Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
File:                     c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa (raw, json)
Hash identifier:          EKHUWqnGRP163Zf1PZ0uAn2zSvF2o+PeZ7dMs5V+8Co=
Subject key identifier:   27:54:6C:A5:D4:7E:F4:47:BE:1F:A0:04:AE:89:8C:31:BE:6D:18:4F
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB347DFCB640BFD50D4A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     19115
IP address blocks:        98.8.36.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:34:7d:fc:b6:40:bf:d5:0d:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b137f5c6-8d32-4812-a328-f6a72e125c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:60:90:e4:c3:52:83:6f:8b:ea:06:f6:79:
                    b1:95:f5:b0:cf:0a:35:4e:7e:9f:78:03:9d:0b:11:
                    31:f6:e2:8a:21:8e:94:dd:e9:5e:2e:54:aa:d2:91:
                    0f:8d:13:9a:59:1a:fb:c1:51:8f:43:d9:7d:28:f3:
                    9c:17:b3:cc:da:7b:f4:bb:44:05:01:23:d3:02:fc:
                    01:02:e3:9c:f3:a3:de:e6:03:9d:55:96:1a:70:e6:
                    09:23:df:f0:a4:58:fc:4d:5f:32:42:57:48:57:e3:
                    ec:ed:74:34:cd:a9:0d:06:52:14:07:36:f9:5a:5b:
                    5d:da:9f:be:63:7b:59:5f:27:4a:d8:b7:3e:17:c8:
                    b2:61:2b:fd:f7:32:c8:3b:76:b5:0c:05:c5:a9:b8:
                    2a:84:80:79:80:03:5f:b9:f5:0f:0b:95:ff:3b:38:
                    cf:b1:e2:81:cd:5c:c0:00:52:11:79:b1:ee:80:91:
                    44:99:0b:32:aa:05:84:e2:59:61:0b:56:d8:ce:c6:
                    bc:0f:78:8d:bb:df:37:b9:2f:e5:a5:b7:ce:e8:ef:
                    d0:1b:30:41:1c:a5:f2:27:0f:61:4c:d7:6e:6f:e4:
                    91:c3:59:1a:49:3c:50:86:26:83:78:57:d4:38:79:
                    63:b3:ab:a6:e6:bc:38:97:77:e3:26:ff:8f:8e:ac:
                    0b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:54:6C:A5:D4:7E:F4:47:BE:1F:A0:04:AE:89:8C:31:BE:6D:18:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c245cb4c-690b-33c2-ba01-174af8e4d1c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:17:f3:58:39:23:4d:e4:34:dc:ef:20:a2:ed:dd:d3:34:2e:
         ce:ac:78:93:d6:12:06:e2:97:f6:17:63:d4:8b:c4:08:95:95:
         0e:c8:5c:6d:e7:08:24:41:48:c5:b4:b7:a1:f4:22:ee:58:69:
         06:46:82:1f:c3:94:23:88:2b:50:9c:29:61:37:d0:54:6a:af:
         0f:46:c1:74:d0:70:14:74:90:e3:e3:3a:91:0f:d7:4e:4e:2f:
         1d:0e:bb:8d:24:8c:20:d8:7d:0e:37:d7:42:7a:e4:a5:8c:f1:
         8d:08:c6:d4:ab:aa:1e:31:64:1c:9c:29:25:f7:2e:5e:e4:e0:
         d8:ea:92:71:56:60:cb:aa:2a:57:e8:4a:64:c2:4f:6c:ff:0d:
         6f:e4:34:4e:2c:a2:a0:a6:96:a4:a9:a9:36:94:c9:ce:67:f0:
         8d:85:f0:4f:54:1c:6c:1d:82:d0:c7:91:13:e5:03:e2:d5:89:
         f3:3a:75:17:b7:b2:cf:1b:b7:34:14:de:97:df:56:f9:11:2b:
         4e:00:a8:fd:d2:a5:45:d2:8a:39:3f:23:aa:ae:7a:e9:e3:6a:
         03:2c:5b:f4:f4:2f:cc:42:6a:81:29:1c:1e:82:c4:7c:57:89:
         b9:51:a5:5e:56:f1:d6:ad:e6:87:79:c6:53:63:53:0f:05:66:
         ac:8f:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:32 2026 by rpki-client