Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa
File:                     2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa (raw, json)
Hash identifier:          NpHCSBr9SK6FnYDmSFXHZcLIU5U7REmNzLxdiqQFIW4=
Subject key identifier:   9C:01:CD:EF:4E:CD:D4:4A:71:A1:9C:B1:B6:B1:3D:18:31:7F:34:DC
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E210F7D2A0C176263CAD1B780
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     10796
IP address blocks:        98.120.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:7d:2a:0c:17:62:63:ca:d1:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=5ab2b04c-4f71-4cf6-9ec5-edab387c12ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:20:af:38:27:ec:18:f4:63:00:a3:7d:c0:
                    86:d1:d7:2a:27:ba:d4:19:97:9e:a2:8c:db:92:ca:
                    b7:7c:a2:9e:da:af:62:e5:a5:fc:2e:af:6b:37:a8:
                    7f:65:77:1c:25:2d:cf:04:84:5f:26:a5:d1:31:71:
                    01:2d:32:b2:9f:e5:6c:fa:27:a4:f6:ee:b5:2e:42:
                    df:f3:03:e0:c4:60:81:4a:60:97:b0:c9:76:c7:77:
                    96:57:ae:04:c2:b1:27:23:6f:16:da:80:a3:90:6c:
                    d7:a7:15:db:eb:88:33:76:54:5c:38:e9:6c:80:43:
                    f3:aa:ac:fb:a9:6d:3f:58:76:7f:ed:02:70:0d:1d:
                    1f:82:ec:e1:3f:7e:e7:f4:6d:20:27:81:63:e5:3a:
                    80:86:80:f5:9c:52:91:39:e0:16:c2:7b:21:73:18:
                    51:8d:45:5b:6e:62:17:2d:2f:9d:43:32:84:bd:9d:
                    ed:9d:20:db:e5:b4:2b:9a:5c:d7:51:a8:0c:72:85:
                    23:39:d1:02:e8:37:90:79:57:b5:7e:d4:d0:c7:44:
                    9d:2f:82:9a:53:6a:0e:cf:2e:8d:46:c7:6b:9e:b9:
                    17:eb:ea:7e:4c:b5:b2:7d:cd:a5:3f:80:d8:68:ef:
                    07:d5:d4:c8:3e:04:e9:10:85:25:0d:31:19:ee:8d:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:CD:EF:4E:CD:D4:4A:71:A1:9C:B1:B6:B1:3D:18:31:7F:34:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/2528e009-2f80-3eba-a987-ae15dd9f9a2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.120.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:45:2e:86:8e:6b:2f:85:e0:f2:44:c3:29:f6:01:5c:c2:7d:
         04:12:e9:50:65:05:45:f0:38:0f:b4:17:65:32:0b:96:38:25:
         a0:8b:a4:23:e8:4d:69:aa:87:d4:d7:c4:7a:25:a7:93:3d:0d:
         da:09:b5:8a:9e:bc:64:5f:46:46:6c:3d:6d:2c:d6:ec:cc:1c:
         53:ce:22:6d:0a:9b:11:44:d3:72:03:43:c5:00:33:d4:75:48:
         7c:4b:46:2d:a5:8a:df:a2:a3:f1:10:c7:a9:31:da:c8:a7:b6:
         5e:08:f8:7d:f4:f5:c8:f5:30:32:08:f8:2b:16:a9:dd:2e:4d:
         a2:ac:39:19:8d:9a:b7:ac:73:bd:6f:dc:ae:a1:3e:0b:f7:95:
         2e:95:5e:53:8a:44:a9:91:ef:de:82:0a:9a:c5:bf:ac:e6:68:
         e1:d1:19:b8:be:96:74:96:fd:fd:c6:71:fa:6f:87:21:3d:d3:
         65:44:69:65:e3:d3:98:48:cd:4e:fb:21:5b:17:7e:27:98:d5:
         2f:61:74:02:51:d4:46:54:ab:6f:c4:e0:e1:39:c8:ec:fa:0f:
         c3:1c:2f:53:3a:7a:c7:a5:20:61:9d:35:c1:6a:d4:b1:6e:22:
         c9:a4:5a:b5:1f:7b:1e:f1:41:27:20:90:e9:8d:70:1e:d5:cd:
         0d:91:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:11 2026 by rpki-client