Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa
File:                     2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa (raw, json)
Hash identifier:          EVrsocdNuUdScamxAc1zs2bxuWqdDezwWoK4lW2WCc8=
Subject key identifier:   4E:42:02:24:5B:B1:82:61:93:89:A0:90:DC:E4:68:B6:BE:CB:1E:64
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA698FE034CDE7643B4380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        98.123.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:69:8f:e0:34:cd:e7:64:3b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=83867eb6-b256-4367-bfc1-6fdad45f50d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:89:a9:f0:08:2d:78:84:52:9c:26:85:ae:
                    50:c7:6c:c5:6d:10:ae:c4:60:31:54:c1:1a:99:2d:
                    54:a8:25:98:6f:ee:c4:b5:c5:77:ac:bc:83:2a:eb:
                    85:ab:76:15:de:66:d9:05:a2:47:99:83:46:0c:cc:
                    5a:92:d3:3e:ed:46:e8:49:ea:d6:91:e4:45:85:ea:
                    55:82:79:1c:f0:97:01:ae:06:af:ca:fd:97:18:9b:
                    d9:5f:ab:05:19:e1:9d:d6:87:59:a4:c3:3d:2b:b9:
                    b3:3d:69:48:09:2c:ed:3f:9b:9f:92:d4:bb:38:dc:
                    6b:88:c8:64:1e:2d:df:12:b7:4d:1e:20:f6:55:cb:
                    35:d3:46:fd:db:ce:ec:3f:03:67:6b:3c:2b:bf:6b:
                    ff:7d:eb:02:ed:8f:02:e0:ac:09:6c:43:90:15:c1:
                    ec:aa:79:06:87:f2:c2:d0:28:67:7d:a0:aa:8d:e6:
                    ff:69:75:3f:57:e2:e3:24:26:55:b1:67:20:1b:4a:
                    82:16:fd:3e:37:39:c6:a1:04:5c:f9:a5:71:df:22:
                    47:73:7c:e1:01:7d:a8:33:47:56:3b:7a:67:41:a3:
                    d8:cb:32:5e:75:62:cc:a2:15:9c:ba:73:c3:7f:f9:
                    a0:56:89:a9:bb:6e:6d:0a:5e:40:52:42:b8:64:26:
                    f3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:42:02:24:5B:B1:82:61:93:89:A0:90:DC:E4:68:B6:BE:CB:1E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2b14ef75-ec9a-3b27-8ddb-2634c1a69d62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f6:74:42:47:2c:a3:3d:5e:ff:28:f2:9f:31:b6:62:97:ef:
         58:c1:50:3c:ef:71:77:2d:fb:19:7a:ae:5b:6a:73:9c:be:70:
         36:9f:ac:e6:ae:8c:6e:79:08:a8:71:fc:70:d8:6b:aa:be:3e:
         34:af:6c:25:be:7b:5e:b3:6d:e4:44:3a:17:6a:3b:c3:a0:bc:
         3a:1a:18:30:d3:50:5e:1b:4a:43:92:e6:f0:5a:d5:84:3e:b8:
         05:ab:c7:06:18:27:d8:06:cc:ef:ff:73:f3:59:80:53:96:91:
         db:71:c6:6a:3b:44:2d:cc:d2:19:53:84:80:71:52:07:f5:0a:
         f6:2c:ee:9d:ef:4a:9f:7c:dd:83:bb:d5:f9:fa:d9:5f:f9:1c:
         3b:f5:d7:a6:29:a5:f2:3d:dc:6a:0f:19:fa:8a:c6:58:ad:9f:
         7b:98:00:97:fd:75:5b:2b:ea:14:20:b1:10:d9:ee:aa:0d:4e:
         13:86:fb:bd:03:05:4d:44:1e:7f:1f:fb:98:8d:03:5d:de:90:
         84:38:ee:6d:23:35:ab:8a:fe:2a:1e:5e:56:d1:03:87:b0:c3:
         52:48:14:66:9a:d5:c7:51:46:a6:76:f1:39:6e:0c:34:bd:c0:
         9a:4e:e4:21:bc:0e:7d:fa:33:ff:65:6c:4a:60:92:cc:c8:4f:
         18:8e:ee:21
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1AymmP4DTN52Q7Q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
ODM4NjdlYjYtYjI1Ni00MzY3LWJmYzEtNmZkYWQ0NWY1MGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndKJqfAILXiEUpwmha5Qx2zFbRCuxGAxVMEa
mS1UqCWYb+7EtcV3rLyDKuuFq3YV3mbZBaJHmYNGDMxaktM+7UboSerWkeRFhepV
gnkc8JcBrgavyv2XGJvZX6sFGeGd1odZpMM9K7mzPWlICSztP5ufktS7ONxriMhk
Hi3fErdNHiD2Vcs100b9287sPwNnazwrv2v/fesC7Y8C4KwJbEOQFcHsqnkGh/LC
0ChnfaCqjeb/aXU/V+LjJCZVsWcgG0qCFv0+NznGoQRc+aVx3yJHc3zhAX2oM0dW
O3pnQaPYyzJedWLMohWcunPDf/mgVompu25tCl5AUkK4ZCbzKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE5CAiRbsYJhk4mgkNzkaLa+yx5kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMmIxNGVmNzUtZWM5YS0z
YjI3LThkZGItMjYzNGMxYTY5ZDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYnswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC/Z0Qkcsoz1e/yjynzG2YpfvWMFQPO9xdy37GXquW2pznL5wNp+s5q6M
bnkIqHH8cNhrqr4+NK9sJb57XrNt5EQ6F2o7w6C8OhoYMNNQXhtKQ5Lm8FrVhD64
BavHBhgn2AbM7/9z81mAU5aR23HGajtELczSGVOEgHFSB/UK9izune9Kn3zdg7vV
+frZX/kcO/XXpiml8j3cag8Z+orGWK2fe5gAl/11WyvqFCCxENnuqg1OE4b7vQMF
TUQefx/7mI0DXd6QhDjubSM1q4r+Kh5eVtEDh7DDUkgUZprVx1FGpnbxOW4MNL3A
mk7kIbwOffoz/2VsSmCSzMhPGI7uIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:52 2026 by rpki-client