Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b509d1af-bf42-3f43-960f-1afb9086b97c.roa
File:                     b509d1af-bf42-3f43-960f-1afb9086b97c.roa (raw, json)
Hash identifier:          A0GTWYON8LHsNs+PRQIaLHutKWB8EwAvOpjSrQ9cqL0=
Subject key identifier:   C9:BF:30:06:C9:ED:13:9F:EF:EF:9D:16:AB:69:3F:B6:EB:49:12:C7
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D143DA8BAE0F00816B8E3D628
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b509d1af-bf42-3f43-960f-1afb9086b97c.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     20001
IP address blocks:        98.145.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a8:ba:e0:f0:08:16:b8:e3:d6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=4576d175-9be4-4665-bf58-9acb582deb51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:fa:bd:8e:ba:b2:d3:48:2c:88:13:18:0f:
                    33:98:29:f3:2f:e3:09:6e:cd:97:b5:bc:af:72:af:
                    77:ec:ad:f4:fb:7f:b0:0c:ef:ab:c5:2c:15:33:5e:
                    7a:10:07:d2:06:cd:6d:3f:e8:66:04:3e:b0:42:8b:
                    e4:1d:6e:03:7d:9f:99:0e:af:dd:04:af:9a:82:79:
                    85:6f:35:56:a8:a0:19:f6:91:35:c9:28:05:c2:fe:
                    69:98:c0:c6:ee:14:9e:4e:d6:96:41:9e:c8:b1:18:
                    65:6d:85:75:fa:ba:f4:ca:4e:25:57:9b:3e:07:5f:
                    31:ba:e7:ca:7d:1a:4a:17:4b:cb:29:43:8c:1f:af:
                    cd:1e:e6:73:cf:3b:2b:2c:0e:13:be:02:c5:c6:6d:
                    13:f9:7f:8c:a5:a0:61:42:91:75:68:80:a8:13:4d:
                    24:76:68:3d:98:35:20:b4:e5:cc:18:c9:07:1b:e3:
                    96:bc:94:00:65:0b:7b:bb:95:43:3a:b3:f3:d4:c9:
                    85:3d:82:4e:43:d0:45:c0:f0:93:e0:d3:f8:ba:d9:
                    d1:d9:b2:fb:6c:c5:90:b5:ad:8a:7a:79:f6:b1:ba:
                    83:30:f0:49:67:68:94:f5:a4:62:02:15:b7:dc:90:
                    72:48:ee:66:da:00:85:9d:ef:f7:0f:de:fd:41:bd:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BF:30:06:C9:ED:13:9F:EF:EF:9D:16:AB:69:3F:B6:EB:49:12:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b509d1af-bf42-3f43-960f-1afb9086b97c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.145.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:a3:5f:c5:9c:92:ad:44:45:6f:d0:dc:1c:1b:6e:77:6b:3a:
         99:ab:aa:19:b4:c2:cb:c9:22:be:d3:4f:d8:8f:23:d2:4a:09:
         d0:82:df:71:bd:b2:66:ec:af:3e:77:44:ae:c9:64:cb:4d:cf:
         f1:b0:2a:cb:c1:e9:2d:3a:95:c5:62:f8:ad:f6:16:c5:be:1c:
         de:7d:b9:c8:d0:54:c3:fa:a9:fa:2c:0a:52:a2:cf:37:01:a0:
         7a:2c:19:ae:f3:7e:da:6d:f7:57:d8:6a:99:60:1b:82:a4:8a:
         87:5e:44:c9:b8:b1:3b:69:be:ed:8b:9e:5f:fe:2e:a7:f8:52:
         24:48:41:e5:05:87:61:d3:7e:d8:a3:11:31:08:b1:79:2d:94:
         2d:11:e5:af:fc:f5:ea:2f:e7:29:29:4d:47:bc:0c:36:eb:17:
         12:56:ad:3a:35:0b:19:ad:69:65:4f:f8:07:3d:ba:22:35:9d:
         ba:0b:bf:ae:60:a2:20:1f:72:35:e1:ac:95:b7:b4:46:0c:1e:
         2b:cb:ff:09:0b:45:2d:89:90:b4:94:ba:66:e5:29:08:bf:c3:
         ba:cc:6b:20:e9:da:7b:f1:83:15:dc:23:1f:f9:a1:08:6a:d9:
         1f:d5:91:26:a7:5c:4c:8b:50:15:1a:8d:1e:f0:40:2f:23:a9:
         cb:17:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:59:44 2026 by rpki-client