Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d296162a-c21f-3575-8256-594b4b99b6d3.roa
File:                     d296162a-c21f-3575-8256-594b4b99b6d3.roa (raw, json)
Hash identifier:          KwEZJxV5v4YlRaLWzv29iBpKui6OHmO0sezbU/unjtA=
Subject key identifier:   C2:08:0F:71:EB:89:9D:1D:90:9B:1D:4F:4B:67:37:6E:73:86:BB:5B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821D91253BC71DE866D95B00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d296162a-c21f-3575-8256-594b4b99b6d3.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     10796
IP address blocks:        98.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:91:25:3b:c7:1d:e8:66:d9:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f5aa8bb2-ce61-4880-af0d-354e770c331c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:7f:9b:8b:5a:90:36:86:66:b2:7b:ec:66:
                    95:17:6a:d1:d7:96:33:43:9d:73:79:f9:5a:8b:fd:
                    ad:d2:ac:3f:95:0f:86:ac:44:16:ca:a3:e8:26:4d:
                    4f:27:ed:29:3b:6a:1d:34:a9:d5:20:c7:e5:cd:3e:
                    a8:94:9f:40:6d:20:7a:80:fe:1a:11:8b:52:8e:72:
                    c1:4b:84:2d:2b:12:42:84:d2:e4:74:3a:30:1e:fc:
                    ec:db:7a:2e:35:f2:dc:55:35:de:33:19:09:67:ff:
                    28:83:cf:45:be:f6:35:5c:98:af:e0:25:3d:c5:06:
                    86:87:f1:06:d0:dd:5c:8f:15:e7:ce:6e:46:4f:46:
                    ef:78:35:0e:91:98:75:64:b2:66:8e:9e:a1:ae:35:
                    9a:e9:52:1b:1e:d1:a2:b7:a7:62:f4:8e:86:07:88:
                    59:65:8b:e2:b6:2d:b8:09:9f:65:a9:01:e7:db:15:
                    ca:a8:4f:13:68:2f:6a:3f:d0:15:b3:9b:c4:cb:ba:
                    b2:30:d0:d0:82:a2:27:66:7d:1e:bd:9f:f1:a9:e2:
                    a3:67:c1:f6:f2:c1:9c:00:7b:8a:b5:4f:d1:9b:67:
                    80:57:49:06:92:0e:a8:b7:d2:ee:4a:4d:6c:58:c5:
                    a3:44:8c:47:42:d6:27:0b:05:13:25:a5:2b:97:e8:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:0F:71:EB:89:9D:1D:90:9B:1D:4F:4B:67:37:6E:73:86:BB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d296162a-c21f-3575-8256-594b4b99b6d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:9b:32:3a:9b:64:58:0d:e4:6d:2a:fb:db:e7:60:1c:45:
         7d:e1:87:b6:21:0f:ad:a5:52:40:47:27:c2:32:84:32:b7:07:
         e4:5c:d9:c2:bc:cd:15:d6:eb:13:00:6f:fa:15:60:98:9b:26:
         42:d9:af:98:5e:4a:7f:a4:77:61:cd:00:e2:a0:0f:31:da:72:
         ad:62:e0:11:50:ba:5d:35:c7:c0:30:25:6e:61:0a:c4:07:5c:
         c2:9b:3c:3a:8b:c5:b8:b1:f0:f0:eb:ef:64:c5:42:43:c9:71:
         f0:b1:15:86:2a:cf:37:66:67:7f:28:20:d2:7b:83:fd:6d:b2:
         ba:bb:8a:d2:7b:47:f9:a9:d2:f0:09:fb:82:ce:e3:c3:32:4f:
         05:0c:f2:a9:d3:e1:72:21:06:d0:0f:4b:55:4c:69:f5:fa:62:
         1f:6a:1d:e5:8d:bd:af:75:64:18:95:ec:75:d3:2d:90:9b:96:
         c2:c7:aa:b6:25:0d:3a:fb:87:d1:0c:17:9b:a2:a3:34:2c:cc:
         6a:b2:cb:e7:11:bc:7c:fc:a8:52:7a:49:b4:df:fb:ca:f4:ad:
         9d:13:6a:78:a7:12:fb:04:db:23:41:62:67:c0:dd:7c:fb:13:
         08:1e:32:5d:34:a0:30:eb:4c:21:c7:77:ee:68:94:8f:af:38:
         76:d9:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:27 2025 by rpki-client