Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa
File:                     4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa (raw, json)
Hash identifier:          JpWzsj15I71/55xskxfJtvhXbaPdU/4XusfSm2XGVl8=
Subject key identifier:   50:C3:0A:37:64:4D:77:3F:5B:98:AA:F0:CC:6B:C6:99:D9:95:AF:C4
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CE5DEFC34E3F00FCD4460
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        98.123.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:e5:de:fc:34:e3:f0:0f:cd:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=9ab91537-41f8-4931-8285-859c56451feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b2:fd:21:fd:b2:b7:ca:fe:0b:db:ea:2b:4d:
                    11:ee:39:4a:a6:9d:3a:e2:9b:73:4e:eb:17:f7:36:
                    83:4c:15:b5:8b:dd:e0:72:c4:d5:9f:31:c6:e2:54:
                    d2:a9:54:8b:e8:7d:72:ae:26:24:9f:dc:c0:df:9d:
                    09:81:40:e6:07:93:f3:65:2f:d0:0a:fb:7f:f8:01:
                    2d:2e:39:57:03:3a:cd:9d:a8:db:25:44:39:58:70:
                    18:82:92:10:54:8a:e1:a0:6d:fc:ea:96:e5:d5:9d:
                    6d:77:e4:79:68:4d:2c:ad:6f:8b:83:57:93:07:c2:
                    59:04:ee:a8:76:08:d3:a8:30:bd:16:97:1a:74:4d:
                    cc:77:fb:9f:3d:0a:e6:d5:77:7e:97:18:c3:04:6b:
                    d1:28:2b:6d:1b:87:ae:27:31:62:b7:39:6a:2d:89:
                    15:9d:61:9f:51:cf:06:bd:26:37:90:28:f1:bd:8a:
                    ce:b4:0d:1a:aa:8c:6c:28:83:ee:37:8d:d8:fc:a3:
                    b6:32:43:b9:0a:6f:27:de:50:2d:1b:63:c4:b6:33:
                    9c:66:d2:a4:c9:8f:83:fb:21:bc:e9:2b:4a:69:bc:
                    7e:ad:e6:9e:2b:0d:3b:b6:f0:c6:68:45:10:1b:90:
                    9d:9a:41:fd:55:d3:d5:45:5a:a2:a4:bf:15:04:ae:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C3:0A:37:64:4D:77:3F:5B:98:AA:F0:CC:6B:C6:99:D9:95:AF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:02:ac:ed:cc:22:94:15:c7:0a:f1:c2:31:35:48:3d:93:61:
         07:04:34:78:68:63:b2:78:80:16:b6:2d:d4:de:13:ce:ae:52:
         6c:bf:4b:76:a0:2f:f8:5d:13:19:78:85:00:b6:46:c2:6e:55:
         7b:df:23:d5:7e:76:1d:43:25:07:d3:d9:ca:dd:1d:be:13:8a:
         6f:4a:67:f2:89:e3:ec:52:f1:db:b5:c7:c9:27:5b:82:e8:46:
         b7:6b:91:c6:90:b8:b9:40:cb:58:d1:fc:c6:c0:ed:dd:cd:7c:
         ce:da:b2:11:45:de:3e:2e:d6:0e:7d:52:6f:bf:92:94:d8:25:
         ab:88:9f:20:b3:26:b7:81:f6:01:3f:ca:7a:6b:c9:57:be:4a:
         bb:9d:38:cf:c7:f0:59:5a:cd:90:58:e1:ae:ca:33:89:6a:4e:
         7a:6d:29:f5:75:a0:35:a3:28:81:f1:1c:42:15:ce:e8:b7:57:
         91:0e:19:49:28:b8:3e:ea:7b:d3:20:7c:12:93:f3:50:47:a2:
         8a:96:4d:c0:e1:1f:4a:03:fe:ab:ea:62:3b:aa:26:c6:e3:fb:
         12:3f:54:4b:f6:68:89:97:cf:37:49:52:02:f2:0e:22:d9:8c:
         ae:68:19:e3:a0:09:23:53:25:9d:fa:82:f1:79:e5:b4:60:d0:
         e5:23:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:45:05 2025 by rpki-client