Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa
File:                     0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa (raw, json)
Hash identifier:          oCJ72FBLRl5daAb8c5qruB800DS90UjE0OfFYlhdRuc=
Subject key identifier:   8C:3A:C5:B4:C4:D3:3D:88:AA:1A:EE:89:A3:E6:E7:C9:09:8B:CB:8D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D15E326A63EB1D3825700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        98.147.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:15:e3:26:a6:3e:b1:d3:82:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=674047de-2d58-4cbf-a837-0b235c120ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:7d:2d:f1:0c:52:d8:5b:87:9a:3e:3a:2f:
                    f0:f6:0b:d5:3f:81:94:b3:f6:71:bf:3a:33:41:66:
                    51:7f:f9:0b:56:22:7a:ff:81:9d:c6:be:98:1f:8d:
                    de:b6:01:f9:fc:1c:d3:ca:45:c6:e7:57:b9:38:17:
                    b4:4d:fa:93:a5:84:69:66:c4:3a:72:4f:21:00:c7:
                    bd:68:e1:99:32:35:15:42:12:0a:79:59:02:7f:d2:
                    bb:24:24:cf:79:59:fe:f5:99:24:18:cf:d5:d1:cf:
                    4f:b1:87:7f:f4:d2:cc:d3:aa:ce:41:73:a8:fa:6d:
                    78:3f:71:1f:27:df:47:82:5a:09:29:19:5f:04:57:
                    1f:af:4e:1f:b3:08:f3:96:27:06:22:6a:df:88:37:
                    43:38:0c:fe:f0:1e:2b:4d:d8:b0:28:f6:a4:94:22:
                    3a:a3:7b:9e:9f:30:d4:90:46:50:a2:e5:80:4b:46:
                    dc:93:7c:ea:5e:42:d1:f6:63:ee:c2:6e:5c:4f:e1:
                    71:7a:90:24:4b:b0:1a:b3:eb:90:a1:04:7e:65:26:
                    85:03:c7:ec:b7:a5:53:d3:bd:3c:37:e9:3a:fe:61:
                    20:bb:ba:68:92:c7:c3:cd:05:2f:ca:ec:72:ab:f1:
                    f1:29:eb:1b:ea:4b:27:c3:a0:e1:14:51:3f:bc:05:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3A:C5:B4:C4:D3:3D:88:AA:1A:EE:89:A3:E6:E7:C9:09:8B:CB:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0b4dab64-f1a6-3a2b-ab2f-cfaf63120194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.147.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ef:69:05:0d:5f:d9:26:7f:33:8a:5e:61:3c:e4:e2:ec:e7:
         49:cb:e8:2d:d4:a4:69:7b:dc:3d:33:30:3a:f1:82:ef:56:5b:
         ba:16:8b:73:c8:f2:01:d5:82:a5:7d:11:9f:b0:65:22:e1:6c:
         c9:ea:41:09:28:1f:e3:7e:24:ca:c8:4b:f7:c6:8e:36:3a:9c:
         31:5b:da:9c:7b:f7:ef:9e:76:ae:70:fc:5b:0e:9f:c4:b5:0d:
         c2:55:d0:17:10:93:8a:c8:2c:a4:51:23:69:e4:f9:ee:58:22:
         b2:c4:83:86:e1:9a:a3:9e:24:f4:1b:b7:c7:5a:bc:6e:34:26:
         1b:8b:ce:ad:28:e9:2f:8e:b5:a1:d9:bc:f7:1c:29:9c:67:fa:
         e4:10:c4:0c:8c:ce:60:57:57:63:a8:98:ba:82:1e:11:ce:b3:
         15:4c:e4:32:f2:f7:48:17:de:be:fe:49:d4:a7:47:a0:f5:3b:
         96:2d:2d:d3:9d:93:e0:db:65:d7:a8:6c:c5:92:d0:3b:b9:6e:
         63:83:6a:c9:07:b2:b7:86:6b:09:59:0c:b3:4b:d1:3e:70:6a:
         7c:37:15:8e:cb:eb:79:4e:00:da:5b:c7:6c:1e:b9:9e:e7:bc:
         8f:ff:bc:d6:c9:99:6a:29:ff:52:4a:db:a1:07:2c:8d:95:55:
         12:7f:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:35:50 2025 by rpki-client