Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/baacb5af-8814-3aa0-a50b-53e15a4c7063.roa
File:                     baacb5af-8814-3aa0-a50b-53e15a4c7063.roa (raw, json)
Hash identifier:          w3ep1M2tW3XABw9QtMXwdMYCILj0i2oI0lr/o29fhhw=
Subject key identifier:   48:1B:C4:8E:73:51:93:25:E3:B7:4F:8B:C8:5B:7C:53:88:D0:6D:0E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D9F924DC44F1165A6ED00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/baacb5af-8814-3aa0-a50b-53e15a4c7063.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11427
IP address blocks:        67.48.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:9f:92:4d:c4:4f:11:65:a6:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=6ca343ff-7d4b-40d2-93d6-ffc365f73ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0f:95:7e:19:a2:6f:f3:43:d5:50:94:ec:21:
                    d4:95:80:68:4a:07:79:fb:bc:a0:19:b9:b6:5a:62:
                    56:2b:2e:34:06:0e:9d:d8:77:ea:8e:62:0f:92:25:
                    8d:b6:54:93:9b:58:c9:20:0b:3b:d1:c2:32:c2:e8:
                    be:e6:53:c9:ad:9f:ec:64:89:9e:ee:3e:1b:c5:34:
                    9b:8e:3e:7a:d5:48:f6:09:9e:2b:62:f7:fb:4f:91:
                    93:8c:c7:25:7b:09:d9:64:f1:2e:c3:9d:53:d8:22:
                    33:db:30:ac:7a:4a:33:50:13:8c:0f:e1:a9:2e:33:
                    7d:bd:eb:8f:53:8d:c7:63:e4:ef:d4:a8:86:f1:d3:
                    95:d4:ee:1c:f1:0f:e2:27:d2:7c:d0:c0:34:ae:6c:
                    b6:46:9b:e4:6a:fd:30:e3:11:ef:21:ce:70:5e:54:
                    7a:fe:9e:30:4f:98:62:43:43:e6:a4:aa:db:2b:11:
                    45:6b:3a:7e:13:d5:11:21:88:39:4b:14:4d:b4:2f:
                    a8:a6:ed:11:61:3d:a1:b7:ad:0d:ed:59:cd:14:5b:
                    05:7f:70:ba:be:eb:d8:13:66:56:7e:78:dc:34:91:
                    27:20:e6:95:a8:61:a2:8c:cf:f4:c4:69:44:30:00:
                    78:12:6f:52:26:85:84:39:be:99:43:19:d7:b4:20:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1B:C4:8E:73:51:93:25:E3:B7:4F:8B:C8:5B:7C:53:88:D0:6D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/baacb5af-8814-3aa0-a50b-53e15a4c7063.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.48.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:31:bb:15:67:4d:05:e1:73:6c:86:ac:86:43:3d:b8:e3:db:
         59:85:fb:48:05:b1:58:4e:23:d8:98:73:0f:27:0e:76:57:d8:
         47:1f:4a:31:c5:f4:bd:8d:5d:bf:0a:6b:b2:2f:c2:5a:d9:f3:
         53:a5:4d:76:3d:18:ab:b2:2b:55:a4:95:fb:28:80:44:10:76:
         2f:02:c4:5f:2d:cb:2b:61:fe:0a:13:e1:73:e2:dc:96:62:c1:
         e0:21:8a:d1:cf:03:33:60:98:e9:5f:3c:09:20:8a:87:ed:75:
         e2:ae:16:be:c6:cc:34:b0:f2:e3:92:b3:ce:6b:67:6e:47:73:
         61:58:c1:a9:78:43:3e:94:9b:2f:5d:ff:1a:ad:45:54:d7:5e:
         ee:b9:9c:45:fc:19:f8:db:6e:55:ad:e9:9f:13:5c:8d:8a:8e:
         30:4e:7d:f4:27:76:67:3d:c9:db:1d:4a:2c:f9:22:55:cc:83:
         72:43:29:c9:63:2c:3c:ab:68:dd:cb:ae:73:56:9c:3b:97:ab:
         4a:3f:59:18:61:e6:1f:49:08:ad:74:48:7c:8a:72:8b:ee:18:
         da:83:b3:97:aa:b8:ff:3b:7f:a8:d9:d4:2e:f8:92:17:78:88:
         eb:f0:13:6a:40:89:25:f6:6c:6b:9e:81:24:d5:cc:f4:8e:36:
         49:99:3b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:26:32 2026 by rpki-client