Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa
File:                     c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa (raw, json)
Hash identifier:          TfiIpUGJrwVk5zxLKqDQmm1jCnxqwl2JnIta99Xi21A=
Subject key identifier:   FD:7D:BE:22:FA:38:C6:F6:6D:A6:84:61:85:0B:CF:CA:93:E0:C5:C2
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D8FA11681696A62DD1180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        98.157.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:8f:a1:16:81:69:6a:62:dd:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=28bc29b7-3f0f-4cfd-95ca-157b177bf6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:c0:33:a9:2b:a0:53:30:66:83:4d:da:0f:
                    d5:f6:2f:50:31:80:5a:05:c5:ae:84:5d:f6:23:40:
                    74:d6:42:3c:0c:1c:4c:3b:9c:74:3c:40:f7:32:9b:
                    dc:4b:d8:9a:69:69:1a:b2:fe:61:47:97:36:ff:4e:
                    b6:b5:59:0e:2b:cc:d4:35:f8:18:c9:63:72:a1:29:
                    26:79:53:ba:d1:9f:7c:03:c4:aa:dd:78:cc:d9:34:
                    47:df:4a:3f:cf:b4:a9:f5:12:b3:bc:ad:02:f5:80:
                    d9:ab:60:e8:33:6e:0b:ef:1e:59:d3:e2:a7:cf:85:
                    cf:ca:84:9b:25:c1:c5:38:13:d7:b8:31:6f:f1:b3:
                    56:39:a0:89:ca:ea:29:8b:38:7d:92:b5:79:5a:1d:
                    14:47:53:e2:ee:d7:0b:89:82:a9:01:54:bf:50:67:
                    96:5c:bc:cd:65:5a:cb:ff:3b:80:b7:29:c7:f2:60:
                    66:63:22:1b:c5:ae:c0:eb:91:99:8b:96:e7:e3:d8:
                    5f:e9:25:4a:20:05:1e:70:34:03:9e:21:e2:f4:69:
                    e9:63:b4:b7:9d:29:ed:af:80:20:f3:10:aa:b0:41:
                    68:38:d6:d4:5c:58:c4:52:93:e7:1b:1d:5c:89:46:
                    ab:c4:af:b1:d9:a3:d2:2c:f5:a0:9d:10:bd:e7:98:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7D:BE:22:FA:38:C6:F6:6D:A6:84:61:85:0B:CF:CA:93:E0:C5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/c882ef82-1c2f-3a8e-87ce-9974b3c92ff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:de:68:76:fb:a3:32:57:6e:50:1c:17:1b:82:9d:70:b2:43:
         da:f8:62:21:cc:9f:a5:48:70:35:a5:76:f9:27:e0:d2:ca:d1:
         8c:66:bb:86:6d:62:ba:f3:fc:8e:55:97:14:d4:7d:ac:32:e8:
         b8:62:6c:bc:fb:42:95:e8:82:85:98:aa:4f:cc:f1:3b:db:6f:
         35:e8:13:74:92:b5:53:77:bd:b6:cc:a4:54:d5:65:7b:fe:16:
         db:d8:da:a7:34:5c:ed:c7:cd:5e:d7:74:63:71:99:06:85:3f:
         44:c5:7d:72:48:f7:05:b9:97:11:99:93:ce:a0:f0:0d:3d:b0:
         ef:b9:f3:7b:af:15:14:04:35:d6:6e:06:1c:a8:14:7e:04:41:
         b8:c0:bc:fa:7b:e9:24:38:48:ee:ba:94:d6:d1:33:5d:ae:01:
         bb:bb:45:6a:42:67:50:94:0f:d5:43:70:24:73:51:3a:45:41:
         03:f3:e8:bb:c7:36:57:c3:d7:c3:42:2c:87:eb:6a:28:d6:0e:
         a4:06:07:87:78:17:8e:40:1a:27:45:1f:17:90:56:6d:4d:bb:
         f1:b5:24:3d:4d:7d:2d:5f:6d:98:4d:a3:47:67:14:4c:1a:c7:
         a4:8d:1c:ad:c8:b5:e1:00:31:e0:dc:b6:86:d7:dc:b8:ba:51:
         31:28:ec:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHY+hFoFpamLdEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
MjhiYzI5YjctM2YwZi00Y2ZkLTk1Y2EtMTU3YjE3N2JmNmVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHAM6kroFMwZoNN2g/V9i9QMYBaBcWuhF32
I0B01kI8DBxMO5x0PED3MpvcS9iaaWkasv5hR5c2/062tVkOK8zUNfgYyWNyoSkm
eVO60Z98A8Sq3XjM2TRH30o/z7Sp9RKzvK0C9YDZq2DoM24L7x5Z0+Knz4XPyoSb
JcHFOBPXuDFv8bNWOaCJyuopizh9krV5Wh0UR1Pi7tcLiYKpAVS/UGeWXLzNZVrL
/zuAtynH8mBmYyIbxa7A65GZi5bn49hf6SVKIAUecDQDniHi9GnpY7S3nSntr4Ag
8xCqsEFoONbUXFjEUpPnGx1ciUarxK+x2aPSLPWgnRC955hCoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP19viL6OMb2baaEYYULz8qT4MXCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYzg4MmVmODItMWMyZi0z
YThlLTg3Y2UtOTk3NGIzYzkyZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/eaHb7ozJXblAcFxuCnXCyQ9r4YiHMn6VIcDWldvkn4NLK0Yxmu4Zt
Yrrz/I5VlxTUfawy6LhibLz7QpXogoWYqk/M8TvbbzXoE3SStVN3vbbMpFTVZXv+
FtvY2qc0XO3HzV7XdGNxmQaFP0TFfXJI9wW5lxGZk86g8A09sO+583uvFRQENdZu
BhyoFH4EQbjAvPp76SQ4SO66lNbRM12uAbu7RWpCZ1CUD9VDcCRzUTpFQQPz6LvH
NlfD18NCLIfraijWDqQGB4d4F45AGidFHxeQVm1Nu/G1JD1NfS1fbZhNo0dnFEwa
x6SNHK3IteEAMeDctobX3Li6UTEo7P4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:08:42 2025 by rpki-client