Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ab9c57-8ec8-3ab3-99eb-483f6bf1b84b.roa
File:                     c5ab9c57-8ec8-3ab3-99eb-483f6bf1b84b.roa (raw, json)
Hash identifier:          rUm3C3mobVI/6w9XrCzJ2Kq/43k/6d2NnCDXYd7fAU0=
Subject key identifier:   C6:50:69:7F:56:1D:0A:47:BA:AC:F6:A3:EC:A7:F7:E6:80:B6:90:68
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D9391AE570AC9CDA4E000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ab9c57-8ec8-3ab3-99eb-483f6bf1b84b.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        71.66.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:93:91:ae:57:0a:c9:cd:a4:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=12c3b487-e117-4c9b-adc5-695e40987f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:7c:8c:3e:e1:86:11:00:f8:5e:22:2f:44:
                    8b:ad:3a:a1:9c:f9:98:a1:e3:a7:d8:88:2d:b6:a7:
                    79:50:0b:0c:94:b2:35:25:ba:61:ed:16:a1:a1:c9:
                    47:60:39:ef:a9:0e:4c:03:0d:e8:e5:6d:ba:47:30:
                    11:f1:a5:34:c0:ad:02:2f:24:6a:97:48:67:57:dc:
                    a2:42:a0:61:b9:01:38:c3:ba:63:1c:cb:7d:b2:ed:
                    8f:75:8b:ff:c6:4c:54:35:ec:d1:da:7d:22:b3:da:
                    cc:a9:d7:36:f1:b9:34:e5:98:33:c5:01:32:09:0e:
                    6b:b8:b2:73:f2:3b:33:75:08:c5:ae:36:64:28:59:
                    df:3e:65:d4:a3:a0:b8:4a:03:46:2f:17:3e:67:c2:
                    d5:a7:a6:87:c1:e7:36:8d:4c:4d:fc:61:b5:10:36:
                    7b:2c:27:4f:23:a2:86:38:89:a7:2f:f7:bf:30:10:
                    91:68:84:d5:98:11:de:78:5b:5d:a0:59:45:70:ef:
                    32:05:07:8b:c8:13:3f:ff:f6:f0:2e:06:e7:27:d7:
                    16:cc:ef:2e:6c:3e:42:c9:f6:4d:33:b6:22:56:a0:
                    c5:66:43:62:0b:03:93:74:bf:ba:78:6e:72:ba:18:
                    06:0a:34:c2:ad:e5:24:e6:83:4c:87:e4:ed:f7:af:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:50:69:7F:56:1D:0A:47:BA:AC:F6:A3:EC:A7:F7:E6:80:B6:90:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c5ab9c57-8ec8-3ab3-99eb-483f6bf1b84b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.66.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:4a:34:8f:47:fa:b0:51:b1:2b:a8:a4:cd:f8:61:07:92:aa:
         9b:89:db:a3:46:db:5f:b5:b0:c7:bc:9c:0a:41:9a:35:82:15:
         25:4e:97:b4:f8:c5:3d:81:8c:23:fe:88:ea:72:48:90:8f:b4:
         3f:86:f0:8c:70:f1:fe:a6:aa:db:36:ea:95:b7:3a:93:1d:9e:
         c8:29:8c:7d:2b:39:66:f9:4b:81:de:b9:60:a9:ce:5a:c1:1a:
         14:4e:60:e6:be:94:99:6f:8a:c4:dd:96:19:80:2f:4e:29:ea:
         c1:58:b3:cb:0b:dc:80:db:07:b9:fa:ce:e4:72:23:bd:0d:65:
         63:5d:dc:9e:9b:e1:74:50:91:08:ca:7d:06:28:7e:6d:ec:f1:
         fc:bf:3e:df:cd:26:72:59:b3:f5:25:22:2d:36:d8:6b:5c:1e:
         ee:c1:39:76:93:12:e6:19:52:e8:b1:7f:97:cf:a1:d0:00:fa:
         5f:ba:53:8b:f0:ee:6b:81:da:d5:ae:c9:b1:1f:3a:af:d9:c1:
         97:9e:fc:f5:6a:de:35:af:31:a5:0f:90:d9:db:e2:83:e3:42:
         91:4e:9e:b3:1e:da:ad:15:65:c2:58:50:da:2d:8f:8e:40:8e:
         94:df:61:8d:5d:9e:04:22:a8:66:56:23:6b:29:29:d2:85:bd:
         13:70:6e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:33:39 2026 by rpki-client