Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61ab685c-866c-37f8-a62e-020cc46cb424.roa
File:                     61ab685c-866c-37f8-a62e-020cc46cb424.roa (raw, json)
Hash identifier:          aI+2kqb3C8qOSv+fJLzZCCvwhRl2bsBod9D5hM3Esk4=
Subject key identifier:   0E:AD:01:F4:84:B3:F7:E6:F7:D3:DB:8D:18:73:2B:74:E6:B4:B2:06
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655E0AB4D242C4E8FA649680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61ab685c-866c-37f8-a62e-020cc46cb424.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        67.52.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:0a:b4:d2:42:c4:e8:fa:64:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=0f614ff7-3e79-43ec-9120-18cf39f13cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:37:5c:74:8f:6c:94:66:cc:c2:7d:29:90:
                    d4:d8:9e:7b:60:31:ff:2a:37:90:67:4c:45:28:fd:
                    bf:5b:3c:1f:7b:2e:df:3a:10:12:ea:a1:db:ef:bf:
                    34:3b:2d:95:02:18:ba:fd:51:f9:a0:87:88:5c:e5:
                    c4:bb:0d:68:56:82:53:b0:f1:e7:45:ae:62:21:5f:
                    be:4b:08:8b:44:ea:bb:3b:a7:95:84:51:42:ef:e6:
                    6d:ba:61:77:b5:aa:85:bf:6c:73:11:43:b4:7c:8b:
                    aa:96:0f:1c:85:64:75:d4:d0:f5:30:a3:8b:91:81:
                    4f:a0:85:4d:ab:ab:a5:2e:47:53:ca:14:15:d2:ec:
                    bc:13:71:c5:98:d9:c4:96:ff:85:48:92:d1:27:8e:
                    7d:cb:4d:b3:c0:bd:d6:80:53:d0:66:1b:e1:03:0a:
                    c1:81:20:f9:ec:d4:e5:e8:81:22:2f:66:d3:60:13:
                    89:88:42:30:e2:0c:b9:1a:cb:3e:ff:26:6e:92:72:
                    d7:3c:66:2b:d9:c2:59:17:6c:00:8f:f3:48:03:40:
                    82:b9:5a:e1:c8:a5:b9:89:dc:45:64:99:b3:28:75:
                    cb:52:4a:06:0d:bc:66:c7:b8:4f:94:47:37:41:39:
                    b4:aa:c3:34:da:89:78:48:c6:02:3d:a9:49:91:66:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AD:01:F4:84:B3:F7:E6:F7:D3:DB:8D:18:73:2B:74:E6:B4:B2:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/61ab685c-866c-37f8-a62e-020cc46cb424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.52.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:af:74:a1:e5:a3:dd:83:f7:63:a1:15:ab:2a:a0:49:56:e2:
         d4:08:70:94:76:2b:d0:d4:cb:98:51:d6:da:16:af:26:6c:8b:
         e6:63:d3:f8:5c:a5:4e:63:f0:72:a8:34:91:f3:ad:e5:6c:e1:
         5f:76:c4:37:14:1d:50:b0:6c:73:ef:4f:4c:64:b4:e4:38:95:
         1b:38:92:1f:71:6d:c3:79:c2:14:ac:ce:d2:14:a9:18:48:78:
         79:9f:19:ac:36:ea:ea:60:f7:fb:2a:0a:b3:8d:81:bb:d8:28:
         0b:dc:6f:78:08:4d:14:e8:34:01:1a:27:be:7c:44:94:b2:37:
         80:6c:5c:22:0d:cd:ff:d7:42:26:c1:ea:f8:74:fb:5a:4f:c0:
         7b:ab:6a:59:0f:c0:1f:a4:42:65:17:fd:25:e7:3c:44:68:2a:
         f6:14:ca:a5:36:e9:10:d2:e3:cc:fd:44:7e:3e:95:40:92:e3:
         25:88:92:80:9d:e5:52:31:f5:de:d2:c7:99:e9:95:83:ef:75:
         15:ea:d5:3b:fb:75:da:6d:cf:5b:05:07:da:0d:f9:ea:84:50:
         76:d5:6f:30:14:e1:b2:bc:4a:aa:9f:fd:f3:cd:65:07:3a:f3:
         cb:56:51:59:eb:87:55:71:34:4f:b1:8c:66:d7:cd:70:bc:60:
         f1:06:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:33:30 2026 by rpki-client