Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a0a44ef-7a88-319e-a10b-7fd8c571e0df.roa
File:                     8a0a44ef-7a88-319e-a10b-7fd8c571e0df.roa (raw, json)
Hash identifier:          XS6cmvmZc1OsczwMTygapuz7FqYWagCuUMV+mu6aXFs=
Subject key identifier:   DA:40:21:90:0D:48:10:E8:32:09:E8:0B:25:67:47:1F:57:8D:AA:D0
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D9CFC2135CBD94F109480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a0a44ef-7a88-319e-a10b-7fd8c571e0df.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10838
IP address blocks:        98.145.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:9c:fc:21:35:cb:d9:4f:10:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c29b6b26-7470-4a58-aff9-acfce42d5b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:7c:03:79:3f:a3:16:42:16:fd:92:52:82:
                    12:9a:55:dc:1f:4d:ff:42:24:40:a0:a9:da:a4:ae:
                    ef:5f:f8:c9:5d:21:2b:89:90:ac:16:93:2e:6e:cf:
                    58:0c:81:6a:4b:89:8f:37:e3:a8:8d:96:04:d8:18:
                    8f:79:b7:04:c2:be:42:05:60:67:14:54:2f:97:49:
                    aa:89:b8:a6:e9:5f:18:24:e9:fa:59:96:b8:83:40:
                    d5:8d:37:18:9a:cd:6e:ee:1e:9c:a2:5f:e0:74:9d:
                    f6:13:99:54:dd:57:01:ba:8e:53:ad:b4:39:bc:8b:
                    96:8a:8d:6f:2d:58:40:1e:0b:55:8c:f8:6a:e1:8b:
                    e9:e2:5d:d1:c5:7c:17:95:6d:1c:d6:92:2e:38:b3:
                    76:c1:18:1e:cf:16:02:f2:90:e3:7a:0d:ac:dd:16:
                    e2:9d:11:4f:35:37:ad:c8:93:10:c1:b1:48:2f:6f:
                    bf:70:ea:7e:09:9e:d8:15:4d:29:a0:3c:71:50:c5:
                    21:0b:64:14:b6:4e:7d:c2:77:a4:e3:9f:12:42:5a:
                    25:1b:28:4e:27:0e:61:8a:94:4a:f7:29:4e:a2:ac:
                    0b:d5:11:2e:75:67:bd:c2:d8:0e:e5:43:f4:96:e0:
                    15:4e:6d:f2:26:cb:b4:98:6e:36:b5:f5:38:4c:80:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:40:21:90:0D:48:10:E8:32:09:E8:0B:25:67:47:1F:57:8D:AA:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8a0a44ef-7a88-319e-a10b-7fd8c571e0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d6:0a:74:90:d9:00:f4:14:92:81:40:51:9e:4a:35:be:7d:
         f5:29:aa:dd:4e:f5:e3:54:27:6f:35:61:60:b1:d2:57:f3:b5:
         b3:46:40:d2:13:fc:ca:0a:8f:50:7e:f5:4d:0e:95:d5:df:87:
         9f:1f:0d:8e:f2:5b:d5:8c:1b:35:5d:88:42:f2:44:38:c8:e6:
         42:b3:5b:54:6e:bf:e7:2e:07:73:1a:32:d7:47:ca:13:32:ad:
         a7:e0:92:70:e5:65:4f:b9:ab:69:27:0b:75:0b:ca:8e:83:68:
         09:da:36:f9:92:79:76:25:17:28:c7:00:e4:a6:0f:47:8d:11:
         1e:09:84:3e:0e:13:8e:44:39:ce:52:00:ab:ea:60:38:98:ff:
         2b:85:b1:ef:16:5e:c2:d0:07:e7:c1:b4:1f:cb:37:d5:d6:f6:
         3b:43:75:5c:bb:35:a7:a0:00:04:cb:2d:ac:e3:f0:82:86:b5:
         de:bd:08:c4:a1:d2:6a:9d:5f:88:ad:18:2f:70:4b:d3:b2:c2:
         8e:b4:54:2d:d1:1b:c1:32:2c:6f:52:46:26:72:e3:ea:7b:df:
         60:69:3d:54:78:16:5f:d0:72:12:e4:98:4b:9d:ad:7c:e6:58:
         07:fa:e1:e9:b2:e0:ce:8e:ee:db:27:4f:46:d5:0c:a0:7f:31:
         d5:72:15:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:46 2025 by rpki-client