Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/65220319-6a61-30be-979b-f42a2da524ae.roa
File:                     65220319-6a61-30be-979b-f42a2da524ae.roa (raw, json)
Hash identifier:          iYEfYTDQHQoyPStNuD1TyGNZ6iebPlIb8E+XwqMQQNc=
Subject key identifier:   94:C2:9D:AF:DA:DF:D8:E2:2F:83:8D:67:38:B0:DE:6C:F8:B3:71:66
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DB9BD49ADCE9F68081D40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/65220319-6a61-30be-979b-f42a2da524ae.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        98.147.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:b9:bd:49:ad:ce:9f:68:08:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8488a49f-32f2-48f8-8b1c-1ea055cbbeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:1d:2a:c5:24:cb:64:b5:b3:38:79:1f:f5:
                    ee:55:8a:c4:60:f2:20:fd:41:d0:9c:1f:41:b7:a7:
                    52:d5:78:a6:aa:6a:63:43:43:d7:ee:bc:76:43:a4:
                    55:b8:87:8c:59:26:7c:3a:a9:c9:75:bb:db:e7:72:
                    ad:6b:0d:b4:bb:48:a0:88:6a:2d:af:20:22:5d:d0:
                    45:ec:4b:9b:72:01:d8:0f:22:f8:36:fb:0a:19:9e:
                    01:4e:61:f8:f1:44:31:1a:8f:e7:43:12:9f:2b:ec:
                    b2:d3:1c:2d:02:a9:e7:7e:98:a8:9d:d6:a6:6f:98:
                    d9:af:76:52:3c:75:ff:a4:fd:5c:8a:a1:d2:f9:12:
                    07:9f:0d:a1:c2:f7:1d:fc:4a:49:0e:c9:b2:4e:b9:
                    8f:0d:0c:01:f3:84:5d:d0:0b:6d:1f:17:ab:fc:6b:
                    7c:a1:6c:45:c0:37:77:3e:ec:77:5d:fb:b6:65:1e:
                    95:a8:78:c8:c6:5e:22:ae:90:a8:e2:d4:8e:64:cb:
                    6b:84:39:ea:0f:aa:5a:b9:65:07:40:52:a9:60:80:
                    08:b5:e5:76:ea:e4:b5:70:2f:12:d3:d2:32:91:0b:
                    1b:5e:22:60:9b:90:28:d9:a6:a7:54:0b:49:c3:37:
                    bc:1f:7b:73:2e:8a:00:ca:f7:b6:55:ee:9a:00:d4:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C2:9D:AF:DA:DF:D8:E2:2F:83:8D:67:38:B0:DE:6C:F8:B3:71:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/65220319-6a61-30be-979b-f42a2da524ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.147.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f5:ba:dc:3d:d0:eb:99:2b:19:5b:10:c1:67:64:5a:19:a8:
         4e:a8:fc:f7:38:7c:ba:fd:64:d7:30:ec:59:c5:f6:ca:37:f1:
         5f:ad:f8:30:27:80:6f:ba:0c:42:32:59:0f:f9:70:51:2f:b4:
         51:ca:ec:b5:8c:16:2a:32:93:85:6e:55:bc:8b:ba:3d:59:3d:
         7f:c2:85:f5:30:f3:a8:24:83:20:8a:83:2f:05:b9:f2:7f:19:
         b1:d8:d5:ca:1c:bf:4f:59:a6:1e:3f:95:3e:32:7f:d8:76:a8:
         02:01:3b:40:3c:10:fe:2f:1e:23:26:1d:6e:0c:2b:0c:a3:e0:
         6b:fa:8c:fc:66:97:28:a7:ef:d0:cf:ba:56:c9:c4:63:b4:a0:
         82:9a:1b:4c:b2:27:c8:d9:e4:db:7f:13:c6:de:fb:d7:d4:08:
         ee:57:d7:83:56:36:d2:40:89:f6:0d:a0:c8:1a:9a:d7:ef:7a:
         0d:33:d0:a7:18:d3:59:da:18:9c:8b:9a:3f:aa:c4:98:74:81:
         2a:75:a2:96:ce:ad:40:ae:d2:ab:7d:5f:6b:97:ff:4d:d1:8e:
         8f:47:75:88:b0:11:11:8b:e3:d0:03:e7:ed:38:87:2c:f8:0a:
         89:1d:3e:7a:7d:5c:5a:a2:82:7c:83:cb:53:2f:4e:f0:d8:52:
         a9:32:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:58 2025 by rpki-client