Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8f6ae77d-7717-327e-9556-8993cfb9b2f2.roa
File:                     8f6ae77d-7717-327e-9556-8993cfb9b2f2.roa (raw, json)
Hash identifier:          b2QmfS5vteVehlJ/nTJS8k1kiUrh67HKDkn2sOKDMVU=
Subject key identifier:   48:A3:F5:72:DE:F1:57:15:E1:C8:E5:B1:33:86:41:A3:86:3A:40:FE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB11875555C73BC46C1340
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8f6ae77d-7717-327e-9556-8993cfb9b2f2.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        98.157.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:11:87:55:55:c7:3b:c4:6c:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c3143f30-3dd4-4ac8-bffa-f570b0c38b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e5:b9:8b:08:b4:c7:69:13:90:e2:c9:f0:f6:
                    e2:2e:e1:62:ba:7d:4c:9d:7e:4c:07:fd:39:7f:79:
                    98:93:0e:12:81:e8:8f:cb:25:83:6c:ca:a9:8d:1f:
                    45:31:6c:c0:da:b5:6c:42:72:b8:25:c8:8f:d7:7d:
                    5d:f8:8a:75:d4:4f:e8:e8:62:e6:8f:9d:fa:12:26:
                    69:6b:44:3a:ce:1a:b6:d6:dc:c6:00:ea:9e:3d:c3:
                    a0:04:d6:89:8e:d9:4b:2e:32:c0:26:47:a6:4b:c1:
                    be:13:7b:d7:e6:3f:6d:a9:89:e7:b2:aa:16:b9:62:
                    ac:c5:62:49:c6:16:13:ea:27:89:eb:30:56:4f:3f:
                    e3:f1:eb:18:c2:fa:f7:dc:37:9d:03:8d:09:16:14:
                    55:d4:dc:d6:b9:3a:b3:72:0b:2d:a2:b1:d3:d8:d7:
                    c4:2e:cb:ee:d8:ef:83:66:47:7f:0a:95:7e:c9:71:
                    2c:81:2b:25:ee:2e:3d:02:91:7e:b9:90:c6:ea:bf:
                    fb:f2:bf:4b:81:45:2f:cd:7d:cf:fa:a6:ae:19:f7:
                    03:1f:9f:f7:d0:dd:25:89:c2:a4:5b:62:28:fb:80:
                    1e:8a:0b:5c:fe:09:98:4d:c4:dd:6f:e6:25:9a:75:
                    ec:ba:9e:5f:65:69:a6:3f:12:73:9e:af:b5:d4:f0:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A3:F5:72:DE:F1:57:15:E1:C8:E5:B1:33:86:41:A3:86:3A:40:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8f6ae77d-7717-327e-9556-8993cfb9b2f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:0b:39:e9:32:f2:1c:8f:94:15:cb:b8:36:79:3c:73:5b:b7:
         d7:a0:5e:d2:ac:5b:64:12:0a:28:e6:44:84:e9:5e:09:31:90:
         a9:e0:63:c3:fa:8d:d8:3d:c2:59:51:d7:ac:a9:f4:3a:aa:58:
         b3:a9:0d:a3:4a:e1:05:d5:3c:ac:b1:0c:c1:f2:76:54:e5:20:
         3f:26:1a:d0:39:2b:d7:d4:a0:1f:5e:e2:2a:8e:18:d4:70:24:
         8f:49:87:e1:31:bb:57:04:80:2c:2c:94:e8:d8:2f:93:24:40:
         7d:78:01:6b:9f:8c:98:7c:ca:8a:14:05:6a:59:c1:8e:fc:92:
         1b:18:f8:50:f1:4e:56:38:1b:ab:c5:7d:5f:4c:94:11:4a:ac:
         90:51:68:7c:d8:d2:49:f7:0b:ca:2a:09:80:9f:6b:5f:5f:41:
         1c:34:ca:fe:8c:a3:5d:bc:24:39:66:fa:9b:3e:49:7b:bb:a7:
         30:5c:9a:1b:05:02:08:2d:12:32:d3:ad:3f:46:56:7a:08:20:
         83:3a:52:b7:27:05:1c:80:d3:44:bf:17:70:56:e4:a1:c8:ee:
         6b:d9:52:38:7e:52:92:7a:8e:70:1f:1d:ee:41:e2:15:d1:0e:
         e3:49:9c:79:68:26:5a:cb:5d:77:de:e7:40:d6:a6:35:b0:4c:
         de:67:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:52:22 2026 by rpki-client