Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa
File:                     b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa (raw, json)
Hash identifier:          8S1ZRTMPcN06yrvFB1PcCUe/EDmCBKNnzvYorMCFKbI=
Subject key identifier:   8C:E3:DE:B7:D3:B5:B8:D2:B7:45:44:AE:AF:AB:AF:F1:F9:58:16:1F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160F2BF2DF50F359CC819C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        65.189.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:f2:bf:2d:f5:0f:35:9c:c8:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=50562981-9385-45de-8423-bd9122348c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:1c:72:fe:93:f6:b5:37:c2:37:27:04:c3:
                    7f:72:34:95:77:2d:90:5f:d3:bd:c9:19:68:b0:73:
                    53:a8:17:e6:a8:0a:39:b4:2a:0e:70:e0:cd:15:0a:
                    3d:ff:25:0c:99:a4:b7:9e:25:c2:ed:54:ea:d4:33:
                    d4:8c:33:d2:1d:1f:bc:82:0b:bb:5e:7e:2f:d8:03:
                    ef:96:21:d2:ec:5a:af:90:58:5b:70:8f:93:81:31:
                    65:c8:60:44:5c:c4:01:29:a1:4d:bd:56:e5:7d:fa:
                    b9:14:4b:e5:b7:16:f4:01:64:cb:ec:5d:54:dc:26:
                    1d:81:f5:cb:cd:44:f3:48:96:9d:92:33:a4:1c:ed:
                    a5:c2:05:d3:4e:fb:e4:e2:b9:e7:d1:7f:06:2e:e1:
                    3d:c1:f5:a2:6d:6e:3e:d7:0f:d8:08:cc:42:4b:bc:
                    c2:2b:2b:d6:94:81:93:cc:39:8e:53:01:8b:98:eb:
                    0f:13:6f:ed:92:60:20:cb:8a:50:89:df:e5:de:14:
                    e7:54:9d:fd:bc:96:5b:3a:24:ee:f2:33:e6:93:38:
                    fb:78:dc:70:15:f7:d8:4e:0c:5a:94:85:63:48:a8:
                    9a:4a:bf:7a:1c:30:96:ac:78:8e:54:7a:a7:73:3e:
                    9f:fa:a3:2f:d4:81:ab:0c:8f:98:f2:28:de:0a:45:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E3:DE:B7:D3:B5:B8:D2:B7:45:44:AE:AF:AB:AF:F1:F9:58:16:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b36ffc7d-de01-3a7a-a91d-773c0ba63f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:11:bc:73:98:94:a4:9a:66:bc:4e:bb:0b:22:e6:d0:60:71:
         c0:f2:4e:74:a3:50:0b:f3:68:ce:df:cc:10:01:87:7a:d2:4a:
         6f:c6:b2:e6:cb:ab:3f:a1:6b:c3:e8:b1:ec:98:a7:a9:06:af:
         89:2a:9f:8c:41:40:5f:d7:01:ab:07:55:b2:0c:72:80:b5:a9:
         c7:03:9a:e3:84:6b:96:3b:57:c1:73:ba:bc:1b:2f:6b:f7:63:
         b3:45:d4:18:77:4a:9c:c1:9a:71:82:ab:e5:de:ce:e6:20:3b:
         e9:ca:24:9f:e9:ff:34:2a:a0:04:d4:bd:da:db:83:5f:7a:e8:
         d0:47:43:53:ee:90:8c:16:d8:8f:16:57:43:c6:60:96:32:50:
         25:6d:51:33:81:88:de:4b:e5:83:9f:e8:6f:24:21:09:aa:53:
         da:19:bc:93:4c:1a:a7:b3:ae:06:72:0e:5f:34:c9:6d:75:cc:
         fd:91:ab:d1:ea:24:c6:be:26:6b:47:61:a9:d5:0f:3f:50:8d:
         0e:11:56:cf:59:16:9f:a9:58:c4:64:4e:88:3d:28:07:c0:26:
         9e:90:c8:19:7a:f1:e2:f2:8c:8d:7b:b4:fb:f9:9e:48:9b:e3:
         d9:44:c9:29:ec:4c:5a:8c:ff:b7:c1:74:b6:f1:e1:81:70:ad:
         3d:39:7e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:24:00 2025 by rpki-client