Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4f817419-4e1d-3ba2-b5b0-16a2fc937d9d.roa
File:                     4f817419-4e1d-3ba2-b5b0-16a2fc937d9d.roa (raw, json)
Hash identifier:          r87Wegy+6nLf26CzuOyLS6Klz7pudj5gKUVhUyOw/N0=
Subject key identifier:   3D:3C:D6:33:57:AE:FE:C9:E9:B2:1F:40:06:AB:1E:BA:56:DF:C6:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161A0567D2D556B6F820C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4f817419-4e1d-3ba2-b5b0-16a2fc937d9d.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11427
IP address blocks:        76.85.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:a0:56:7d:2d:55:6b:6f:82:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=56b86866-64af-49c6-985a-6ce2249a51d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:65:00:2c:55:f2:f4:6d:3b:43:f8:08:0b:
                    80:69:5e:ae:cb:37:d0:e5:75:6b:9b:c6:6e:b9:aa:
                    f1:25:88:89:5e:a1:dd:d7:97:b3:94:2f:af:f1:a5:
                    2d:ce:b3:4d:38:bf:11:bd:4e:2e:cf:e0:92:64:d6:
                    f2:99:89:c4:e0:a5:0d:b7:1e:0e:1d:c4:f5:a1:a3:
                    6f:52:26:6d:88:de:76:d8:2b:fa:0a:6c:7d:a5:27:
                    1b:5a:8a:d2:cd:42:54:7a:73:65:33:3c:14:fb:dc:
                    21:ae:63:47:80:1b:fe:b9:ed:c8:ca:94:50:02:c9:
                    ea:1b:13:56:4a:fc:50:c1:b4:f6:ed:0d:c8:f5:69:
                    ad:54:ce:96:cf:8c:eb:24:a0:61:6a:04:42:ce:56:
                    45:b5:11:e1:24:4a:17:02:d3:5b:55:12:5c:0d:fa:
                    02:b5:31:af:bb:89:c5:9c:28:13:cd:13:a2:fc:67:
                    d6:9e:a7:a8:19:5c:11:95:bb:5d:73:4b:97:44:2c:
                    c3:4a:b0:1c:5a:c2:00:b6:cc:63:a3:f5:f7:31:5d:
                    18:51:da:9d:eb:34:1c:21:fa:17:56:df:8b:75:db:
                    c5:f6:c0:e1:ee:2a:14:48:e7:3f:c0:51:c2:02:b6:
                    6c:5a:e0:c3:63:22:08:41:16:42:b2:68:b6:a5:d6:
                    88:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3C:D6:33:57:AE:FE:C9:E9:B2:1F:40:06:AB:1E:BA:56:DF:C6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4f817419-4e1d-3ba2-b5b0-16a2fc937d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.85.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:6f:4d:5b:b8:5e:0a:f0:4e:ec:bd:44:bf:f8:2d:ae:f4:
         bf:cb:b2:02:98:f5:10:85:10:62:ee:02:ec:d9:dd:ed:87:46:
         f0:35:98:34:d2:16:65:a3:00:7c:01:53:8d:fb:e6:8e:71:f4:
         0a:c4:56:34:76:7b:d3:3b:ff:17:52:bb:62:1f:d9:e2:78:3c:
         45:f9:bb:65:ea:48:10:50:5a:98:7e:c4:7a:8e:16:2c:6b:41:
         64:ef:c6:ad:6f:6b:57:6e:c5:19:a5:e7:d4:38:02:c5:02:26:
         46:ed:83:4c:44:93:16:39:6a:06:a7:2d:be:8f:92:80:21:fe:
         f7:bd:c0:4a:11:a7:9b:d0:18:f3:15:00:cb:c8:a5:49:d3:2b:
         98:90:98:5c:1a:62:fc:cb:64:b5:cb:f2:9f:39:1d:e1:cb:f4:
         bd:89:12:14:06:40:db:e6:bd:93:f6:62:5e:8c:b7:43:31:aa:
         df:8c:2f:64:ca:23:d2:1b:06:cd:59:33:76:94:30:55:df:10:
         56:b6:eb:79:e8:91:e5:fd:ac:04:35:0e:f3:84:67:bc:a7:aa:
         05:b7:c9:40:2c:40:43:03:16:d6:93:b2:7b:fd:0d:e8:de:0b:
         e9:e8:67:db:17:56:68:0a:c7:e4:02:f6:51:dd:eb:91:22:57:
         14:30:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:17 2025 by rpki-client