Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89efee60-2618-30d9-8c79-4743877b5fda.roa
File:                     89efee60-2618-30d9-8c79-4743877b5fda.roa (raw, json)
Hash identifier:          FgOTr3dQRQNlbqABRTtAWksJGWR14CCvPDjcRa4th5k=
Subject key identifier:   1F:B7:FF:7F:44:6B:7A:75:E0:5F:68:DB:2B:D2:B2:17:B5:A9:FB:25
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E210F93062208792D78B34100
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89efee60-2618-30d9-8c79-4743877b5fda.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     19115
IP address blocks:        98.8.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0f:93:06:22:08:79:2d:78:b3:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=0b20824d-54e8-43df-9854-ff02364fdd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:df:a6:e4:6a:34:c3:92:62:f7:02:d1:cf:
                    1f:46:25:f3:fe:d0:49:46:ff:3a:cf:6a:98:19:ec:
                    e9:cd:06:f3:a0:aa:e8:d7:ef:1a:58:50:f5:f3:a7:
                    53:26:71:7a:85:9a:b1:c5:f0:d3:9d:4a:e2:7c:35:
                    2c:f1:fa:3c:21:54:0c:d2:10:46:8c:55:09:2d:4a:
                    33:cf:01:5e:d8:8a:21:69:a1:09:41:1d:4b:d6:aa:
                    37:be:26:40:75:ba:f7:a0:ef:23:2f:bc:e4:ae:e9:
                    9b:f2:7e:14:02:1f:0e:e2:74:73:b0:fb:aa:06:dc:
                    50:88:14:54:d3:a8:ba:6a:32:9b:b3:23:db:a8:9e:
                    e5:b2:3b:f4:e8:1c:91:29:40:a8:51:8e:46:5a:a3:
                    1f:16:bb:28:5f:11:32:25:9d:51:0f:2a:0a:eb:3f:
                    16:9f:6f:10:b5:5e:4f:08:b5:d2:2c:50:ab:94:62:
                    1a:49:f7:71:8c:01:b2:01:83:01:82:af:96:82:24:
                    00:2c:a7:78:a2:1b:c5:ea:4a:59:7a:92:8e:07:27:
                    b6:3f:ca:87:ce:b1:97:e3:3c:e5:44:dd:d1:7e:21:
                    25:a7:81:70:85:06:5f:7a:74:1a:a9:5e:73:46:b1:
                    c0:6b:62:54:a0:a7:d4:76:03:45:c4:a7:c0:f9:75:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B7:FF:7F:44:6B:7A:75:E0:5F:68:DB:2B:D2:B2:17:B5:A9:FB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/89efee60-2618-30d9-8c79-4743877b5fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.8.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:72:92:db:87:92:61:9b:f0:2a:82:af:e1:04:2a:75:62:89:
         92:b4:c1:de:80:04:6a:11:24:b4:af:69:a5:2e:54:6f:37:b9:
         c0:4b:1a:2a:69:52:fb:39:da:1b:a5:e1:b7:d6:77:db:6d:dc:
         aa:22:42:ab:88:69:69:4d:e5:79:79:8e:02:81:b3:58:26:16:
         54:e3:fb:c3:d3:c3:27:1e:08:28:4f:6f:55:0a:6c:a8:3c:89:
         df:94:fd:e5:6d:1c:83:61:f3:0e:b4:92:8f:81:9d:04:bd:68:
         9b:e3:8e:89:84:12:95:8e:24:d2:8c:8c:33:0d:ae:07:07:8b:
         dc:18:f3:7e:fe:e4:c3:4e:9e:a0:fe:4c:c4:4b:f5:01:e8:1a:
         fc:f4:00:9a:02:4c:00:99:1b:fe:a6:14:50:17:5b:c8:d4:7c:
         fe:07:61:90:83:35:84:2c:4d:6a:7b:b2:28:a6:dc:11:b1:36:
         c4:2e:26:54:cb:33:11:88:c1:c5:60:54:57:ac:1d:ef:8a:8f:
         0b:56:51:7f:70:a9:2a:ee:88:72:dc:e7:3c:44:38:69:fe:d8:
         99:0c:18:a5:03:66:5a:0e:af:56:6d:11:be:86:0e:03:f8:b6:
         94:33:96:6a:21:ea:7f:da:d8:37:f2:4d:ab:41:a8:c5:bf:10:
         12:0e:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:52:00 2026 by rpki-client