Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa
File:                     5d0191c6-c612-38ba-91e0-b427b794a35b.roa (raw, json)
Hash identifier:          fN7Am39m9HeODjX2bU+aIwX+dhky/9nL9/HFT24V3wM=
Subject key identifier:   11:AB:9B:56:12:AF:72:1C:97:E1:C0:64:C7:03:13:FB:AE:08:69:43
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC372548C253DF765FB2F0A00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     11351
IP address blocks:        98.1.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:54:8c:25:3d:f7:65:fb:2f:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=5973be2a-1ad9-4fb5-ad68-3c26221f6071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:67:fd:6f:86:72:14:aa:8d:4a:ac:d8:5f:
                    28:8f:82:7a:ab:d4:0e:69:70:b7:42:cf:d4:8d:4b:
                    05:e5:d8:d5:de:7f:22:f1:15:e4:d2:f5:cf:2f:b9:
                    c2:b1:ff:22:89:fb:6d:03:09:14:df:0c:f6:01:6f:
                    c3:78:1b:20:1f:c9:45:08:e4:4f:1a:39:00:a5:5a:
                    98:19:b0:39:46:61:1f:77:e3:e7:f3:41:3b:63:fb:
                    ae:49:31:53:99:a7:c6:04:cb:a3:5f:56:be:e3:b4:
                    65:82:77:c5:5a:5e:ce:e7:20:cf:41:8e:1d:22:38:
                    d4:4a:9d:57:93:dd:47:c4:92:15:43:70:3f:ee:0e:
                    cc:48:17:1e:1c:c1:13:90:3b:cf:d9:b8:48:6e:6c:
                    60:60:3e:bd:5c:b8:ff:99:03:3c:c7:85:75:e3:f8:
                    25:b3:a7:aa:0c:6c:87:59:f9:10:55:9f:60:25:a8:
                    9d:c7:2d:b3:de:34:0a:00:b7:fa:9b:cf:36:b9:76:
                    9b:46:ca:37:a2:63:85:81:fd:f9:92:1f:22:3b:95:
                    11:e9:83:41:04:59:c4:ac:7c:ca:47:e3:0b:14:17:
                    f1:71:5a:ef:f6:7e:30:d8:60:63:99:2b:d6:3b:63:
                    97:5a:87:d7:6f:27:e9:cc:6a:db:1a:50:3e:57:a0:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AB:9B:56:12:AF:72:1C:97:E1:C0:64:C7:03:13:FB:AE:08:69:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5d0191c6-c612-38ba-91e0-b427b794a35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.1.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:cf:49:a9:88:55:8f:3a:5b:bc:f9:9c:1f:fc:54:e2:df:
         9e:4c:fa:fe:3f:eb:18:03:de:e9:7e:cf:e3:9c:40:5c:33:48:
         93:97:bc:d4:bd:3f:c0:74:28:4d:17:73:2f:79:eb:e5:77:8c:
         d9:d5:27:2a:5b:84:bf:5f:b4:62:95:88:25:65:62:87:d3:96:
         e4:08:52:83:4c:d6:a7:23:ad:66:7f:f1:61:7a:5c:cf:16:bf:
         0d:ad:86:4f:0d:c1:07:68:63:f7:1b:90:e7:66:09:f3:5b:75:
         59:f6:bd:e5:8c:25:13:40:60:6b:87:f4:54:5c:e9:c3:0c:c7:
         0e:27:e9:a1:47:15:2a:80:c5:bd:e9:07:96:76:b8:20:2b:c4:
         99:e0:a3:0e:db:b1:85:57:55:78:00:cf:47:dd:30:51:45:0a:
         62:fe:e9:38:c7:5a:03:f8:c3:dc:76:a7:ba:a2:af:5d:46:ea:
         eb:3c:8d:c3:d9:3e:fd:5b:59:ca:af:2e:e8:79:31:1f:ef:fb:
         ad:bd:b2:12:34:5b:cb:f9:f6:b2:0e:40:1d:91:ae:e9:18:8d:
         7f:f0:49:6c:2f:e2:30:33:ea:03:00:c4:02:cd:b5:0a:ab:67:
         64:a5:f8:9b:9f:76:74:1d:02:b6:ab:36:fa:34:aa:8e:87:fb:
         72:a8:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:56:54 2026 by rpki-client