Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26af906b-1de0-3209-8ca1-3294de4d0e64.roa
File:                     26af906b-1de0-3209-8ca1-3294de4d0e64.roa (raw, json)
Hash identifier:          llMdgnoa+lJLCSRpfsQ7iGLR7aWTcF4NVv8Kee46kxE=
Subject key identifier:   15:2E:A1:FD:07:29:3D:E9:B9:42:37:4C:09:1E:9F:55:E9:FC:8C:6E
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0CF970B8984E01FD6FC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26af906b-1de0-3209-8ca1-3294de4d0e64.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     19115
IP address blocks:        98.9.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0c:f9:70:b8:98:4e:01:fd:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=066cdfe4-d505-4567-8112-19f316224833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:70:b3:83:03:94:cb:a3:54:2b:91:0a:6b:
                    a5:be:21:99:ec:59:86:d9:bf:df:80:d0:50:28:cd:
                    1b:fc:a5:e2:13:3a:89:99:84:d0:ed:6b:6a:a4:5d:
                    83:de:d6:0c:f2:c2:d6:e1:fd:d9:a0:2b:f5:9b:f7:
                    8d:b9:7a:6b:bc:d8:40:96:4f:df:31:b9:24:94:c2:
                    2a:20:84:56:ea:27:a0:34:d2:31:b8:87:e8:25:90:
                    30:9d:ba:72:9b:03:47:3e:49:38:48:20:f0:a9:04:
                    55:c5:a6:0f:2b:c5:f7:fb:58:e5:22:9a:94:90:8e:
                    b7:60:cf:9e:87:d1:18:82:f9:08:99:75:99:6d:36:
                    d5:ba:45:e4:04:cc:91:9a:56:46:8d:6b:40:ad:7c:
                    3f:ce:b5:f6:58:f6:69:77:1f:6f:44:0c:2d:6f:45:
                    c6:9e:c8:3e:6e:dc:e4:54:f9:fc:1f:2a:83:04:90:
                    dd:a4:3a:71:c3:7b:54:e1:2f:38:af:24:a4:12:5e:
                    f8:b2:fd:63:80:3d:12:67:6c:0b:ad:cf:04:26:87:
                    7a:8f:f0:de:d7:f7:9f:66:cd:dc:11:d4:e9:8b:f2:
                    d9:ca:c5:f3:fd:9c:20:4b:06:ed:83:23:d5:eb:8d:
                    48:12:86:7f:19:76:53:a0:16:c3:63:3c:f7:c9:3f:
                    5b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2E:A1:FD:07:29:3D:E9:B9:42:37:4C:09:1E:9F:55:E9:FC:8C:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/26af906b-1de0-3209-8ca1-3294de4d0e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.9.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:65:5a:a7:61:a7:ce:63:9f:20:fb:b0:a1:b3:9b:97:7a:ff:
         c8:a2:36:c4:46:6f:07:99:43:a6:1a:43:fb:43:3e:17:eb:2c:
         c5:05:29:43:9a:47:24:21:6c:8d:94:1e:89:11:ff:59:7e:fe:
         bf:3f:2e:8c:fe:8b:4f:29:73:48:43:9e:2e:23:ae:db:13:9f:
         13:0a:4b:d4:b4:87:a2:da:63:b7:be:a2:2b:b4:71:f6:ff:69:
         16:f7:b2:40:cc:4c:0e:00:2d:dd:80:37:33:07:ec:4f:58:45:
         be:5d:1f:7c:8d:5e:9d:9f:6c:9c:01:17:1b:1c:d8:15:64:c3:
         4c:47:98:4b:24:10:46:01:c2:61:6c:f6:08:1d:c4:41:9d:f7:
         f8:8f:e6:1f:aa:cd:6a:da:09:a7:8a:58:03:70:0a:3c:dd:3f:
         0d:00:2d:36:3d:cd:79:e4:8e:99:63:12:79:73:19:c9:05:3c:
         4b:cb:89:68:7e:dc:e7:bd:a1:31:8c:46:92:5f:09:a0:e6:e4:
         b9:9f:c1:d4:a9:f6:43:65:b5:e6:4d:35:10:59:4e:4e:4c:d8:
         04:dd:e6:0e:d2:35:5c:20:be:28:2c:ad:1d:86:95:54:38:97:
         f6:b2:a5:72:5d:2e:97:0c:5d:52:ab:27:ab:4a:fe:18:c8:d9:
         a7:62:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:07:28 2025 by rpki-client