Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fd8b8ea8-a3d9-3507-927f-d67e82150a5a.roa
File:                     fd8b8ea8-a3d9-3507-927f-d67e82150a5a.roa (raw, json)
Hash identifier:          t5t57jBKC0rlE0WE6Vamh/dKrlAC+2LzlJ9NrTB+uo4=
Subject key identifier:   A4:34:E6:87:3B:83:AD:63:33:52:2F:94:CB:DF:07:E8:B7:96:17:1B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821CFCCBC5FDDFE993ABBE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fd8b8ea8-a3d9-3507-927f-d67e82150a5a.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11426
IP address blocks:        98.24.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:fc:cb:c5:fd:df:e9:93:ab:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c3215003-a7e8-44e4-8700-298151a2229a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9b:3d:e2:05:f0:f4:68:61:d1:e0:43:63:8f:
                    c1:e2:56:f8:e9:c7:c5:fa:e7:19:15:ca:37:fc:34:
                    41:b1:38:6c:89:90:12:3d:58:77:37:09:d4:df:f0:
                    bd:8e:5e:ff:0e:42:55:26:a0:b0:e6:cc:5b:3d:cb:
                    12:a4:5f:27:19:cb:fd:9e:0b:07:de:94:80:cb:14:
                    71:ae:71:23:a3:35:2e:7f:9a:ac:5e:ec:58:c4:3a:
                    25:73:39:9c:f0:75:d6:0e:ca:47:38:35:fc:a0:c0:
                    94:dd:f9:ac:e5:26:79:d9:d5:cd:e2:6f:65:53:68:
                    c1:bd:ca:1a:90:08:8d:fe:f4:8a:da:74:06:93:7f:
                    e0:25:f4:d5:ee:30:6f:bd:df:68:5f:1c:62:3a:1a:
                    b9:cb:4d:3c:11:d5:78:14:42:0e:df:81:2d:33:36:
                    40:18:ca:14:7c:bd:02:fe:21:94:90:a6:72:83:1f:
                    ed:b8:88:96:24:fb:92:43:92:64:5a:66:dc:41:32:
                    d3:bd:4b:27:cc:fa:71:08:77:24:4f:fe:16:d9:b7:
                    75:9b:5d:07:23:cd:89:d2:92:12:74:e6:91:38:c3:
                    c4:db:c5:c9:4a:b4:d3:d2:76:b8:a7:44:0b:1d:35:
                    b2:2d:9f:1a:13:89:c8:2e:ff:52:6b:0e:fb:7d:d9:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:E6:87:3B:83:AD:63:33:52:2F:94:CB:DF:07:E8:B7:96:17:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fd8b8ea8-a3d9-3507-927f-d67e82150a5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.24.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:60:e2:14:5b:02:b0:dc:a2:e7:16:b6:ae:31:e9:cd:3c:
         56:57:87:55:a5:32:a9:8d:ef:f2:d0:67:26:af:b2:9b:ca:e2:
         13:00:4b:26:f5:1b:81:d8:6c:06:97:80:cb:5d:cf:fc:56:fe:
         85:e9:c9:0f:b5:b5:16:b1:58:0a:f4:64:ef:e8:b3:f9:e4:5e:
         da:19:40:00:f2:77:7c:11:6f:31:5f:5a:19:09:cf:5d:c0:1e:
         36:58:b0:57:52:61:c2:ca:71:20:55:e5:af:68:fc:2b:80:38:
         f1:2b:5a:37:d1:87:1c:89:61:40:e7:f4:dd:1f:7a:b2:23:59:
         2d:ec:d7:1f:fd:5f:7a:55:13:d3:28:8b:08:ab:97:79:8a:96:
         6b:86:2e:5b:e4:85:a5:51:f1:3f:9f:e7:14:4f:1b:01:fb:d5:
         b8:d3:68:98:f4:7b:2a:f8:ba:be:9e:4e:42:ad:d6:e6:c8:3f:
         73:9d:2d:6c:0c:67:b0:a5:7d:bc:6b:a9:8d:b6:09:62:19:49:
         a1:44:b0:61:3c:85:4e:54:e2:e1:6e:a5:c6:1b:6d:a2:97:8b:
         07:55:c9:bc:b8:2e:ac:8c:bb:1e:8f:8a:d6:2a:47:79:f4:6d:
         e9:46:66:e9:41:27:65:ce:f7:42:f8:2d:c9:b3:89:96:e2:87:
         5a:7f:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:44 2025 by rpki-client