Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa
File:                     5d0191c6-c612-38ba-91e0-b427b794a35b.roa (raw, json)
Hash identifier:          Y15LBNSRGqDd1Y+pVyn/en1OD64NBbYG41FBgwdPhVo=
Subject key identifier:   68:66:EF:44:1E:A2:8B:7F:0C:91:4D:F8:30:76:FB:54:93:EF:96:39
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9FCAED22272EF7520F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11351
IP address blocks:        98.1.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9f:ca:ed:22:27:2e:f7:52:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ab925517-c172-4edd-976b-b4ef1bf36519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b1:64:9f:ad:c8:e9:8e:4e:d9:94:d7:ef:c4:
                    66:f9:8a:6e:2a:51:d9:a0:c7:6d:55:f6:1f:e5:4e:
                    a2:ee:23:81:f5:f5:4e:df:21:93:22:60:69:7e:92:
                    79:4f:c3:5d:c3:4f:b5:37:2d:9a:72:3e:de:7e:8a:
                    ee:6e:78:53:0f:44:7d:7f:1e:ad:c2:2f:9f:4e:67:
                    82:ed:7b:48:85:56:9c:02:df:03:1c:4e:4c:3c:79:
                    10:c5:5d:2a:08:b7:6e:71:3b:56:ab:95:20:45:ce:
                    7e:24:db:be:9c:57:7f:6b:1c:68:c3:8b:10:a3:1b:
                    b7:ab:e9:e2:a4:79:da:55:9a:33:af:a1:16:6f:72:
                    68:02:50:2f:5a:c6:1d:98:60:28:e9:84:f9:74:76:
                    b6:f7:63:0d:c2:45:ca:80:42:85:80:52:1e:7a:4e:
                    3d:65:8d:f6:a9:97:76:68:b7:d3:f3:63:c7:7c:af:
                    16:08:c9:d6:7a:a2:ea:7c:3a:1a:84:85:b3:84:0f:
                    3e:a1:c1:d6:a8:ae:00:0a:db:c1:2d:2c:02:5a:85:
                    e7:d3:66:32:1a:9f:0f:85:20:ac:5f:8e:7a:55:27:
                    d7:7e:ad:d3:c4:10:f3:31:54:0c:f0:ab:b2:3d:de:
                    43:57:b5:b3:22:aa:a4:dc:c7:ab:65:68:7e:69:41:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:66:EF:44:1E:A2:8B:7F:0C:91:4D:F8:30:76:FB:54:93:EF:96:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e2:5e:ec:5f:f4:28:ff:10:fd:26:ad:9d:ee:e9:bc:a2:f5:
         da:74:e9:da:4e:da:a6:8d:de:97:60:ee:8e:76:6d:47:20:8c:
         3f:75:0c:c6:20:23:21:e9:eb:e6:34:ee:78:97:1c:08:45:93:
         fa:a4:4a:ff:0f:e8:59:bb:e6:f6:b3:5c:c7:6c:b9:dd:b6:cd:
         49:c7:66:5d:b5:8b:51:05:dc:aa:9c:18:48:3c:4c:d2:40:33:
         bf:c4:78:15:3d:1d:76:2c:d4:35:dd:70:b2:0d:35:f6:6f:b2:
         48:5a:2f:f7:f5:9e:5b:e1:97:6b:5d:40:0d:f0:cb:e4:48:64:
         b0:7c:98:28:0f:41:3e:ad:f7:de:cd:8b:d0:5f:9e:81:5a:a7:
         04:e7:26:c3:2a:9b:3f:9a:cf:6a:90:55:26:03:85:c7:e0:66:
         50:30:c4:4c:94:29:73:66:73:51:dc:d5:75:07:29:c3:bb:ce:
         8e:f9:3f:96:df:98:cb:3c:48:16:ee:12:89:22:52:7c:3c:6a:
         00:b1:87:d5:cc:7d:aa:7f:17:d8:5a:78:78:4e:e2:45:72:d1:
         b4:b5:6d:28:ac:90:04:46:6b:ec:a1:d4:76:6f:51:69:1a:e2:
         cd:28:2f:e7:2b:b3:38:7c:b8:81:ba:5a:f5:3a:cf:00:52:0f:
         f5:c5:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:26:35 2025 by rpki-client