Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d36fc52e-a8a0-3655-95c5-54f9f29af753.roa
File:                     d36fc52e-a8a0-3655-95c5-54f9f29af753.roa (raw, json)
Hash identifier:          lucCJ8NB3TirbyNEVb1ZiF3klckfdgKjNZGiufh3kac=
Subject key identifier:   E5:96:67:63:3F:80:60:29:70:B9:E9:22:2D:97:94:46:60:80:E2:58
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA160EB84FB55CBA5417BEF40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d36fc52e-a8a0-3655-95c5-54f9f29af753.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     10796
IP address blocks:        174.97.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:eb:84:fb:55:cb:a5:41:7b:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e8dcf9e8-7a6d-4a41-86fe-6a043c5713f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:2c:80:94:66:a4:48:7b:01:77:3d:ab:7e:
                    33:95:a2:e9:2f:0a:36:b0:4d:45:d0:5d:60:4c:55:
                    f7:5f:22:56:3b:9b:81:2a:56:65:09:f4:12:63:85:
                    51:1b:ff:ef:40:dc:f0:36:d8:49:8d:11:bb:5e:c9:
                    95:4d:53:39:29:50:29:b9:fa:bf:10:b0:9c:0b:f0:
                    97:f9:fc:a1:ce:a8:fe:d8:4c:4f:4a:90:25:c4:0f:
                    b0:78:c9:73:08:e3:5c:e1:0d:02:60:5c:83:72:d4:
                    17:a1:b0:b1:88:46:c3:00:6f:7b:46:51:28:f7:2f:
                    20:c0:0a:10:86:11:7b:b7:35:54:5c:b8:5c:88:31:
                    a5:55:f0:fa:96:40:48:a9:b5:86:cf:7c:b7:27:d4:
                    73:c8:b7:69:45:98:42:40:b8:23:3a:b1:91:34:8e:
                    b7:1c:32:70:f6:88:2e:c5:00:eb:db:0f:fd:08:e1:
                    c6:ea:25:d8:65:25:11:ab:2e:6e:2b:f2:7c:c2:19:
                    5a:f9:73:f3:95:a1:07:e0:de:2e:3a:74:d7:35:ff:
                    ce:bc:be:c6:6b:4c:66:e7:c0:1d:17:41:fa:f2:39:
                    f7:01:f8:b1:b6:ae:e1:98:f0:43:04:25:ed:cf:c6:
                    0a:8b:22:0e:86:80:6e:c9:db:3e:8d:b3:5c:d9:93:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:96:67:63:3F:80:60:29:70:B9:E9:22:2D:97:94:46:60:80:E2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d36fc52e-a8a0-3655-95c5-54f9f29af753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:11:29:f4:34:1f:7c:c3:0c:6c:fd:67:f6:70:c9:c3:d1:f6:
         53:31:89:96:2e:9e:e2:f0:d2:b3:bf:0b:05:48:f8:70:1f:e4:
         e6:2e:52:83:27:e6:d4:d1:b1:e8:d3:0f:1e:e0:17:75:20:05:
         6f:6e:52:89:ca:3e:d6:ac:ad:08:15:08:2e:8e:56:93:d9:a9:
         57:5f:11:17:6a:52:df:de:ff:bd:49:f8:0f:9f:ce:f2:bc:49:
         f1:f9:0a:11:85:58:03:c1:87:e9:3f:45:85:d0:fa:55:b6:e1:
         21:bc:8c:1f:c6:4f:6f:11:17:e2:d3:f2:d5:d8:10:42:2e:13:
         82:06:ab:84:3d:d1:89:8e:b9:68:48:4b:0c:e8:dd:d4:df:88:
         47:dc:12:55:c5:9e:de:91:e7:ce:17:08:75:b4:fa:e8:d9:f8:
         de:ec:80:46:97:d9:28:3f:f4:eb:e4:05:0c:7a:5d:b0:1b:2c:
         5e:06:7f:0f:84:63:ab:d7:0f:68:3e:ae:f2:46:4a:b1:9b:98:
         6a:88:71:39:99:b6:aa:6e:ae:eb:c1:1a:74:6b:2c:25:37:e0:
         74:e6:d8:9d:65:f9:34:4c:e6:6e:67:9f:98:11:41:7f:64:47:
         57:9b:7c:e3:b2:53:5d:f0:48:75:90:d9:33:93:1f:d8:50:cf:
         35:44:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:48 2025 by rpki-client