Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2da9270c-0924-3e79-aa8e-596be7ceb9dd.roa
File:                     2da9270c-0924-3e79-aa8e-596be7ceb9dd.roa (raw, json)
Hash identifier:          SoMedgkSiUSVWJ8TotaHusF+34jOYVmzBdBgzrYWcgY=
Subject key identifier:   A9:7C:17:2E:B6:86:AE:2C:21:FF:0E:04:02:90:98:23:0E:79:68:B3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE421E8C4C86BFCE546D6
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2da9270c-0924-3e79-aa8e-596be7ceb9dd.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        98.28.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e4:21:e8:c4:c8:6b:fc:e5:46:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=abc7dd54-addc-4ea7-91c7-5955993804c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:d5:4e:c9:61:61:da:46:94:52:73:ea:cb:
                    b3:13:22:40:e2:dd:4b:cd:dc:bd:15:6d:29:1f:7b:
                    83:b7:eb:eb:f8:1b:b5:c6:00:35:2e:a0:e9:28:e4:
                    e6:e2:e3:99:5c:a6:f7:2e:7e:f5:86:cd:98:b4:de:
                    0d:02:41:3f:c9:1d:0f:fc:2f:79:23:3a:d1:2a:29:
                    bb:2d:e1:f1:d8:23:1b:38:4a:c9:61:ff:09:e2:d9:
                    71:34:e9:97:c5:09:e4:9a:70:a4:e2:71:59:67:dd:
                    04:f0:45:71:39:e9:c3:1f:3d:b8:28:77:df:50:e3:
                    90:8d:b0:ca:af:77:46:b5:55:94:72:23:a3:99:8d:
                    2d:99:d3:2e:42:4b:46:10:65:ca:9e:e8:2d:5f:61:
                    ba:ed:d6:cc:a7:06:69:18:b5:b9:a3:6b:9f:0c:3d:
                    21:db:6a:07:b2:13:d4:f4:e2:a4:9f:11:6f:3b:95:
                    cf:0d:bd:00:45:11:8d:e0:1a:8f:3a:b1:06:c5:2a:
                    30:68:c4:cb:57:15:89:a0:00:fc:f5:2a:97:a1:0a:
                    fe:7f:41:c6:9e:ab:58:3e:40:1d:e0:1e:d4:4d:92:
                    76:44:3a:bb:7a:79:7d:ce:c5:1e:8f:02:57:f5:e4:
                    e1:b1:c9:40:e9:c4:46:2a:85:e8:cd:04:a4:44:39:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:17:2E:B6:86:AE:2C:21:FF:0E:04:02:90:98:23:0E:79:68:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2da9270c-0924-3e79-aa8e-596be7ceb9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.28.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:57:45:c2:3c:f8:97:6b:e1:cd:91:d5:e0:48:4f:cb:78:61:
         b4:3e:1b:37:20:d0:b7:ae:66:a3:a6:c5:4a:fe:d3:d1:81:55:
         19:05:ee:28:a3:25:9b:de:fb:19:af:1b:48:c5:4c:9d:7f:60:
         13:bb:69:f2:96:40:65:bf:32:79:36:06:ca:65:72:e5:fb:0b:
         6b:bc:fa:a7:53:10:da:de:32:80:e0:02:17:52:06:d9:1c:4b:
         4c:f1:8d:2c:bc:28:ab:59:5a:d7:d5:d3:09:b5:c9:df:0f:bb:
         23:a4:c9:66:a9:c2:17:24:40:a5:02:ce:29:80:ca:9f:63:d1:
         61:4a:43:d2:80:29:45:4e:35:cb:29:42:db:3d:77:ed:2a:8f:
         b7:fc:ae:f4:b4:94:4a:25:5c:08:c9:a6:4a:5d:fa:24:55:82:
         f3:85:59:1d:67:62:94:49:fb:78:f4:b9:0f:e6:1d:86:bd:c4:
         26:bc:60:c3:e7:39:d1:65:7b:2c:85:b8:d7:7a:96:5c:b6:e6:
         ff:cd:99:aa:7b:5f:9d:e3:3b:7c:4e:09:51:24:a8:98:a7:64:
         c2:a6:f3:e2:31:c2:d3:c6:8a:19:b2:03:4f:44:78:01:cb:87:
         14:9b:86:a1:16:c4:29:65:70:b9:73:eb:a9:7f:bf:da:53:49:
         a6:08:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:34 2025 by rpki-client