Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d39df0aa-00bb-33df-8477-5fcea6e12b02.roa
File:                     d39df0aa-00bb-33df-8477-5fcea6e12b02.roa (raw, json)
Hash identifier:          MrlP8bFXxZq6jsV4K1zzU4VVgxwuHLUSLMiqOtNGyng=
Subject key identifier:   C6:63:72:D0:CF:7E:08:22:EC:96:86:15:76:22:A3:02:B2:AF:DC:AE
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DA67A536C62D14BB75300
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d39df0aa-00bb-33df-8477-5fcea6e12b02.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11426
IP address blocks:        98.101.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:a6:7a:53:6c:62:d1:4b:b7:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c35ccfa7-2a19-42a3-acd5-6cb78e88f881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:2c:1d:2d:e5:88:3f:57:4d:5a:da:4c:68:
                    5a:43:75:2e:f4:e5:0a:69:84:d1:4e:47:04:0d:ea:
                    ca:ba:72:bc:04:cf:e2:a8:be:3d:c9:fa:79:09:e1:
                    a4:f1:2c:99:e0:a5:7d:e9:c3:a7:bf:a3:ff:53:c6:
                    82:dd:c4:d2:81:99:39:2d:01:f3:35:cd:3e:bf:60:
                    17:f7:7d:46:1d:9a:c3:37:a1:89:2b:15:03:ed:36:
                    ab:a5:62:ca:3b:6d:b8:b0:fc:4f:70:a4:5a:4c:03:
                    17:4c:2d:97:37:19:20:38:cf:a8:84:f4:04:ec:63:
                    44:d2:92:35:bb:43:5b:3d:3a:03:3e:e0:85:64:98:
                    93:51:6e:88:50:75:21:e0:33:b4:aa:4a:bb:7d:85:
                    5c:89:b1:79:49:21:b6:b9:0b:5d:54:c9:bb:f9:89:
                    be:8c:6b:99:15:b5:bf:2d:8a:ca:2d:0a:d7:4e:03:
                    a8:b8:f1:e8:f4:cb:df:a3:19:c2:b1:96:4c:54:f9:
                    d4:ca:78:bc:29:e4:62:49:ef:69:a4:8e:9f:47:b2:
                    82:9f:ab:88:1a:bc:1e:ce:87:a8:08:a9:58:d0:63:
                    48:3e:0a:44:99:8c:6d:76:72:f7:e8:b8:48:33:03:
                    07:ce:32:55:6a:83:c6:9a:84:34:f4:8c:cf:83:3a:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:72:D0:CF:7E:08:22:EC:96:86:15:76:22:A3:02:B2:AF:DC:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/d39df0aa-00bb-33df-8477-5fcea6e12b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:06:27:24:68:19:80:38:3e:b9:83:da:fe:0a:af:78:4e:44:
         50:94:61:f8:8e:91:42:7a:49:4d:94:34:a7:0c:47:c5:50:7b:
         e3:a0:2d:0f:a3:07:3c:2a:5e:10:38:09:fe:02:ce:b0:99:97:
         17:32:53:93:ea:0e:0b:ad:2b:13:8f:ca:f6:91:61:f3:32:39:
         01:8c:ce:b2:02:d8:de:a0:33:49:a6:55:e9:02:35:04:28:17:
         14:bb:10:f9:c6:ab:f3:e1:e1:a1:bf:fa:e2:ad:6a:2d:51:4b:
         f0:c2:b9:2a:df:ef:0a:e6:3a:a9:3f:f1:24:a3:80:89:56:65:
         c4:d3:8e:76:ba:40:c3:b7:1b:d0:0f:a6:ce:86:17:8b:bd:85:
         34:f7:10:1a:63:b9:38:64:dc:18:27:ea:2e:98:05:e1:a8:61:
         9f:a6:d2:18:34:d2:a2:ab:7e:b0:85:b9:4e:37:f9:c9:8f:3c:
         5d:c9:e5:69:a3:1c:29:77:3a:c1:a4:f5:83:ea:73:13:87:a3:
         7d:4f:82:58:da:6a:eb:ab:76:17:fa:16:e5:bc:3f:d5:d7:30:
         1d:59:a4:78:2e:a0:ed:15:0b:9e:e8:f3:af:53:64:f1:a7:8a:
         84:23:1f:73:49:a1:be:10:45:df:37:7c:e7:93:ce:51:e5:73:
         de:a2:fd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:54:27 2025 by rpki-client