Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a17f982-83e3-31d2-a333-d77c6f1c1fab.roa
File:                     0a17f982-83e3-31d2-a333-d77c6f1c1fab.roa (raw, json)
Hash identifier:          9m7PI0yImyrMQgzs/2sGr6CL8wdCy244RxJSPB4s8aI=
Subject key identifier:   AC:A3:FD:83:7B:E1:96:17:CC:19:CC:A5:5F:69:01:2B:BF:1E:75:42
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9D1D32A40F480F5F1800
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a17f982-83e3-31d2-a333-d77c6f1c1fab.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10838
IP address blocks:        98.145.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9d:1d:32:a4:0f:48:0f:5f:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=5fb8d3fb-e957-4854-a12f-b5e0efc45d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:2b:a9:ac:48:ef:48:51:7c:53:77:90:36:85:
                    07:bb:fa:18:05:7f:b1:77:ce:03:da:66:2a:78:7d:
                    c2:b2:4e:cf:92:31:db:ff:31:f7:67:e0:80:a8:4b:
                    af:d6:f3:94:4c:a9:8f:c3:1d:05:fc:c4:fd:53:e6:
                    e8:7c:24:c4:10:b9:ec:bf:97:53:33:e8:2a:36:9a:
                    b9:5d:39:c6:b1:4d:1a:a7:f4:7b:44:9e:95:71:5b:
                    df:18:37:5b:2b:cc:0c:55:60:ad:11:bf:b0:be:e0:
                    e9:eb:e2:0a:28:48:e0:be:38:56:63:3c:e0:ae:30:
                    6e:0c:3a:97:36:a9:e4:ff:c4:ab:f4:a6:cc:7a:d9:
                    7b:64:b9:b5:12:c8:2c:8b:94:d8:e3:a1:5d:2c:48:
                    51:b8:3f:48:11:dd:2e:ab:a8:f3:eb:0d:23:28:29:
                    10:8e:ab:0f:f5:ae:04:bc:c7:3c:e0:37:0b:03:1e:
                    37:7e:af:ce:23:0d:42:4f:5a:fe:9c:97:2a:ee:79:
                    52:bd:4c:32:9b:7b:e2:8a:fa:8f:cd:49:bd:c3:74:
                    a0:b6:de:0f:88:64:b5:cf:d8:97:e9:53:85:31:41:
                    a3:91:04:d3:ed:df:55:34:47:24:fa:0c:02:b3:bf:
                    55:32:c9:a2:95:2e:34:4f:66:54:e2:1a:ba:f6:cf:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A3:FD:83:7B:E1:96:17:CC:19:CC:A5:5F:69:01:2B:BF:1E:75:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0a17f982-83e3-31d2-a333-d77c6f1c1fab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:09:fa:27:99:fe:1c:17:ec:b9:40:4c:03:df:0b:e5:0a:
         f3:73:c4:f5:c8:eb:b3:9d:a9:13:e5:e2:13:4f:3c:1c:ce:0e:
         d4:a1:27:de:5f:07:2e:c7:49:57:c3:b0:70:29:f0:fc:b3:25:
         08:ef:35:a5:86:bf:70:ca:43:98:c8:8c:4e:48:26:30:3f:04:
         2e:ff:09:cb:5c:65:8a:89:1d:85:70:0b:c0:04:3b:1e:49:c1:
         19:06:5c:f3:53:f3:33:21:06:37:d2:d6:23:53:fa:fd:a1:0b:
         19:2f:f0:49:58:3e:41:56:32:5d:99:13:2c:aa:a2:c2:02:17:
         d5:f4:73:c7:b8:4d:52:9c:59:e4:f6:6e:2b:be:31:0a:cf:4d:
         71:c6:aa:86:d3:e2:80:f1:77:4a:76:60:2b:4a:c2:90:91:88:
         c6:fb:97:1a:40:82:26:20:6b:98:c3:ad:54:36:fb:05:9d:40:
         61:2b:a8:35:13:c6:3c:7c:33:f0:17:95:c3:ca:fa:f5:1a:93:
         47:16:85:e3:87:e9:0f:42:45:6b:87:6a:83:7c:b3:60:42:06:
         fe:af:fb:88:94:6e:22:cf:d9:e5:43:f4:fa:26:0a:8e:12:b4:
         be:a8:d0:65:36:7b:a4:b1:db:67:2a:b4:26:b8:df:1a:61:82:
         cd:4d:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:53:23 2025 by rpki-client