Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38ac3b46-5557-38c4-857b-3d14481af731.roa
File:                     38ac3b46-5557-38c4-857b-3d14481af731.roa (raw, json)
Hash identifier:          MgaRBhj7MywIOGMpSmFEeUrRbEiixc5PxkNup1+DVWM=
Subject key identifier:   95:63:44:2B:C4:35:18:EA:5B:87:6A:EC:09:16:EC:E5:94:DC:B5:86
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F4976DB39CEAF718E7153E340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38ac3b46-5557-38c4-857b-3d14481af731.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     12271
IP address blocks:        98.13.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:db:39:ce:af:71:8e:71:53:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6042a85b-d4ea-4ff9-868c-c378abfae13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:9c:e3:c7:ab:df:e9:de:fb:c2:e7:cb:52:
                    48:7a:e7:c7:03:bc:95:85:1e:a7:96:c7:12:e8:af:
                    96:9f:88:4d:60:79:b5:bd:df:71:8e:cf:79:4c:09:
                    3e:ca:48:bd:a4:57:7e:74:8b:eb:77:3a:c4:36:0f:
                    eb:37:6a:df:82:6b:f4:0f:42:40:da:49:0c:1f:5e:
                    b6:60:45:1c:da:b8:c4:13:33:4f:73:f9:bd:30:63:
                    ce:35:18:bd:95:eb:7e:fe:ef:97:8a:1e:a4:78:ec:
                    43:c1:ec:d6:0e:47:07:b3:61:e1:e5:72:2f:62:29:
                    f9:6a:13:bf:21:1e:78:4b:98:81:2b:17:50:13:e9:
                    80:ae:58:89:2c:45:20:f7:49:17:c1:ea:de:a2:d5:
                    89:89:f9:22:7e:15:ab:9b:cf:54:b2:90:a0:8c:0b:
                    2f:7e:3a:2c:51:65:f1:65:08:5d:0c:fe:84:2c:5c:
                    5a:9c:f6:0b:34:18:2d:4a:e9:47:83:b0:bb:8e:f7:
                    95:81:38:56:12:12:a3:62:1e:74:ff:ba:95:be:73:
                    69:41:cf:13:0b:34:82:5d:83:56:49:0d:f6:5d:6c:
                    60:3e:54:0d:e6:37:f2:a3:5a:bc:d1:89:15:26:77:
                    28:e9:c9:c6:a3:5f:3f:8d:e9:33:d6:f3:11:11:ee:
                    82:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:44:2B:C4:35:18:EA:5B:87:6A:EC:09:16:EC:E5:94:DC:B5:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/38ac3b46-5557-38c4-857b-3d14481af731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.13.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:97:c8:75:40:bf:42:fc:20:3b:a7:25:71:0e:30:e7:5a:
         42:77:b0:ac:79:4e:69:59:0d:df:48:a1:4d:c5:34:dc:fa:29:
         24:3c:69:45:a6:89:ac:c4:01:6c:04:12:86:8b:a0:ba:e3:a4:
         17:65:3b:5b:00:87:f7:b2:5d:ec:e5:67:84:d7:77:be:86:f1:
         e8:68:f4:5f:a0:2c:67:b3:7e:0f:35:54:93:2e:de:64:4b:55:
         d0:ae:e8:2d:88:50:fe:2f:50:ee:81:1d:57:a9:2c:95:c4:04:
         ef:c5:81:9b:ad:bd:85:87:8f:7c:61:bc:2e:00:be:37:a0:ef:
         de:ab:e3:45:a4:57:75:a3:11:8d:bc:13:7d:45:c5:81:3e:b6:
         65:65:06:65:08:03:ff:2a:b4:14:5f:d8:9e:94:a4:f8:5c:7c:
         ee:6a:5e:a6:55:79:e4:5c:2f:35:60:71:6d:f7:a3:9a:3f:3d:
         bc:b7:20:ea:ed:38:b6:db:0b:e6:e6:2a:6c:50:cc:1d:c0:4e:
         71:59:7a:d0:75:c5:97:58:ce:c1:54:f8:22:48:dd:78:4e:82:
         42:e6:70:0e:f2:0f:48:4d:11:4c:76:f0:55:ed:e0:e3:a3:d6:
         49:4d:91:5c:6c:16:c6:e4:b5:11:ed:bc:6b:88:cb:86:db:4d:
         1d:56:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:34:41 2026 by rpki-client