Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d419930-6ca4-3542-8edb-667d4075b817.roa
File:                     3d419930-6ca4-3542-8edb-667d4075b817.roa (raw, json)
Hash identifier:          evzj9v9AiWk5d0ulQCFW3ih2RX21+9DZkcDfgIWODCo=
Subject key identifier:   88:AA:F1:59:9A:08:17:7A:0A:B4:ED:5E:57:70:AE:D3:FB:B3:9B:00
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DA8639A26E92B3E2C4B80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d419930-6ca4-3542-8edb-667d4075b817.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20001
IP address blocks:        98.151.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:a8:63:9a:26:e9:2b:3e:2c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=33c15b0a-f272-43f3-aac1-2ba93f501205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8b:ed:b9:bc:fb:2a:e7:48:a6:34:de:a7:87:
                    c7:38:53:ea:1b:69:13:08:70:cc:10:69:8e:24:ac:
                    28:ae:b9:44:56:ee:c8:f7:d5:ea:b7:07:d5:36:7c:
                    2e:9e:be:bc:ba:a5:80:04:bd:a4:4a:ff:95:1d:e0:
                    62:16:09:a9:dc:b6:41:71:0a:02:4d:f5:26:51:d1:
                    09:c5:84:fe:f7:05:13:17:44:df:7a:f5:e1:31:91:
                    67:09:9f:f9:fa:7b:93:92:c4:e5:76:96:4d:7a:b8:
                    1e:82:f9:32:5c:4d:df:a8:e4:c2:a9:0f:68:6d:2f:
                    4b:9d:0c:97:19:11:cc:40:df:59:23:bf:66:74:70:
                    1c:d5:e2:90:6d:c7:f9:49:fe:18:37:7c:2d:f0:b5:
                    ff:89:14:91:a5:fe:ee:48:df:e4:15:f0:f3:a2:ee:
                    70:42:da:a2:b7:fa:a6:9c:ed:5e:5d:8a:3c:11:0b:
                    7d:86:ca:4a:f2:74:80:c9:e5:af:9c:ad:24:09:d3:
                    47:c6:3f:50:a4:16:83:45:74:bc:42:fb:a0:73:53:
                    31:9d:ff:8b:6a:bc:93:73:93:cd:65:f3:50:54:a7:
                    6e:7b:ac:2a:2b:fb:fb:07:57:98:1a:23:44:e0:a3:
                    7d:af:9a:49:55:2a:36:4a:51:6d:66:7d:e5:23:c1:
                    86:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:AA:F1:59:9A:08:17:7A:0A:B4:ED:5E:57:70:AE:D3:FB:B3:9B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3d419930-6ca4-3542-8edb-667d4075b817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.151.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:42:15:62:c2:d0:ab:a1:84:d1:6b:c7:c5:e7:68:1d:70:a0:
         b9:ee:e2:ad:ae:28:97:c4:7b:bf:4d:e8:e1:66:13:f9:85:71:
         fb:eb:8a:cb:42:fc:68:bf:4b:9d:55:57:28:6f:62:70:d4:cc:
         48:ca:5b:30:37:cb:a6:80:aa:b1:b0:55:4e:4c:91:9c:84:00:
         5c:74:cf:15:47:95:e4:c9:df:b6:c5:d8:a4:27:23:56:3e:6d:
         6d:29:3e:85:57:74:ae:ee:5e:f9:e8:a5:34:a3:39:f3:7c:25:
         e7:32:5e:67:61:e3:dc:7a:96:40:71:cb:05:a6:d1:6d:bb:2d:
         fc:3f:a7:72:68:74:1c:7a:8b:cf:6c:fa:24:12:2a:7f:59:b9:
         42:f4:4e:0c:a7:4a:3b:43:70:bd:c1:3c:10:92:3b:e0:8a:87:
         5b:f4:fd:f3:bd:0a:0c:8c:43:6e:fc:86:3e:d3:99:9d:18:7c:
         61:1d:3d:ba:ff:01:3e:d8:6b:0a:e7:82:28:9f:13:9f:07:3e:
         d9:6f:60:40:35:98:e0:cc:b3:95:f3:b7:00:c1:09:6e:6d:77:
         6b:19:17:6c:cd:ba:c9:c3:22:fa:10:33:c9:56:d9:67:f7:25:
         4c:db:92:56:38:7a:ed:d9:96:2f:d9:d0:d8:d5:a5:0e:9a:68:
         51:ee:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:04:44 2026 by rpki-client