Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2cb30fd-1d3a-3665-9564-9d690527e8a3.roa
File:                     b2cb30fd-1d3a-3665-9564-9d690527e8a3.roa (raw, json)
Hash identifier:          nCrDk1G7YCD9orM/YbkCbb8wg6KQpPhIKZQCAT/ziP0=
Subject key identifier:   57:79:05:CA:07:85:26:23:D2:89:CD:B4:55:11:A9:AA:63:4F:5B:0D
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DA058B6168C05559FE680
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2cb30fd-1d3a-3665-9564-9d690527e8a3.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     11427
IP address blocks:        98.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:a0:58:b6:16:8c:05:55:9f:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=c41abf4b-500c-4b5e-b60b-67f6405af2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8a:80:90:a2:29:aa:24:31:d7:c4:49:87:c3:
                    b9:84:b9:49:9c:d7:8c:ad:29:9b:9f:d0:e5:6d:6c:
                    15:55:d2:77:b9:4f:47:22:f5:1f:89:12:65:30:86:
                    43:b3:e4:3c:1a:81:7c:77:3b:74:ac:ff:64:28:c9:
                    d2:f1:c0:6d:c8:b8:80:fd:d7:75:1e:cd:6c:f1:21:
                    b2:5b:84:2d:ad:3e:b6:e0:9f:91:03:0a:56:33:77:
                    89:94:10:50:68:18:04:7a:dc:ef:4d:a8:9a:2e:cc:
                    31:b5:5b:d7:78:e5:73:22:23:ce:f6:5b:db:b8:db:
                    a4:e8:ae:d5:6f:94:70:58:5a:9a:02:77:58:cb:4e:
                    3f:20:6f:e0:fa:4c:19:1d:20:50:df:10:a7:f8:cd:
                    72:ae:ee:c0:60:d7:b0:16:d1:d9:d3:06:95:48:bd:
                    b2:81:d6:50:af:51:ab:df:e2:a3:52:81:5e:7f:03:
                    8b:b7:d3:4c:8b:3f:71:7e:60:61:a9:7d:c6:e9:a6:
                    ea:4f:e0:c2:45:60:52:88:60:d3:7f:43:44:12:bf:
                    3f:23:56:0b:32:23:53:c7:ac:aa:db:02:de:b8:12:
                    84:92:5f:a9:5e:d3:42:a8:8d:0f:7a:6b:18:17:bc:
                    18:e1:48:ab:61:db:b6:8c:1c:be:0c:66:c4:f3:fe:
                    8d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:79:05:CA:07:85:26:23:D2:89:CD:B4:55:11:A9:AA:63:4F:5B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/b2cb30fd-1d3a-3665-9564-9d690527e8a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.156.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7d:08:c5:cf:84:b0:6f:68:30:2b:a8:61:2c:61:0a:be:72:
         aa:c2:88:bc:92:85:04:1c:02:30:39:1b:47:3a:94:d8:5d:1b:
         c2:4c:32:45:58:ef:a5:8f:5b:d4:ce:65:ea:13:73:47:62:02:
         ae:65:a8:71:0f:3f:d1:2e:f4:5c:df:d7:06:09:8d:cc:b7:ac:
         8a:cb:3e:41:11:af:02:6a:d1:14:fb:74:77:b8:95:d5:20:53:
         14:0e:da:fb:ab:38:bd:45:14:08:96:f9:35:d8:eb:8e:38:fc:
         a4:56:61:ef:36:96:8d:07:6f:ae:be:84:8a:2f:8c:e4:5e:00:
         9b:65:7d:fd:3a:a4:3d:ff:31:a9:9f:98:7e:c2:5d:d3:f9:09:
         74:f8:3d:30:4d:d3:2b:8b:71:d8:31:40:02:db:82:bf:a0:b6:
         87:98:a7:5e:44:fd:91:3a:ae:73:7f:d4:74:a8:e0:fa:57:5d:
         1a:3b:c3:87:fa:bc:46:57:ae:5a:ea:31:c7:b3:a8:f4:d3:06:
         93:ce:23:b6:a9:8b:1a:00:dc:20:a6:9d:70:cd:9a:ef:21:95:
         42:74:68:ed:e8:67:3d:09:6d:c9:02:b0:19:25:01:7f:1a:19:
         0b:a7:24:10:13:26:bf:48:70:0e:54:e0:85:4b:ee:34:18:cf:
         65:de:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:38:45 2026 by rpki-client