Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/925bdc36-3dfc-3e2d-954d-a9c64868a925.roa
File:                     925bdc36-3dfc-3e2d-954d-a9c64868a925.roa (raw, json)
Hash identifier:          cYXJy4UQBqyjVHdv2tsIly3LSIXrMwHUsvH+Srbghd4=
Subject key identifier:   35:CC:0F:5A:4F:58:6B:65:62:43:E3:A6:A6:AB:CC:28:C8:CB:68:36
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA161B22EC5810B8BDBA84480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/925bdc36-3dfc-3e2d-954d-a9c64868a925.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     33363
IP address blocks:        24.227.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:b2:2e:c5:81:0b:8b:db:a8:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=610013bc-734c-4863-810a-46539bdad9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4f:6f:f4:2b:07:64:e0:da:f9:8c:bc:ab:5a:
                    d5:97:45:cb:0d:7c:0a:b1:8c:b2:4c:6b:3b:ae:9c:
                    ed:eb:41:2e:dc:a6:4c:4e:33:73:a9:ff:84:7b:6c:
                    e2:58:23:48:f0:e4:a8:c1:31:36:86:59:da:71:e5:
                    a7:55:a5:26:68:b3:46:94:ca:87:d2:c3:04:9a:9d:
                    c0:14:69:81:c6:5a:ea:b8:a3:39:7a:82:fd:c5:55:
                    8f:8b:b3:c5:8a:8d:f5:2c:df:16:24:d7:c9:cb:19:
                    c7:71:a1:ed:8e:3c:72:5d:f7:bf:75:ca:7f:aa:f2:
                    bb:aa:14:9b:f1:45:1e:75:23:5b:c0:27:8f:00:a1:
                    31:fc:0d:a2:18:15:1e:9f:a8:10:3c:cf:c2:89:22:
                    9d:d3:38:f4:50:5c:2c:6f:53:79:53:b4:be:24:40:
                    ba:da:39:2f:d6:ea:4c:6a:51:f4:b8:5a:8a:13:dc:
                    18:67:95:68:dc:3c:97:2f:bb:f7:2d:3b:b2:bf:0d:
                    c6:aa:ea:8e:84:07:2f:8e:5c:88:28:66:2c:e1:0d:
                    f7:f4:00:c8:3e:f6:7c:ac:b1:bf:c8:25:90:91:89:
                    f6:10:03:47:eb:f8:20:cc:63:a3:dd:8b:33:b9:53:
                    ce:1a:dc:9b:f3:29:f5:8c:15:65:0b:e3:c0:d9:cb:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CC:0F:5A:4F:58:6B:65:62:43:E3:A6:A6:AB:CC:28:C8:CB:68:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/925bdc36-3dfc-3e2d-954d-a9c64868a925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.227.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:7f:f0:a9:a2:c2:ff:a4:cb:a0:55:ce:b6:74:18:e0:8d:
         00:c5:ea:7f:18:3e:98:90:2b:41:8f:6d:ac:36:1b:32:7c:3c:
         00:79:12:16:e3:a8:41:a1:dd:84:53:bf:72:3f:b8:ef:4d:ac:
         90:8d:20:33:b4:41:03:a8:50:e4:2a:c0:04:ff:d1:6a:0f:28:
         4a:87:2a:ae:be:14:f8:65:81:06:bc:96:03:d3:d4:ae:6e:c0:
         ca:4c:43:de:04:ad:f5:99:14:f3:63:c4:89:fb:d8:af:74:44:
         87:ea:53:ed:31:65:0d:6b:c4:7f:33:23:b3:d1:87:01:b4:68:
         e8:8c:30:b5:a4:0f:ff:fb:44:71:9a:6b:ce:e3:ca:fd:1f:a5:
         ea:b2:96:41:34:2d:ea:2c:10:11:a0:b3:ed:1a:5c:74:3f:2b:
         0a:ee:d1:99:34:8f:70:19:b9:92:82:5a:7c:8c:c0:56:ac:6a:
         a5:44:13:33:4f:93:f2:6d:4b:3f:60:b0:6e:8e:a8:eb:a6:3b:
         00:58:02:1f:d6:8b:46:83:58:56:85:3f:ee:20:00:7f:65:32:
         a4:ea:cc:3e:59:e9:91:d6:c5:2b:4b:b2:f3:e9:ee:f4:0b:4b:
         44:38:e3:d9:c5:14:fb:73:6c:eb:82:b3:08:7e:7a:12:7f:3c:
         6d:89:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:12 2025 by rpki-client