Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b47cf52-3004-30c9-878e-0b6bfe1d03f6.roa
File:                     6b47cf52-3004-30c9-878e-0b6bfe1d03f6.roa (raw, json)
Hash identifier:          0IB2Gj6Meqh/heJSIzGaePhGfUGeNmBcs4UEUvqU+E8=
Subject key identifier:   8D:A0:67:C6:F7:36:DE:DE:FD:1E:79:97:96:33:4D:F7:54:18:6D:36
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161161AA52E7329CA99E520
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b47cf52-3004-30c9-878e-0b6bfe1d03f6.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20001
IP address blocks:        76.86.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:16:1a:a5:2e:73:29:ca:99:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=092aa55e-f742-45a9-babc-15b01b924e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:55:13:81:91:a6:a9:3e:b7:26:1a:19:ba:cf:
                    f8:5c:58:c2:e6:63:5e:81:90:ff:60:ad:5c:aa:dd:
                    7d:96:cf:54:01:8e:64:9a:89:ed:fe:76:a5:80:30:
                    09:bc:a3:3a:de:4e:53:52:37:7a:18:a7:ea:3d:c4:
                    81:24:2b:c2:fc:9e:45:73:fa:11:b4:9e:70:33:09:
                    9f:4f:0d:b0:8b:a5:5c:3a:d0:9e:af:d7:c7:0c:5c:
                    45:3f:dc:a6:c4:bd:5f:8e:3e:54:5a:7b:7b:c3:4b:
                    88:27:38:5e:b1:13:39:f8:27:14:b7:56:a0:6d:f6:
                    e4:50:27:8b:07:05:d3:5b:b0:d8:be:9c:2c:75:fc:
                    4b:32:cd:f2:cb:43:06:40:c9:b7:e2:a9:79:9c:3a:
                    80:00:d7:f7:d2:4a:9b:8c:01:f4:9f:26:c3:62:12:
                    e4:7a:8a:90:6c:c1:a8:6b:73:c8:34:2d:a3:23:bd:
                    e5:ab:34:34:23:2b:e7:c7:7f:4f:94:9e:8d:b1:3c:
                    0c:d3:dc:5f:02:0d:39:ac:a5:3b:45:f4:24:7a:b2:
                    ee:7f:57:25:25:b8:3a:f6:d3:f0:d4:80:63:c9:1a:
                    74:d2:19:23:59:ff:7f:85:2d:fa:d2:91:d6:38:0f:
                    4c:67:90:ae:7e:0d:c1:be:aa:a8:2c:aa:5a:1a:f9:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:67:C6:F7:36:DE:DE:FD:1E:79:97:96:33:4D:F7:54:18:6D:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/6b47cf52-3004-30c9-878e-0b6bfe1d03f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.86.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:33:d7:68:9e:05:f1:38:b6:a1:4c:50:4a:32:39:f5:ea:fd:
         1d:26:8b:fb:48:0e:46:50:12:ab:df:d6:84:0f:43:40:93:da:
         c7:27:55:0c:7f:45:ce:7d:c5:88:d4:12:c9:da:7e:49:55:5b:
         43:ec:cd:b6:de:74:ca:3c:d9:3f:bc:16:53:43:d0:a5:c1:ea:
         e6:b4:1b:84:c3:9d:ef:6a:58:d0:26:82:52:b0:93:ac:5f:41:
         1e:b7:e8:78:ac:e7:be:4f:e3:70:06:b1:0d:ef:10:87:ba:3c:
         f0:80:02:42:75:3a:79:36:ab:7f:28:38:12:2b:04:b8:c5:a1:
         9d:7a:3e:6c:05:74:23:5c:fd:22:b5:9b:ff:e4:65:98:ae:62:
         35:c8:83:81:66:93:3e:c2:8f:a1:64:b6:12:cb:8d:32:b3:ef:
         51:c0:b2:de:7f:bd:70:ce:28:04:fd:d3:00:6e:64:95:d0:6d:
         e1:9d:5a:38:58:96:f2:c2:26:27:0b:ff:9a:fc:a0:8c:e7:8f:
         6a:1b:8f:60:a1:de:1c:b3:44:d2:62:38:c6:76:6e:c1:0d:14:
         91:94:d6:b9:b2:56:2f:e3:c4:c4:37:9b:ea:4e:11:6f:29:30:
         b3:9c:dc:cd:59:60:84:df:a8:e8:14:af:98:6c:7b:fc:64:18:
         8d:01:ff:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:35 2025 by rpki-client