Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98c53b69-ea18-3129-b89d-82718efcc602.roa
File:                     98c53b69-ea18-3129-b89d-82718efcc602.roa (raw, json)
Hash identifier:          3jhmiH/iZeKMwv8mGewKmrf0hsExSJKrWshng1cvPMw=
Subject key identifier:   00:F3:4C:9D:3A:F9:03:6A:C2:79:15:60:6B:CF:7B:99:59:B5:55:F1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CAA56DA4375D1600967980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98c53b69-ea18-3129-b89d-82718efcc602.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     40294
IP address blocks:        98.7.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:a5:6d:a4:37:5d:16:00:96:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=db13e2eb-e7b5-40f5-ae85-2b871b5375f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:4a:51:5c:ff:8c:56:5c:0d:f0:0d:cd:47:
                    6c:35:5c:f1:dd:12:33:6f:1c:bc:0d:5b:5b:43:df:
                    72:3f:51:da:45:79:cd:50:d9:6a:fa:98:f0:4a:cf:
                    2d:0e:10:41:73:4c:5f:de:bb:d0:20:7c:ea:19:86:
                    88:4a:33:69:a8:9e:1f:eb:9e:0c:54:0f:db:c9:ff:
                    3e:a5:3b:a1:21:60:0d:b8:3e:d1:1b:52:fe:45:60:
                    f1:6b:8c:0d:7d:70:5a:1b:8c:44:45:16:70:35:d6:
                    7d:47:b9:5f:38:ba:ce:fd:9c:0e:77:eb:8a:99:aa:
                    e3:62:7b:ff:b6:61:78:8a:50:2e:8d:f4:dc:70:64:
                    6c:cf:7b:a1:60:e7:4e:5c:7e:72:58:99:23:4d:bd:
                    dd:e1:25:a5:76:de:a4:71:a6:5a:aa:5b:1e:fa:75:
                    43:0a:1e:e6:3c:86:15:7c:72:aa:41:49:a7:a8:6c:
                    fb:13:7a:2b:4e:dc:bc:d9:90:45:0a:41:7e:e9:95:
                    c5:bd:12:ee:9d:96:8c:ad:65:de:ea:f0:a6:d7:db:
                    a2:9b:09:22:05:df:24:c2:1a:c9:34:e3:b4:fa:bc:
                    7a:60:b6:b0:96:d8:bf:e9:f7:69:1f:57:08:ac:04:
                    b3:f1:28:cc:c4:62:97:f0:39:00:ec:26:6b:44:60:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F3:4C:9D:3A:F9:03:6A:C2:79:15:60:6B:CF:7B:99:59:B5:55:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/98c53b69-ea18-3129-b89d-82718efcc602.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.7.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:5c:c2:28:03:cd:3d:13:d2:26:ff:8b:e8:97:1d:af:93:eb:
         99:70:af:60:76:2b:29:94:68:f2:a4:7d:66:ec:db:61:be:ea:
         46:cf:7f:83:b6:9f:e8:a1:ce:f5:c2:46:d1:e7:53:95:c7:30:
         94:a8:bb:42:a8:a2:ad:5d:67:e3:06:bd:91:11:ad:40:8d:ec:
         e4:ff:b7:ea:92:c9:4a:01:48:86:b0:b7:9a:80:30:db:18:5e:
         27:3d:2c:31:9b:7d:af:2f:82:98:a7:67:b4:16:2f:de:5c:23:
         89:44:08:93:79:7c:d1:14:cf:be:e0:63:96:21:da:36:d3:ba:
         50:7b:25:ed:a2:23:7e:f7:2b:18:fc:1b:42:a1:ff:2d:a8:46:
         c7:f7:73:94:20:73:51:41:a8:2d:7d:69:86:e5:87:c5:40:2f:
         3e:fe:d6:50:a5:1f:61:55:d8:33:cd:0b:39:d8:bf:db:a6:74:
         64:ce:df:c7:5c:b5:54:03:4e:a1:7c:64:25:00:10:d9:8d:ae:
         e6:f9:74:27:c3:93:b4:c0:47:f5:9c:c2:f8:e1:c5:dd:54:51:
         99:cc:a8:6e:7d:84:d1:20:4c:48:42:25:c2:c6:21:70:35:d2:
         2c:95:14:3d:eb:20:f3:9a:39:66:97:04:34:58:9a:8c:8c:9d:
         42:e4:72:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:03:28 2026 by rpki-client