Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30d96b38-5c86-35c0-8d97-8200278cfb84.roa
File:                     30d96b38-5c86-35c0-8d97-8200278cfb84.roa (raw, json)
Hash identifier:          LiyOlYogrCnEA06uiQQshmFSpSl61Gf4APRIA7ok2V0=
Subject key identifier:   CE:74:3D:E1:66:8B:A6:9E:70:EA:BD:EB:BE:CD:0A:09:02:B2:DA:27
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F8DD859438E9510667FB2E700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30d96b38-5c86-35c0-8d97-8200278cfb84.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     21859
IP address blocks:        98.98.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:59:43:8e:95:10:66:7f:b2:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=b5650c4f-296e-4479-a622-2c43deef3409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:80:37:72:78:52:59:c4:f0:5b:2f:95:b3:
                    15:df:ec:e8:0f:93:87:2b:fb:d4:41:54:61:57:c1:
                    e2:2d:8d:99:15:bf:4e:0a:87:26:69:0d:ed:64:6a:
                    61:36:49:84:3c:fe:a0:b3:18:10:f0:be:eb:b0:7a:
                    06:5c:a7:db:0d:f3:51:e8:97:77:b7:6d:c1:11:8a:
                    ff:a1:af:fd:81:ad:d5:80:bb:df:ad:7e:70:c0:3c:
                    f0:23:4d:9e:fb:f4:6a:72:0a:4f:11:ab:5e:86:99:
                    59:88:17:43:8c:2f:ed:e0:73:8d:52:96:30:e2:7e:
                    6d:10:05:31:ed:ee:d9:f1:28:3b:61:17:2e:f1:00:
                    5b:a8:ba:0b:4d:4e:7e:e6:ca:b3:b6:8e:ff:3a:e3:
                    15:f6:f1:55:ea:70:25:6c:aa:be:8d:b6:4f:cc:14:
                    5c:f7:32:0a:19:1a:fe:de:42:d0:cb:9a:38:9c:86:
                    4e:00:e1:e7:df:0e:a3:74:33:bc:fc:ad:74:1e:27:
                    c2:ac:77:65:87:2e:b0:21:e4:6e:e5:7e:81:7a:55:
                    19:ec:49:f2:b0:c8:8c:ee:f1:d6:5a:55:04:70:88:
                    e2:a4:4a:34:af:48:a1:61:60:08:51:a7:24:75:59:
                    21:88:39:3e:7d:3b:9c:f4:42:19:bc:0d:74:eb:ea:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:74:3D:E1:66:8B:A6:9E:70:EA:BD:EB:BE:CD:0A:09:02:B2:DA:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/30d96b38-5c86-35c0-8d97-8200278cfb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.98.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:46:13:4d:f0:07:61:9e:4a:0a:d3:4e:19:69:14:cc:d7:38:
         32:36:01:1a:24:d0:b3:21:c3:1c:f0:96:f1:3d:0d:0d:ab:79:
         98:ca:bf:9d:2c:58:9a:db:10:9f:99:49:ca:8c:16:fc:9d:17:
         7a:bf:05:95:eb:53:15:c0:84:cd:76:bd:1f:cb:cf:fe:88:61:
         cb:e4:b2:78:69:87:4e:b6:48:8c:81:1f:1f:ed:f8:19:b1:5b:
         4f:6f:ae:74:c5:47:8b:53:a1:12:0b:ff:36:bc:e6:ab:5a:68:
         59:b2:c5:01:28:38:4c:2f:f5:89:bd:74:fc:92:48:d6:af:c3:
         fd:9c:ff:30:f1:81:33:86:73:9a:bd:51:12:16:46:d9:f7:6b:
         01:d1:b1:cc:78:f9:7a:6f:ee:f5:c2:f4:12:c2:a7:3d:89:3d:
         f6:23:78:bd:dd:a3:52:f4:36:96:7d:65:5b:79:1b:3a:7c:c0:
         c1:77:74:ff:80:f3:f9:4b:bd:ad:d1:74:da:71:3a:b3:8c:75:
         9d:79:9c:10:c8:af:c8:fe:28:8e:51:8e:6c:3b:a9:f4:d3:58:
         26:51:85:f1:35:7c:83:78:61:ba:53:8e:1d:26:71:d7:7a:76:
         50:a0:9a:c9:b2:f4:6d:ea:ac:20:91:1f:36:09:2a:76:10:a5:
         38:69:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:04:10 2026 by rpki-client