Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa58ad75-fd36-351d-9778-63997ec93376.roa
File:                     aa58ad75-fd36-351d-9778-63997ec93376.roa (raw, json)
Hash identifier:          3wQ3wjLqUGstJQhYu1UbjCobJQd+g/wUjw/NYK10MEE=
Subject key identifier:   B0:70:99:0A:62:A1:0E:E3:ED:71:CC:A8:ED:C7:D4:14:63:C8:E5:02
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EA7975913AF48A4A2647FC180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa58ad75-fd36-351d-9778-63997ec93376.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10796
IP address blocks:        24.163.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:59:13:af:48:a4:a2:64:7f:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4b68a48-9fca-419a-93fc-d137d8ff8dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:d1:c9:7b:c9:9b:81:19:49:c7:2c:66:a5:
                    1b:58:70:25:41:2a:bf:16:68:04:e9:2b:87:2e:8e:
                    d1:04:90:af:58:f1:13:22:17:f2:0e:f1:fe:dc:a8:
                    57:1f:d5:92:13:b6:12:98:b8:2d:a8:59:89:4a:fd:
                    d5:66:62:06:37:0c:f4:8d:81:39:18:48:cb:9b:17:
                    03:84:60:d9:aa:c7:44:b8:43:96:ea:b5:c0:1c:fd:
                    e5:32:85:ac:14:42:ae:b8:d4:82:9c:79:0e:88:e6:
                    06:a7:7b:5c:7d:90:df:bb:30:f9:4a:1d:93:fc:3f:
                    3d:39:dd:79:7e:02:d2:90:fa:82:08:f4:82:99:55:
                    2d:bc:4f:3e:f6:7a:d5:4b:87:48:4c:c5:54:b0:14:
                    1e:a2:6e:51:5e:69:36:4a:d1:e7:fb:65:6d:6d:51:
                    b6:77:b1:c3:76:d2:95:db:cd:bb:77:d8:af:b3:98:
                    90:b7:1f:c1:cf:e1:a4:15:a2:65:03:ba:25:a0:c2:
                    f1:28:39:b2:e4:b9:55:4b:9e:34:a9:8a:aa:18:f3:
                    f3:c6:7b:62:1d:62:98:30:3d:96:e2:25:52:5b:d6:
                    80:04:41:5a:d8:46:ef:61:f0:50:ea:ba:ce:be:53:
                    f5:09:d3:12:7d:04:ee:61:4e:6e:c8:a2:4b:41:b9:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:70:99:0A:62:A1:0E:E3:ED:71:CC:A8:ED:C7:D4:14:63:C8:E5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aa58ad75-fd36-351d-9778-63997ec93376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.163.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:39:1d:ab:90:4c:00:de:ab:20:a3:9a:56:5f:17:7f:81:
         45:95:22:ae:9a:c4:e0:c1:35:99:53:3e:a8:1c:4f:8e:b4:2e:
         0e:14:d4:62:4d:38:c0:c9:48:81:8a:ed:f0:4a:e1:66:3b:9b:
         f5:dc:a0:45:2b:86:ca:cf:69:2a:5a:87:fd:e7:cd:7f:87:c6:
         c7:5f:5e:02:00:2c:3b:bf:68:29:49:07:f7:29:a9:30:ab:f0:
         fe:36:3b:a0:60:c7:0a:32:d5:79:f1:15:c8:37:a6:f0:58:d1:
         6c:45:bd:6a:1b:cd:ab:c9:51:6d:d8:b6:e3:9b:54:8a:c9:dd:
         86:fa:9a:11:be:cf:89:3d:24:7f:d8:11:7f:c7:9a:2f:fc:a8:
         28:bd:ab:ef:d5:46:1e:85:76:76:3a:80:41:17:b8:c0:07:eb:
         ce:a1:3a:bb:1e:fd:cf:28:c8:72:09:67:e0:9f:6b:6a:f7:ae:
         20:c9:5e:b7:ad:8a:b2:71:79:18:36:9f:ec:d2:84:8a:2a:a0:
         7a:70:37:31:3c:e0:ac:c1:ef:08:e6:75:bf:b5:d6:76:d7:27:
         c5:2e:c6:64:27:6d:e6:39:22:fe:60:68:4d:0e:9e:3c:3b:76:
         67:6f:4d:91:01:e1:1b:ee:df:9e:bf:b8:f5:5c:c9:73:c4:4a:
         57:c7:b7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:13:07 2026 by rpki-client