Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af6a02b1-a423-370c-89d7-ea98f4af3732.roa
File:                     af6a02b1-a423-370c-89d7-ea98f4af3732.roa (raw, json)
Hash identifier:          gmZfV2Bbfp71wO/HzkcAXfosMcwrPSnlfvelX02IALM=
Subject key identifier:   0F:1E:21:2A:E5:22:B9:77:8D:C7:B7:8A:4E:5E:27:E6:35:0B:48:27
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E210F1CEFE20FCD72708B5380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af6a02b1-a423-370c-89d7-ea98f4af3732.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     11427
IP address blocks:        76.58.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:1c:ef:e2:0f:cd:72:70:8b:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=3faf5724-908c-4a11-8c63-38b4d5c10d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:fa:6b:0d:f6:d0:06:92:8d:f8:99:68:0b:
                    78:c8:4b:65:ae:a3:c0:77:46:61:50:28:d9:52:e9:
                    17:a8:1e:5b:44:ab:12:5d:5a:c1:1d:63:93:3c:5c:
                    83:ad:7e:0d:8f:c9:38:50:96:a6:6d:dc:1d:21:08:
                    43:7d:93:40:39:e3:2c:51:0b:d3:1f:73:41:8b:ce:
                    b3:7f:17:7b:b9:71:65:ba:2b:b3:37:46:22:e2:05:
                    ba:f0:33:6c:f0:81:a8:19:ee:bb:c9:87:c5:9b:ee:
                    56:7e:00:7f:8c:9a:39:72:64:19:91:9c:b7:e4:c8:
                    de:2e:32:7c:40:2e:67:a7:60:5b:78:5d:7c:66:71:
                    14:90:90:ba:1e:ed:00:b2:31:4c:28:1e:15:3a:31:
                    e9:b4:3d:82:53:84:fd:06:b0:ca:9e:f4:65:3b:55:
                    3a:0b:ca:0f:a9:cb:1b:3d:a8:aa:54:0b:12:a2:9c:
                    ef:bb:64:06:01:38:b9:9c:e6:1d:9a:31:4e:17:0e:
                    48:8f:f1:8f:c1:70:3a:90:f1:5a:7a:84:90:ce:3d:
                    fd:3b:25:f5:f9:1b:06:48:5e:5b:a5:66:90:45:ca:
                    4c:26:ff:1c:b2:e5:82:4f:79:0e:f0:35:d9:04:23:
                    06:14:0a:60:9f:b5:b4:db:0f:a6:e5:1b:d0:c8:f4:
                    0e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1E:21:2A:E5:22:B9:77:8D:C7:B7:8A:4E:5E:27:E6:35:0B:48:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/af6a02b1-a423-370c-89d7-ea98f4af3732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.58.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:93:a1:30:0d:5b:3c:2d:61:05:fc:7b:fb:39:2a:52:79:5c:
         7d:36:c0:db:57:30:39:19:7a:18:11:63:b2:78:40:32:68:ee:
         aa:6b:09:cc:db:e2:6c:5a:52:5d:38:b8:0a:e0:46:27:bf:27:
         69:31:e0:e7:cd:8f:e6:95:88:f3:84:43:07:64:57:71:95:39:
         23:12:cd:48:0f:34:c4:b7:1e:20:12:ca:c3:47:be:fd:30:46:
         db:b4:e4:10:3f:51:ed:e6:0e:85:cd:a0:0d:da:88:4c:69:eb:
         48:fc:89:09:d6:3d:e3:aa:a8:9a:28:45:d0:f1:a2:30:dc:9f:
         ca:58:66:bc:61:dd:8f:80:64:9f:0b:a1:97:eb:0f:78:26:4f:
         68:ee:22:bf:65:5e:be:4f:9e:e9:47:b5:13:74:5b:51:3b:a6:
         25:d6:25:2f:a8:88:44:b9:64:cc:27:3f:de:fa:03:74:88:e2:
         92:ad:4e:97:4a:b0:4d:84:ad:a8:f2:2e:8a:72:8c:f3:fe:83:
         e6:40:b9:d7:32:3a:ea:2b:72:c2:f9:86:94:c9:99:2d:85:fe:
         34:6f:fe:9d:78:a0:7b:a6:21:b1:bf:f7:38:40:0d:81:dc:56:
         c6:37:f5:8b:3f:85:f6:fd:6e:10:df:6a:77:77:00:00:f4:72:
         4d:4d:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:08:54 2026 by rpki-client