Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/880f2e83-c3b6-3a4a-bee3-082793f6966d.roa
File:                     880f2e83-c3b6-3a4a-bee3-082793f6966d.roa (raw, json)
Hash identifier:          6/WPAH5mpNAoPVBHcboDmgDaqvFXhomY+vftzQY01A0=
Subject key identifier:   F9:C2:82:D0:8F:A7:A0:BB:5B:27:5B:23:F3:C5:A2:A3:5F:E8:F3:D1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D0F2CB356B7C204D15C00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/880f2e83-c3b6-3a4a-bee3-082793f6966d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20001
IP address blocks:        98.145.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:0f:2c:b3:56:b7:c2:04:d1:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=ce6af3f1-1105-4329-b88b-610442f0414e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:96:13:73:79:ea:97:ee:5b:b5:ce:8a:39:8a:
                    e1:4e:42:77:31:aa:40:76:e7:ad:e5:de:93:8e:12:
                    9d:a9:11:e7:d8:8e:2f:52:aa:3c:d6:01:9e:26:dc:
                    2f:7b:df:21:86:99:3a:e4:ec:84:80:ee:4a:ac:27:
                    4b:99:ed:5b:83:34:1d:85:ad:2b:bd:46:4f:2e:3f:
                    eb:fb:04:82:2c:ba:52:16:db:38:76:1c:65:61:d7:
                    3f:e4:44:fb:11:e1:e9:5c:1f:61:43:86:6d:8e:3c:
                    67:17:e0:35:0e:e6:c6:61:fa:1e:9f:c6:9c:b4:55:
                    d2:87:ba:94:1b:13:89:38:97:5e:6d:b2:02:e0:06:
                    22:b0:3c:3b:7a:35:0b:30:ed:cd:c6:6c:0b:83:a1:
                    4c:2d:13:c4:b7:71:b1:6b:d7:ba:02:d1:28:0d:0b:
                    68:85:d4:ce:83:03:5b:f2:f2:0d:5d:ab:e5:5d:e6:
                    f9:7a:2d:b2:d6:19:2c:03:bb:09:e4:67:06:ae:4d:
                    f0:30:c6:7e:92:98:9e:da:08:7c:fa:80:cd:f0:48:
                    73:50:0e:a9:ce:ec:5d:9e:f0:c6:40:71:62:19:92:
                    d6:6b:99:e4:90:c8:31:bd:36:47:7e:28:a9:53:ca:
                    a8:8c:4a:95:95:b5:96:15:bb:92:1d:8f:5a:cb:5b:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C2:82:D0:8F:A7:A0:BB:5B:27:5B:23:F3:C5:A2:A3:5F:E8:F3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/880f2e83-c3b6-3a4a-bee3-082793f6966d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:93:6d:48:4f:f8:c8:37:d6:93:0c:6d:90:51:2b:f1:a6:
         ce:78:dd:f0:7c:c3:a3:b1:cf:66:5a:a8:57:9f:73:b3:07:4a:
         d2:f8:60:99:92:51:58:fc:6e:20:a1:c2:0a:70:aa:41:94:e9:
         49:15:8b:23:e1:e8:ff:bf:88:47:12:01:26:e7:53:c7:95:6e:
         c4:72:7c:a5:d2:c6:77:bd:d6:98:db:cf:67:2b:70:8e:85:4e:
         7e:0a:3f:74:a9:46:d2:bb:a0:65:6d:db:e4:6f:36:31:eb:78:
         06:8c:07:d7:df:7c:b5:b4:fb:ec:0f:66:86:44:8b:fb:16:d4:
         04:8b:61:d8:c5:3f:3a:30:f7:a1:37:70:f6:a9:52:9f:31:12:
         86:56:34:07:6e:7b:37:f4:f9:d8:e1:97:24:01:9d:14:ae:0b:
         42:3b:6e:c2:c0:21:c5:b9:0a:4b:40:b3:4b:da:71:d9:27:8d:
         e2:85:d8:8e:f0:00:62:8b:6d:14:86:a9:7e:09:4b:e4:55:8f:
         22:b8:4f:ec:64:1c:54:e4:f3:7b:79:8e:fe:50:93:2e:d6:d5:
         55:8b:10:ce:62:38:5a:cc:23:df:e5:23:cb:b8:f4:b9:cd:a2:
         2b:63:24:4a:19:c6:f6:08:44:52:7d:8f:d8:0a:cc:46:ee:5b:
         cf:f5:60:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:55 2025 by rpki-client