Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa
File:                     4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa (raw, json)
Hash identifier:          scwO0Di6T6awrLhMf+ZMALw3PYu2A7DWTEQ57TWwLz8=
Subject key identifier:   24:7A:A6:4C:58:F2:39:3A:50:49:81:30:02:DC:F9:A9:65:BF:7C:3C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC371D3E06F5C4B8977E3B140
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10796
IP address blocks:        98.123.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:d3:e0:6f:5c:4b:89:77:e3:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=2dc49e1d-34df-4f35-91a6-4b545c4363f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:de:0c:26:a2:68:a3:d1:3c:05:6f:b7:ab:
                    24:f1:65:f3:5b:11:ef:ee:2e:8e:16:5f:13:f3:94:
                    25:48:05:13:71:ea:86:86:0f:0c:64:5b:ad:ba:ce:
                    47:7d:77:f7:8c:c0:57:6b:d8:1b:d4:8b:64:bb:e4:
                    17:c2:00:81:63:52:4f:ce:31:fb:48:49:3b:50:77:
                    83:7c:b3:b5:71:6b:14:3d:25:76:9c:7b:36:6e:1d:
                    a3:cd:b6:1c:d7:5c:f6:96:63:b1:d1:80:72:4c:11:
                    9f:c8:81:98:dc:9c:ae:43:d9:58:43:ae:c9:96:a9:
                    12:3e:75:44:81:38:df:b2:79:03:4d:40:7a:3a:7c:
                    c8:42:40:5a:18:35:53:7d:7f:4d:f2:bd:b4:82:ab:
                    72:fc:74:d7:fb:7e:51:96:db:10:34:37:60:1f:02:
                    80:64:ed:02:99:68:0c:da:87:e5:83:dd:79:e2:99:
                    85:b0:53:37:e4:42:6e:53:c1:ee:b1:b0:a9:90:08:
                    25:8e:66:1c:58:e5:31:9e:ee:ce:8b:16:46:89:c8:
                    86:7a:f6:f6:26:fd:d7:d8:51:ea:0e:1d:e1:2f:29:
                    04:40:97:a9:5f:e5:33:1d:5b:98:3a:af:0e:cc:22:
                    09:c6:80:7f:6d:c7:30:5c:c0:26:38:3f:ff:a7:b9:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7A:A6:4C:58:F2:39:3A:50:49:81:30:02:DC:F9:A9:65:BF:7C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4ab2bb2f-91a7-3c6b-a0fc-5f5be2c6ccc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.123.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7a:2a:96:15:97:65:00:dd:b9:87:30:14:98:36:38:cf:c7:
         56:9f:ec:2f:d3:32:83:24:64:c5:45:44:6c:33:f9:f7:55:eb:
         0a:95:30:03:54:e5:60:d1:7b:43:b1:fa:c0:cd:d7:12:a2:ac:
         02:c4:f0:14:40:ce:2d:f8:28:5e:8e:f1:07:47:82:23:c7:4e:
         9d:bb:fb:5e:60:6a:6a:a7:2f:5c:a4:dc:f6:19:d7:3c:ee:89:
         21:10:14:b8:e8:eb:51:4e:28:dd:87:d7:2e:a2:c4:15:ea:16:
         88:bc:49:bc:9d:e7:35:c3:93:ff:7e:53:62:ba:64:80:55:b0:
         60:8c:af:b2:d8:4a:db:d5:4b:16:4c:14:ba:5c:b8:a6:ae:8d:
         25:38:df:65:b1:ab:59:8b:79:f9:59:e7:35:18:df:07:ec:25:
         29:58:b8:d2:13:e2:37:98:8d:81:6b:27:c2:87:d8:5d:95:41:
         ca:a7:55:ca:b5:0e:4f:21:49:06:55:fb:f5:ff:c6:2b:5f:d5:
         20:ff:87:bd:2c:b9:bd:69:27:71:6a:20:a2:d5:68:b1:cd:2f:
         be:cf:b0:82:0e:88:ce:71:e2:d6:93:2a:f9:c5:e7:71:5f:27:
         e4:0b:83:70:e7:71:56:02:3c:23:b5:df:c9:8f:48:93:7b:cf:
         bc:8f:30:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcdPgb1xLiXfjsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
MmRjNDllMWQtMzRkZi00ZjM1LTkxYTYtNGI1NDVjNDM2M2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjjeDCaiaKPRPAVvt6sk8WXzWxHv7i6OFl8T
85QlSAUTceqGhg8MZFutus5HfXf3jMBXa9gb1Itku+QXwgCBY1JPzjH7SEk7UHeD
fLO1cWsUPSV2nHs2bh2jzbYc11z2lmOx0YByTBGfyIGY3JyuQ9lYQ67JlqkSPnVE
gTjfsnkDTUB6OnzIQkBaGDVTfX9N8r20gqty/HTX+35RltsQNDdgHwKAZO0CmWgM
2oflg9154pmFsFM35EJuU8HusbCpkAgljmYcWOUxnu7OixZGiciGevb2Jv3X2FHq
Dh3hLykEQJepX+UzHVuYOq8OzCIJxoB/bccwXMAmOD//p7nHiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCR6pkxY8jk6UEmBMALc+allv3w8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNGFiMmJiMmYtOTFhNy0z
YzZiLWEwZmMtNWY1YmUyYzZjY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYnuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE56KpYVl2UA3bmHMBSYNjjPx1af7C/TMoMkZMVFRGwz+fdV6wqVMANU
5WDRe0Ox+sDN1xKirALE8BRAzi34KF6O8QdHgiPHTp27+15gamqnL1yk3PYZ1zzu
iSEQFLjo61FOKN2H1y6ixBXqFoi8Sbyd5zXDk/9+U2K6ZIBVsGCMr7LYStvVSxZM
FLpcuKaujSU432Wxq1mLeflZ5zUY3wfsJSlYuNIT4jeYjYFrJ8KH2F2VQcqnVcq1
Dk8hSQZV+/X/xitf1SD/h70sub1pJ3FqIKLVaLHNL77PsIIOiM5x4taTKvnF53Ff
J+QLg3DncVYCPCO138mPSJN7z7yPMP0=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:42:48 2026 by rpki-client