Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d296162a-c21f-3575-8256-594b4b99b6d3.roa
File:                     d296162a-c21f-3575-8256-594b4b99b6d3.roa (raw, json)
Hash identifier:          gyMl3pGwsZrVjy/xbq6EyhWLcXKsPsUHLdXtMpRZ3S8=
Subject key identifier:   17:91:47:4B:E8:10:62:7B:8A:7F:52:A7:5C:FD:A3:56:B0:D8:20:48
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB11DA47BA8469E2B73480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d296162a-c21f-3575-8256-594b4b99b6d3.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10796
IP address blocks:        98.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:11:da:47:ba:84:69:e2:b7:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=1a993b58-66c1-4650-8ab8-55c8e65b47b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:e4:8d:9b:ea:81:2b:10:3e:c1:0a:92:40:
                    2e:17:1c:b0:2a:7f:82:2e:d8:cb:72:00:0e:8f:6f:
                    35:08:91:6f:fe:0a:60:ee:0a:d9:56:00:6a:08:12:
                    0b:8d:12:ba:3d:d8:a8:c9:22:e2:d0:1f:c4:13:b5:
                    2c:14:46:cb:2e:7a:a1:f5:50:79:69:26:36:7b:10:
                    fd:eb:93:4b:f0:e2:5a:41:a7:3a:8f:82:2e:28:a1:
                    f6:89:7a:2e:9f:0c:68:76:ba:33:cd:c2:59:64:4a:
                    fa:e9:3b:9e:f1:c5:14:1c:b4:29:85:bd:26:af:0b:
                    a8:2d:bd:6a:13:ac:d1:a0:5c:6e:4d:e8:97:bf:99:
                    d8:00:74:7a:21:61:12:ae:0c:28:e5:97:e3:ff:f2:
                    39:2f:b5:40:56:28:e9:91:52:b9:e9:32:bc:64:b8:
                    1b:c2:0d:8d:7e:ae:72:32:15:75:50:f5:fa:e1:9c:
                    19:c0:6d:11:60:6f:ab:eb:a2:4a:f3:b1:4f:69:9b:
                    ab:00:ef:41:df:e1:b3:52:d6:71:f9:70:98:95:ca:
                    e3:a0:d1:73:d2:97:11:64:f2:71:1d:06:5b:56:d6:
                    15:94:3e:a7:a4:17:ba:06:60:9e:c3:16:a7:2c:57:
                    cd:fe:ce:4a:45:4a:0b:bd:db:25:12:d4:bc:48:c3:
                    33:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:47:4B:E8:10:62:7B:8A:7F:52:A7:5C:FD:A3:56:B0:D8:20:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d296162a-c21f-3575-8256-594b4b99b6d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.144.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:86:03:66:6d:21:7e:ab:67:8c:6d:00:3e:70:9e:6e:d0:4b:
         2a:91:75:68:45:04:26:f2:6c:b2:b5:76:7e:b9:b9:1b:88:fe:
         9d:6a:16:ad:d9:39:83:2a:54:19:1d:0a:33:94:84:ae:51:9c:
         c0:10:8d:74:63:a0:d0:1b:fb:0c:9b:11:b5:a6:0a:26:f7:ed:
         4e:cc:0e:82:65:2f:dc:4e:3c:1e:7d:e4:73:d4:a8:9b:ba:51:
         ec:24:cc:4b:13:1f:64:be:cd:e7:21:45:92:c0:6d:d6:e0:60:
         7c:d2:3f:00:99:27:8f:2f:7c:f5:4a:45:98:0e:eb:3e:bc:c6:
         38:bf:7d:98:83:f0:2e:ac:e5:0a:fd:3e:92:82:b9:f3:3b:36:
         ad:d1:1d:57:ca:56:7f:bb:71:52:0b:c2:41:5b:f2:9a:25:a3:
         f1:5e:5f:d3:92:41:4d:9b:1c:9e:57:44:88:e8:61:32:79:a6:
         63:60:72:e6:87:75:22:8e:d5:a4:67:f7:86:c1:a3:91:66:a8:
         08:3e:dc:3d:79:7e:49:df:89:aa:b9:1f:f5:d8:03:9f:bf:1e:
         c0:db:55:1d:12:8e:e3:ba:b1:b6:36:e0:b1:86:fd:e3:c1:06:
         76:6e:93:02:66:6c:9b:99:de:0b:5f:47:bd:e7:c9:4f:8e:01:
         16:48:88:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:34:35 2026 by rpki-client