Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dc531ba-8139-3a5c-b6aa-5be117bdddb7.roa
File:                     5dc531ba-8139-3a5c-b6aa-5be117bdddb7.roa (raw, json)
Hash identifier:          kIxUCHOlDZ5gIHZJiRjox0uxc/NVcri3Uhhh916NCXQ=
Subject key identifier:   C8:AD:3A:1E:56:F3:AB:5D:4F:2E:59:60:F6:CB:84:7E:C1:61:AD:35
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB25F1BB0315039B5C13C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dc531ba-8139-3a5c-b6aa-5be117bdddb7.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11426
IP address blocks:        174.98.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:25:f1:bb:03:15:03:9b:5c:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=260c9dce-7eb0-4545-a1bb-8f734fd19ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9b:b4:47:d0:a6:a0:da:44:f4:78:98:a8:12:
                    f3:1d:f6:c2:a0:7c:84:12:10:61:4f:27:f6:ba:15:
                    78:62:3e:7c:26:b1:37:cb:91:61:fe:9c:44:6b:67:
                    44:0e:a5:32:3a:7c:dc:fb:38:b8:98:3b:fd:f0:01:
                    5d:9e:f5:64:b7:7f:84:f5:c7:be:4f:23:81:19:cd:
                    c9:64:52:b9:69:29:f3:5e:03:24:3a:28:23:3b:79:
                    c1:14:4e:8f:e7:e7:28:cd:3b:e3:f4:25:3a:90:c1:
                    8c:43:c0:80:b5:49:50:84:1f:34:da:e0:62:49:0d:
                    27:7c:43:05:aa:5a:e5:60:5f:61:19:28:73:eb:79:
                    0f:28:7c:67:b1:b5:aa:d8:b2:fb:d6:b9:ae:c0:a6:
                    06:53:04:fe:ab:e1:50:6f:b1:98:cb:05:b6:b8:f6:
                    20:2f:5d:28:38:a9:4e:e0:cc:50:cf:55:fe:0c:b1:
                    30:59:73:cd:07:c3:ac:b7:be:5f:e7:1e:1f:29:3e:
                    96:83:18:bf:f2:15:89:96:e4:54:24:d8:c9:f4:33:
                    a6:22:08:34:86:96:84:0a:f2:23:b2:79:c7:ca:d0:
                    d6:e7:8f:41:45:23:14:2f:40:15:f4:cc:34:e0:b0:
                    4b:ec:9a:19:f1:d9:db:50:d8:60:2c:b5:22:ab:8d:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AD:3A:1E:56:F3:AB:5D:4F:2E:59:60:F6:CB:84:7E:C1:61:AD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5dc531ba-8139-3a5c-b6aa-5be117bdddb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.98.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f6:a3:25:9a:d1:ad:21:b9:5b:33:2e:0c:6a:1b:b1:c2:bc:
         27:ed:25:d4:3e:4c:86:44:be:fc:c9:53:af:64:59:6b:d8:dd:
         82:3b:08:d7:f7:df:43:49:00:11:d4:cb:66:25:a9:89:0c:7e:
         3c:24:17:73:87:44:dc:bc:c3:c1:ea:79:bc:56:29:b8:37:10:
         2c:4d:54:52:46:e7:57:02:bd:8b:8b:e9:4d:53:11:fb:f8:72:
         ae:07:eb:41:f0:30:e3:7d:d0:8b:c3:31:92:90:5a:51:ee:4d:
         2a:1f:19:ca:0a:f9:b7:6d:fe:f5:c6:aa:44:aa:29:98:be:4b:
         0d:1a:50:05:6a:41:b7:46:6f:86:73:47:76:ad:fb:76:74:7f:
         83:c8:3b:8f:83:b6:a2:74:a6:83:6f:bf:63:48:ec:75:f3:86:
         78:db:02:cb:e4:c4:e3:94:52:16:33:ff:6a:8f:02:bd:c9:ae:
         6d:df:74:13:ba:af:28:34:8a:be:67:03:06:a0:ff:ae:70:b4:
         88:d7:dd:3b:bf:ca:d6:14:fc:ce:a5:67:fb:41:c4:38:21:2d:
         ae:9a:34:49:37:8e:34:e0:53:35:48:b8:b3:80:75:bc:0d:02:
         61:a3:77:25:9e:85:58:0a:e6:c7:4b:25:6c:42:f9:a0:cf:f7:
         04:97:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:22 2026 by rpki-client