9563-31771310a0ef.roa
File:                     36adac9f-30bd-34d2-9563-31771310a0ef.roa (raw, json)
Hash identifier:          q5BliRbMIh8bQU6nts0I+cXACDyD8bfDP7qOyqGXAk8=
Subject key identifier:   78:89:3E:EC:0C:90:8B:71:ED:01:76:F8:D2:3D:97:88:6A:C4:DA:80
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584CB81C85B7067D3E1BC094A980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36adac9f-30bd-34d2-9563-31771310a0ef.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     11351
IP address blocks:        67.255.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:85:b7:06:7d:3e:1b:c0:94:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=1e2368a4-5a50-445b-a86c-bf0b515782c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:05:72:51:4d:93:82:25:e1:92:6f:56:3f:
                    54:72:94:55:d7:fb:dd:1b:dc:ad:75:0d:ea:d1:5f:
                    a5:e0:bd:cf:58:f4:85:b8:64:ad:d5:d7:b9:ad:39:
                    63:7f:af:34:24:b4:c1:bb:9f:ba:5c:2d:96:05:74:
                    c0:e2:5f:77:35:d6:f1:a5:25:65:56:72:7a:aa:67:
                    c5:4b:83:7e:9d:85:16:fc:9a:d9:17:c2:57:b3:8e:
                    ac:65:3b:4e:3d:d9:bc:5a:89:9a:aa:50:91:b9:d1:
                    eb:9c:d7:ad:4f:50:6c:3d:33:b8:67:24:4f:db:ea:
                    60:7e:a6:bc:15:2f:47:5d:ab:10:54:19:93:5c:c5:
                    bb:96:5d:22:3d:db:e3:66:37:34:56:0d:d5:c3:a8:
                    a1:5b:2d:6a:a7:ee:25:9a:5f:00:57:25:c4:2b:65:
                    6c:41:8c:17:00:11:d7:d2:47:52:ea:69:ea:38:f2:
                    62:77:bc:17:c7:99:47:df:eb:f2:f6:51:8c:6b:18:
                    e4:7b:fe:84:19:d2:27:d2:53:ea:f5:76:a9:f0:62:
                    09:bf:65:57:0a:de:9d:be:55:cc:c1:7c:32:a9:a8:
                    a1:9b:c1:c4:90:f5:b9:59:81:b6:27:3e:99:c2:21:
                    95:45:4c:35:cf:81:1c:2d:b8:08:58:1c:81:d8:3f:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:89:3E:EC:0C:90:8B:71:ED:01:76:F8:D2:3D:97:88:6A:C4:DA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/36adac9f-30bd-34d2-9563-31771310a0ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.255.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:9a:93:b1:35:c6:3d:9b:03:60:e2:96:0c:dd:29:31:78:
         bd:9d:c8:74:62:ea:93:41:33:c0:2e:2d:4a:2e:12:8d:59:bc:
         28:c6:db:18:7e:7c:24:80:f9:45:61:f9:86:58:6b:d8:be:5a:
         ff:bd:e3:04:66:ff:b8:86:d0:65:fa:09:40:2c:29:51:b8:a8:
         51:b5:fc:91:46:fa:ea:dd:8c:91:74:5c:58:b4:e9:20:57:01:
         2d:ab:da:dc:ad:2e:ad:2d:03:65:5f:b3:b2:c5:a5:b0:ee:de:
         17:e8:88:53:f0:68:63:cb:38:3f:69:21:b0:de:82:56:7f:68:
         d1:35:6b:38:0b:fb:80:ef:f8:b3:49:26:27:c4:8e:20:73:27:
         08:4b:1a:fd:8d:f3:d6:89:9c:68:7e:95:d2:40:a2:35:2d:1b:
         84:5c:15:46:12:2d:a6:b2:d4:b6:eb:63:56:52:82:d3:2f:a3:
         da:a5:73:85:ae:06:28:0d:16:79:e3:dd:e8:d8:8b:cb:e9:27:
         61:e6:a1:c4:27:cd:bb:46:a6:2e:85:4c:ff:5c:1b:1f:65:67:
         b8:87:cd:bd:de:a3:6a:58:72:eb:02:06:e4:9c:3e:25:5f:0c:
         66:62:8b:fa:ce:df:15:16:16:fd:1e:85:9a:06:0a:5a:99:0d:
         64:2e:e5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:24 2026 by rpki-client