Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0664a7cf-b8a2-3a72-8fb2-074bf85a6766.roa
File:                     0664a7cf-b8a2-3a72-8fb2-074bf85a6766.roa (raw, json)
Hash identifier:          /bA9jqOp3Cb8ctlb7qAWZwGYg0pt3rYiVvx88gfpZhQ=
Subject key identifier:   3B:3F:F9:F2:B6:E8:D9:04:37:E3:A8:94:45:45:6C:B7:DC:B3:27:27
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB23D7F1F8A0199822EB59
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0664a7cf-b8a2-3a72-8fb2-074bf85a6766.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11426
IP address blocks:        98.121.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:23:d7:f1:f8:a0:19:98:22:eb:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=505906c6-fc40-4a3b-a15a-e2299e16245b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:ff:60:2e:c8:7e:2b:29:7a:39:03:49:14:
                    1f:d8:95:d2:19:1d:6a:33:55:57:db:f9:af:e5:8c:
                    a7:36:9c:c9:c8:10:62:4d:1c:f9:f3:d1:93:e1:c1:
                    63:5f:67:0b:ce:b3:b3:a4:01:10:f7:85:6a:88:f6:
                    21:74:90:ce:94:44:53:e3:80:eb:3f:a7:88:ae:ae:
                    1b:56:59:b6:65:89:1e:ca:43:1c:6d:84:d0:36:4f:
                    69:b0:a5:b7:a6:93:5c:c1:76:2b:f5:d4:10:27:08:
                    92:8d:60:d3:82:41:48:25:65:00:02:14:4b:6d:45:
                    95:8e:76:2f:fc:ec:4e:86:02:bb:8c:4f:67:5c:06:
                    e3:99:fc:6c:f9:8e:e9:e6:70:48:98:9d:aa:d6:87:
                    3e:c4:ba:e2:d4:0b:92:1f:32:16:37:b4:c3:e2:8a:
                    75:87:06:3c:9e:62:61:86:2a:bb:af:07:a7:83:3d:
                    38:0e:e2:93:26:7d:10:be:f6:f6:64:8c:67:05:81:
                    a9:42:da:74:9a:7c:d0:13:04:73:18:68:14:54:23:
                    fa:91:4a:db:cb:72:8d:84:78:46:75:f7:e2:8a:9f:
                    71:7e:e9:ce:de:aa:10:72:e0:6e:1b:65:ab:ab:03:
                    c5:20:7d:9a:19:2b:19:f5:d1:a1:74:38:56:95:01:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3F:F9:F2:B6:E8:D9:04:37:E3:A8:94:45:45:6C:B7:DC:B3:27:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0664a7cf-b8a2-3a72-8fb2-074bf85a6766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:42:9f:c8:fa:a5:ad:39:a6:77:0d:57:26:e4:f0:ba:67:ca:
         c3:11:bc:72:9d:69:9b:ff:e1:71:4c:fb:d2:ca:14:52:35:65:
         2e:b4:ce:8d:4f:ef:0e:89:bd:68:66:e2:39:07:92:2e:2c:4d:
         b9:8b:57:0d:7f:88:0e:35:3a:07:04:07:c3:d5:d1:09:e1:91:
         ad:e3:62:2a:a7:1b:c1:88:0f:21:f5:93:ea:34:9f:7d:cf:91:
         fd:57:74:8b:67:2f:76:12:f3:54:90:fc:a6:0a:8d:f0:f4:4b:
         13:5d:a7:d7:9b:e5:68:2e:b7:0e:30:49:00:b3:7a:48:9e:b9:
         ea:d0:9f:64:86:f8:ea:20:e2:7f:30:ca:cd:9c:11:0c:10:39:
         d8:86:d3:9c:9e:69:a5:ce:18:a8:e4:1c:aa:d2:86:ce:65:b9:
         12:7a:3e:ca:bf:53:28:cb:40:e1:20:55:7c:f9:94:16:6d:fc:
         6d:10:c0:30:a2:94:93:06:b7:2a:f9:72:4f:fa:0e:d8:25:0e:
         17:3e:72:c8:45:58:6a:e3:7c:09:59:61:b3:43:4d:e6:ca:15:
         f2:9a:7c:40:82:10:59:a1:bd:13:39:20:59:34:1f:62:6b:e2:
         dc:56:d5:3e:ed:ce:e3:bd:73:57:12:6d:37:0d:dd:fa:a6:4d:
         95:8f:93:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:33 2026 by rpki-client