Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa
File:                     aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa (raw, json)
Hash identifier:          f/Qrkem6WLHTlSHufyICsvC+oEUq/c/DieCa2N4fgiE=
Subject key identifier:   F0:B4:1A:21:21:F6:92:DF:84:21:1D:59:09:7B:FA:C9:AD:42:C7:32
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584AA1619C673C3AAE5303699CA0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     11426
IP address blocks:        98.101.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:9c:67:3c:3a:ae:53:03:69:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=186154f4-6d0d-4bfc-9b77-7f1665c05388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:78:f6:ab:3c:d6:5d:67:d2:d4:9b:bd:9c:
                    b5:44:78:7a:2b:d8:bc:44:c3:af:bf:ce:0f:ab:6f:
                    18:6e:67:4f:f0:aa:f6:88:82:e4:39:35:82:12:6f:
                    7d:9b:e8:cd:df:9c:28:46:9c:a9:37:49:0a:8b:02:
                    79:e8:77:ec:00:a8:2d:6b:53:c5:96:92:bf:af:09:
                    35:3f:8d:e6:e5:34:96:bf:e0:50:64:dc:41:c2:cd:
                    a3:c2:b2:cb:26:8d:dc:1f:13:a7:c9:f8:54:a7:31:
                    8a:12:4d:71:08:0e:46:33:c2:e8:d8:e4:ef:1d:2a:
                    f8:7e:70:1a:79:8d:83:60:0a:04:25:05:44:c3:55:
                    db:65:fb:1f:e3:e5:bc:d6:fe:76:a2:a4:fe:50:ce:
                    22:dc:f1:fb:4a:87:68:98:88:6d:2e:80:06:7b:72:
                    80:07:3f:1e:b8:d7:36:f7:75:45:7a:48:46:6b:8f:
                    11:88:88:f2:84:bf:a1:44:0a:c5:e2:c4:f7:47:88:
                    40:fc:fb:2d:ef:d9:9d:1f:db:5e:02:47:13:fd:57:
                    b8:98:4a:35:7f:50:bd:94:5b:c1:e3:3d:c1:c7:a7:
                    3d:7c:ab:37:d7:16:57:b6:0c:f7:70:30:f7:3f:60:
                    fc:89:aa:29:e1:8f:d5:4f:c9:7c:14:c6:3e:6a:50:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:1A:21:21:F6:92:DF:84:21:1D:59:09:7B:FA:C9:AD:42:C7:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/aff7bfe8-6d49-3d72-8f8d-fe23fa1d12a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.101.172.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:8e:72:43:ba:cf:cf:11:05:9b:26:01:19:78:1b:e5:0b:
         9b:95:9d:aa:53:6b:6f:87:ba:30:14:92:53:93:b8:0a:38:77:
         d3:0d:25:3a:a8:4d:13:37:58:9d:33:83:da:da:51:1d:db:53:
         e0:db:ae:1d:c2:e7:91:21:72:37:cd:18:53:9e:43:89:d2:df:
         01:82:43:61:30:0a:5d:4d:08:2a:45:94:35:02:e7:f7:af:d8:
         02:c6:28:4d:e9:b1:57:8c:24:29:04:9e:f6:63:8e:5c:80:eb:
         d2:65:f1:c3:48:97:fe:c3:c5:3b:82:26:6b:df:77:a9:9e:67:
         8d:0c:78:8c:98:0a:1b:62:3c:d8:c3:7f:85:fa:3a:27:2c:8b:
         66:c6:25:94:04:d0:fc:be:f4:bb:de:c7:2f:84:59:30:ae:47:
         b3:51:02:21:8b:eb:f0:c2:ee:67:05:af:6c:16:75:de:59:d0:
         06:4c:b4:ad:56:f0:20:ec:28:a4:e6:92:6c:4a:25:9d:9e:ad:
         00:23:18:bf:ef:96:12:2c:cb:55:24:f8:f3:50:d8:60:da:fb:
         38:d2:22:71:d6:91:6d:05:39:d5:ae:64:6f:0f:4e:06:b1:4d:
         bc:d6:f2:95:96:f7:6f:d6:a6:65:f3:57:de:90:0d:57:ec:d6:
         e4:8e:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:57:08 2025 by rpki-client