Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee8513cd-9d09-3e57-a96f-ddd71f8def79.roa
File:                     ee8513cd-9d09-3e57-a96f-ddd71f8def79.roa (raw, json)
Hash identifier:          p0t5bV3Uw/2SQeiXsC37YnkmDgrdIiyZA3jqCpSuwtE=
Subject key identifier:   7A:C6:ED:37:11:DF:E3:76:C5:59:62:86:82:D8:AA:F2:A1:CF:F7:F6
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584E9D4AB91AB29C252E91259F00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee8513cd-9d09-3e57-a96f-ddd71f8def79.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     20001
IP address blocks:        98.152.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:b9:1a:b2:9c:25:2e:91:25:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=f73de14a-f8fd-44f4-bafb-1258c1668b45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:53:9b:8f:39:a9:16:15:bd:4e:81:b8:29:
                    10:08:a2:b1:c1:7e:d9:d8:9f:4a:cb:e4:fa:8e:af:
                    1f:08:04:86:92:f8:81:91:3b:c2:34:92:4d:12:54:
                    26:21:f0:1e:78:18:a4:6c:3d:40:2e:8f:0b:a0:98:
                    ed:77:e6:5e:8f:86:bc:a8:79:76:6f:e0:e5:61:b2:
                    0e:62:2a:b8:f2:3a:c5:82:e3:ff:f9:9c:aa:b4:99:
                    05:73:79:f6:d9:c3:00:a2:73:09:19:ee:2a:12:b4:
                    56:f5:2e:00:24:e6:59:79:d6:15:bf:b3:2b:30:e8:
                    0e:d8:c6:72:da:88:90:13:75:ea:bc:4b:ec:30:a4:
                    74:97:fc:fb:f7:3c:ac:2f:5f:e5:55:5b:62:36:64:
                    c4:75:71:d3:a4:22:82:6b:35:82:37:50:37:7b:a0:
                    ac:60:e7:2c:c6:68:df:c0:ed:21:74:3f:66:e0:70:
                    22:c8:b5:18:d0:df:45:dd:5b:67:a7:a2:cd:a9:e3:
                    dd:5c:bf:b0:5d:94:7b:43:87:f7:ec:d0:16:34:51:
                    16:2a:d2:b1:d5:18:c2:ef:d8:cf:12:46:d7:2f:f3:
                    7d:1d:f6:61:80:f9:2d:c6:0b:f2:d0:b6:2e:e5:86:
                    cc:4b:15:1b:10:70:70:0a:17:ce:e5:d3:4a:94:c2:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C6:ED:37:11:DF:E3:76:C5:59:62:86:82:D8:AA:F2:A1:CF:F7:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/ee8513cd-9d09-3e57-a96f-ddd71f8def79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.152.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:49:80:1f:7b:01:c9:0f:63:e4:ee:82:0f:c6:ca:cd:8c:
         c7:eb:df:fb:06:60:34:19:eb:4d:c0:3e:b0:2f:a6:57:70:81:
         59:f7:b4:70:a1:eb:d2:ef:3c:3a:1e:6a:9f:27:18:ab:92:f7:
         1d:48:fb:84:01:fe:af:f8:0f:b2:ed:7a:83:ef:3a:20:08:f9:
         42:22:9a:d6:59:b6:82:27:7f:56:2d:de:6a:1c:13:c2:7f:bc:
         e9:8a:ce:21:7a:4a:18:d5:3a:14:45:41:a0:75:f7:31:8a:e0:
         0a:f1:dd:02:7f:33:25:d1:66:d8:bb:48:81:b2:d4:9c:e9:e7:
         f8:25:11:0d:ea:94:1f:67:eb:42:76:c3:a4:3e:08:fc:85:8c:
         df:63:c1:19:02:bf:a2:96:46:73:96:60:d7:e3:92:46:84:ac:
         64:f9:39:e4:e0:72:d1:73:b9:9f:09:47:84:55:fb:df:82:a1:
         d9:f8:2b:2a:b6:71:2a:94:33:52:ca:0e:db:c0:5a:9a:6d:b9:
         36:84:df:bd:eb:6c:5a:56:06:6b:68:ba:64:0f:a1:ad:21:c9:
         b7:2f:75:85:64:25:d4:22:1d:97:15:9f:9b:6c:06:d0:02:5d:
         0f:77:0e:e7:d6:d4:70:eb:80:3a:32:b5:e7:62:19:88:f9:14:
         61:1e:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:15 2026 by rpki-client