Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436cfa68-a37a-3e72-9707-6870def3fffc.roa
File:                     436cfa68-a37a-3e72-9707-6870def3fffc.roa (raw, json)
Hash identifier:          V221W7nefC6ghMlXc+zXPi2RuTmKG6aOhemHHSYctrI=
Subject key identifier:   0C:FE:07:8D:8B:D4:22:6C:40:3D:B6:62:56:B2:38:33:66:18:69:15
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D8A4004A9A3F328E27F5156C0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436cfa68-a37a-3e72-9707-6870def3fffc.roa
Signing time:             Fri 17 Apr 2026 20:32:07 +0000
ROA not before:           Fri 17 Apr 2026 20:32:07 +0000
ROA not after:            Thu 16 Jul 2026 20:32:07 +0000
asID:                     0
IP address blocks:        98.157.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:40:04:a9:a3:f3:28:e2:7f:51:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr 17 20:32:07 2026 GMT
            Not After : Jul 16 20:32:07 2026 GMT
        Subject: CN=9694a90f-b23d-48ac-ba26-cc3aabe96255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:1c:80:81:bc:14:83:8c:20:14:fb:e8:a4:
                    6b:a6:d7:ff:37:f2:3a:8e:04:bb:4b:3f:e3:86:cf:
                    31:ff:3f:b2:fb:2a:45:68:22:cf:59:97:51:fc:07:
                    04:8a:96:f0:ed:1f:c3:4d:a3:1a:a3:51:95:88:9b:
                    e2:53:bb:2c:c0:d8:16:91:8c:85:67:e9:db:4e:49:
                    b0:a0:72:ad:38:4f:2b:d9:57:cf:e4:16:2a:6a:37:
                    95:51:3c:3f:63:39:4a:bd:3b:fb:c8:c7:62:77:e0:
                    38:84:ab:30:b4:c1:02:06:65:0f:9a:45:9d:95:b8:
                    8b:d7:15:8b:b8:bc:de:e7:99:3e:18:c3:82:ae:f5:
                    3f:66:a9:6e:52:58:14:da:fb:f1:de:50:a0:7f:2a:
                    d9:97:d9:24:ed:f1:7f:9b:73:5f:43:f4:23:fd:94:
                    e8:50:07:cf:b1:90:cf:a8:b7:03:55:b7:70:a6:61:
                    84:ee:eb:fe:ed:c8:31:bd:b3:62:27:a7:72:60:1e:
                    04:c9:3a:43:19:2a:5d:89:54:57:0e:d9:48:a8:df:
                    d9:56:69:15:7a:b0:58:93:09:bc:99:3b:5a:c4:85:
                    74:4b:8f:63:45:4e:cf:70:f0:fd:d2:1d:ca:ac:64:
                    b7:a8:fc:a9:01:00:81:c9:e7:39:3d:b0:8d:f6:d3:
                    8c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FE:07:8D:8B:D4:22:6C:40:3D:B6:62:56:B2:38:33:66:18:69:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/436cfa68-a37a-3e72-9707-6870def3fffc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.157.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:41:da:00:68:6f:86:12:23:db:22:df:a1:d6:b9:a8:6e:
         65:ea:29:72:75:82:16:bf:8a:bb:47:35:e4:24:ee:03:b2:5b:
         59:c8:a7:bf:e0:bd:0f:3c:80:32:3a:50:2e:e9:36:7b:7c:2c:
         0e:5b:d2:3f:87:27:51:31:7e:60:f3:13:d3:d6:15:1e:87:d2:
         63:e8:ed:58:47:bc:ec:40:04:64:22:39:b7:e8:29:f7:c3:e5:
         27:0b:9d:31:c1:21:25:94:e4:ab:b4:63:8a:47:c6:a8:77:b2:
         73:b6:c3:a1:90:ae:1e:ae:25:1f:37:94:bd:ec:c1:98:c1:ff:
         a1:ad:db:31:7b:52:02:49:b7:7f:24:01:05:3e:70:13:85:d3:
         8b:26:cc:c3:d4:ab:a6:0c:64:aa:21:b2:51:a9:b9:44:03:d4:
         82:e2:4c:59:34:65:ce:33:42:52:b8:2c:4c:89:20:da:3d:05:
         e0:72:24:91:e1:9c:3f:24:d9:c4:41:d3:45:f0:b9:85:ab:d6:
         63:8a:fd:b3:86:ab:d3:c5:af:44:9c:0c:72:c3:8e:a4:9e:f5:
         27:21:21:03:c7:58:06:8b:5f:43:a7:52:8d:46:05:4a:9f:a9:
         a9:d5:17:e9:87:c0:2c:4c:2a:b7:84:30:ea:32:e4:ad:04:fc:
         48:46:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 14:15:08 2026 by rpki-client