Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7338be84-a571-39c5-b67b-1880c1f69945.roa
File:                     7338be84-a571-39c5-b67b-1880c1f69945.roa (raw, json)
Hash identifier:          PQfFVYQlrn7lVh1HhzSD2fj+uW47vyYchJpzvIjcvz0=
Subject key identifier:   66:52:88:C0:37:C3:0B:40:7A:9C:8A:2F:12:96:26:B8:A5:CB:BD:1C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB38F3A34227FFBA99C100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7338be84-a571-39c5-b67b-1880c1f69945.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     20001
IP address blocks:        98.145.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:38:f3:a3:42:27:ff:ba:99:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=7a8144cd-09d5-46f3-a296-a68b0b63b822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:de:46:45:f9:26:13:81:46:80:00:58:de:
                    80:cf:d9:a5:59:a4:7f:57:b0:84:87:6b:8b:5f:63:
                    f3:78:60:97:ba:5a:2f:df:7e:66:b2:8c:d8:55:d6:
                    1a:8a:2e:47:ae:f3:18:16:d7:2b:58:81:1f:91:e5:
                    22:09:a4:04:0e:19:46:9d:5e:b4:d6:1d:85:ef:9f:
                    16:6e:cb:0b:1a:fc:81:67:8e:5e:48:20:59:f9:47:
                    3d:35:a4:d4:ab:72:c8:98:3f:74:21:8c:36:d2:39:
                    bd:d1:a9:3c:9f:ed:4b:15:4a:03:3d:3b:99:7d:21:
                    fe:66:c9:8e:62:6c:36:90:13:b6:be:14:ff:46:4b:
                    0d:72:cd:b0:74:62:66:7d:ce:49:1b:9e:72:5e:81:
                    64:b0:eb:c6:e1:a8:c7:dc:b1:81:b3:a0:9d:77:da:
                    fe:2b:06:b3:ae:35:ac:08:72:cc:2a:09:93:78:29:
                    91:59:33:2f:ec:5f:67:2e:ce:1f:18:d8:05:7d:86:
                    99:67:89:e8:25:5d:f4:dd:2b:fb:1e:d9:53:c6:66:
                    e2:3e:47:63:66:c3:42:57:db:1e:ab:49:03:54:85:
                    23:77:02:0e:77:c2:78:ee:2d:23:ac:bb:91:5a:2b:
                    3f:f4:ca:5d:4c:e9:0f:d9:db:23:bc:3b:66:73:36:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:88:C0:37:C3:0B:40:7A:9C:8A:2F:12:96:26:B8:A5:CB:BD:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7338be84-a571-39c5-b67b-1880c1f69945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:2d:d8:05:fa:98:db:ad:d9:76:f8:db:90:30:ec:81:a8:
         d9:b6:2b:5d:3c:aa:d4:ee:f9:74:f3:d6:b0:eb:8c:85:dc:61:
         86:1e:d1:0a:cd:96:48:60:d3:6f:02:e5:c2:21:76:2a:f6:0a:
         52:f9:35:ae:3e:f1:be:4d:ff:cc:2a:a6:de:9c:80:c1:f1:14:
         56:0b:36:d1:17:2d:d9:d6:13:ff:73:a6:a3:32:dd:ce:76:90:
         8d:db:b2:66:46:31:33:7e:8a:a6:77:cd:03:02:d9:14:00:1d:
         dd:13:28:52:20:36:4e:0b:42:d0:4d:92:20:e4:3a:f4:6f:a0:
         5e:44:48:18:96:59:8a:44:ee:fb:8b:a4:e3:52:01:a8:f7:89:
         1c:30:c2:13:d1:49:04:75:ec:ad:7f:85:05:62:70:36:de:03:
         44:7d:4c:53:be:72:80:81:ad:8b:34:57:4f:2a:62:20:4b:94:
         82:a1:d4:91:93:d8:03:a0:3c:4f:a2:65:bd:40:3b:ba:6a:fd:
         b6:f9:fd:ae:6b:d9:bd:2d:8a:7e:92:07:54:01:1d:93:a1:92:
         4c:ac:93:8a:a1:33:ea:e6:7e:24:68:9e:de:de:37:4b:67:d4:
         dd:d6:a0:ee:f7:06:8a:36:b0:cb:f9:b7:2a:c1:c7:31:3d:a9:
         01:92:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:13 2026 by rpki-client