Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa
File:                     d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa (raw, json)
Hash identifier:          SUHRuT0AXMzy4ZqT2KOz+VCDAEy5S7DxfwGEra5rzFc=
Subject key identifier:   0D:2A:59:19:E9:51:16:82:40:FE:C9:2A:03:92:04:8C:F5:D2:E6:20
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B92DCF6CAB2F8CCA2AFBE3A80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     400901
IP address blocks:        98.123.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f6:ca:b2:f8:cc:a2:af:be:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=bc61cbf2-6502-4d66-9872-1fc1e399e29f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a5:f0:70:3b:07:d7:c5:89:39:37:ca:00:b8:
                    c4:2e:26:09:07:cd:ee:fe:1d:1e:0c:83:3e:55:34:
                    52:1d:49:94:ee:8e:f6:f9:b8:b3:d1:1f:a7:80:60:
                    22:68:82:81:a5:e4:68:c0:51:56:9c:60:5f:0d:b2:
                    b2:dd:f0:25:0a:e0:74:22:46:4f:2f:ba:77:be:ed:
                    25:a2:ed:a6:30:ad:0a:02:97:07:09:78:bd:50:38:
                    08:cb:e9:de:de:56:1e:d5:52:ce:62:45:f8:5c:d1:
                    a7:bb:3d:e8:51:29:64:a6:fe:15:d7:91:cb:69:20:
                    89:d2:42:51:a4:c7:c0:de:74:e3:88:7e:9f:0e:f9:
                    a7:06:4b:0c:86:26:9c:f9:d1:13:1e:86:2b:f5:7a:
                    86:dc:0c:f9:31:e6:e1:38:46:35:fe:be:89:97:32:
                    49:90:f5:38:f8:d7:bf:e2:26:98:7a:e9:e5:33:2e:
                    cb:4e:02:de:7e:3d:79:dc:6e:1f:df:76:13:bd:90:
                    81:0c:61:be:f4:56:4c:d8:48:ae:43:81:42:d2:7d:
                    43:87:ea:a7:91:39:75:27:42:ff:cd:35:61:43:28:
                    7e:db:c3:02:4b:bf:3c:99:94:22:d6:5a:b2:67:02:
                    97:c5:aa:3c:51:30:67:ec:bd:79:bf:f3:fb:9d:98:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:59:19:E9:51:16:82:40:FE:C9:2A:03:92:04:8C:F5:D2:E6:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d25f2c5d-f4b7-3930-927e-d27cb1f940fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3b:71:a2:19:87:fe:c4:cd:e0:9a:5b:18:5a:88:53:1c:c6:
         db:9d:48:e4:f6:27:6e:70:e3:a9:b1:ce:45:e5:22:5f:d2:d1:
         61:0c:da:91:77:83:a7:70:a5:b4:1d:d8:41:d0:20:16:60:d3:
         b0:af:4b:c9:4b:5c:30:07:01:3d:c1:95:2a:13:d4:29:e0:c7:
         67:ad:df:cb:8a:d5:68:59:8d:cf:ef:54:bd:84:e6:e4:f0:66:
         2f:2c:45:25:98:27:69:b6:4c:1a:fa:4e:3e:c8:95:91:1f:34:
         2c:28:55:e6:10:ea:9a:90:9e:39:49:df:7b:b8:fc:74:b0:ff:
         11:e0:9d:5f:07:76:2c:3d:c5:96:d3:e7:58:65:2c:ff:f6:be:
         ae:d1:d9:f6:1e:79:f0:6f:fc:00:ff:c7:c9:ea:4f:02:5d:27:
         85:47:80:c5:9a:3c:36:bb:34:cd:ac:06:71:7a:eb:d4:50:d1:
         9f:ef:a5:40:fd:18:5f:e1:39:66:38:7e:98:92:0c:ea:d8:92:
         b2:e3:f3:02:0c:a5:ed:b4:1e:d6:75:66:fc:64:15:fa:99:8f:
         c6:71:8c:07:a3:7b:be:24:7b:ef:62:de:07:1c:f5:a8:97:ff:
         45:80:15:69:a2:54:17:e5:d3:fc:dc:78:09:6e:c2:ae:9e:ac:
         08:aa:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:26 2025 by rpki-client