Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e4a15b1d-f657-3cf9-b40e-237ab2df8d4f.roa
File:                     e4a15b1d-f657-3cf9-b40e-237ab2df8d4f.roa (raw, json)
Hash identifier:          jYsAUFXIZACg08b1W7TmQvx710LCLqPGUi3iX9J/44I=
Subject key identifier:   49:86:A4:76:5E:81:07:2E:39:8A:28:71:F5:EB:5B:40:B9:92:16:48
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655DAE0F591D646710527F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e4a15b1d-f657-3cf9-b40e-237ab2df8d4f.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     20261
IP address blocks:        98.101.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:ae:0f:59:1d:64:67:10:52:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=3e548a87-29c3-4c34-ad89-e271d072e80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:14:1d:7f:80:62:c7:6e:4a:41:7c:eb:af:
                    f6:d3:61:4e:81:c7:57:c4:fa:55:ee:bb:13:bc:12:
                    38:eb:f5:3c:69:49:2b:58:44:43:82:50:c6:8a:9b:
                    77:3c:a9:38:75:c4:fc:c8:f9:d6:cb:ba:39:74:c1:
                    23:3c:70:56:5e:7c:62:90:cd:42:40:32:ef:7d:70:
                    b2:aa:7a:6f:bf:28:0d:16:b8:b9:9a:75:94:27:49:
                    67:03:0c:69:07:a6:31:bc:ec:0b:4f:11:1f:c3:12:
                    b0:00:52:e7:6a:9f:5c:95:4f:c2:53:5f:40:0c:5e:
                    89:35:e9:1f:ff:e0:d7:75:ea:fc:ec:10:15:e3:85:
                    55:cd:37:0f:2f:63:3b:32:75:cd:72:90:e9:b4:7d:
                    fd:e9:3e:09:bf:bd:9f:af:94:0d:c2:5d:64:69:7e:
                    b6:4b:51:47:60:ef:23:7c:12:93:7e:9f:11:1d:7e:
                    ad:9a:48:bb:77:be:b1:3c:5c:04:17:53:db:e2:33:
                    f8:3d:6e:27:74:20:33:8c:f0:ad:22:b2:01:5c:0e:
                    c2:d1:48:e6:59:49:d0:81:17:d2:79:ce:64:be:d3:
                    f3:b4:73:c8:91:a9:39:eb:54:cb:03:d0:e6:9d:dc:
                    40:35:0b:df:69:71:32:22:7a:8b:8d:47:5c:4d:79:
                    e1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:86:A4:76:5E:81:07:2E:39:8A:28:71:F5:EB:5B:40:B9:92:16:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e4a15b1d-f657-3cf9-b40e-237ab2df8d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.101.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:63:35:12:fd:fb:10:26:16:f5:13:12:ae:3b:54:fe:61:07:
         7a:cd:87:bd:5e:25:72:25:19:fe:06:82:6f:e3:6f:8b:e7:e3:
         2c:8f:aa:e4:46:8d:70:7e:20:aa:5e:fb:d8:13:8e:15:a6:73:
         67:fc:04:6a:61:b0:3d:bd:d8:f6:23:0a:b7:ba:df:cc:ec:9e:
         53:c3:fe:16:c5:83:26:c2:b0:d0:4c:44:0d:03:f4:ad:91:9f:
         b8:06:00:1e:ef:40:2b:09:a7:a5:e5:db:76:7c:79:34:4b:6b:
         cc:95:83:ee:fd:c9:dc:8f:24:e7:5a:36:10:ab:6f:25:4d:70:
         16:06:ab:77:b7:98:c5:59:8e:41:c3:a5:d5:0e:b7:c9:64:db:
         54:3f:40:f1:86:ba:a3:37:a6:f4:b0:73:c3:1a:21:8e:16:3e:
         e2:a0:1b:3c:88:72:c2:2a:d5:7e:fd:5c:ef:cf:a3:84:56:fa:
         69:4c:5f:e4:0e:ce:5d:9e:fd:8d:8c:0c:27:25:55:35:fb:7c:
         ef:18:a3:44:f6:a5:53:68:07:24:fb:bc:56:9c:15:12:24:73:
         1f:f7:b7:87:85:09:8f:18:7f:dc:37:00:64:6e:7e:60:b8:8d:
         94:f1:70:ab:65:35:75:6c:24:59:30:b4:b6:50:58:eb:06:cb:
         ec:e6:fb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:29:00 2026 by rpki-client