Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f42216e8-83be-390e-947c-fb509b0bc090.roa
File:                     f42216e8-83be-390e-947c-fb509b0bc090.roa (raw, json)
Hash identifier:          SzmwRcLd4L6ADSk5lcbLhKuklM1hoOdOptM+CINRWEU=
Subject key identifier:   3D:51:79:B6:D1:97:EA:ED:77:4F:22:2D:DA:8E:FC:B7:6B:8E:64:45
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584CD4076355E2B96ED6AE7A9180
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f42216e8-83be-390e-947c-fb509b0bc090.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     16787
IP address blocks:        107.14.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:63:55:e2:b9:6e:d6:ae:7a:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=24abb90c-cf71-4af2-8262-3ba411657127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2b:24:f7:60:95:2e:44:55:81:9a:e0:42:29:
                    df:3e:3d:b6:4f:ec:bf:e5:9c:31:24:00:68:13:23:
                    b6:6c:b8:70:5b:2b:fa:7d:2b:11:21:2f:c7:2c:ce:
                    94:31:87:d2:cd:e9:83:17:c0:1c:99:c9:50:ce:32:
                    01:97:a4:b5:a6:70:77:e9:bc:e0:80:f1:06:4d:e6:
                    79:d8:d1:09:81:8e:3b:64:10:90:a5:61:6d:cb:07:
                    45:31:23:75:c1:ba:91:d9:87:40:d3:1a:1e:c6:40:
                    8f:e1:b6:d9:a2:7a:9f:10:51:19:0f:1d:50:9f:e8:
                    63:43:77:59:78:73:0f:83:d4:5e:80:ec:c9:eb:39:
                    cc:6e:a7:fd:79:0d:af:75:61:f0:fa:c2:9b:97:f5:
                    9a:79:9c:9e:e5:d5:2b:fa:7b:b1:48:d3:1f:fe:71:
                    4a:47:e5:bd:03:f6:49:99:25:b8:4d:d4:87:07:7e:
                    a3:dd:c3:25:56:69:a2:d8:e6:b5:81:08:88:35:a3:
                    95:c7:2f:af:d8:48:1e:69:a8:0b:ed:57:e5:ce:0d:
                    16:77:6d:48:40:12:fe:73:22:74:ea:2b:a4:98:9a:
                    be:ce:54:c1:7c:cf:3f:79:77:6b:65:5c:da:04:3d:
                    9a:29:3f:8d:32:d8:6c:d4:6a:f1:4d:19:a3:f8:14:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:51:79:B6:D1:97:EA:ED:77:4F:22:2D:DA:8E:FC:B7:6B:8E:64:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/f42216e8-83be-390e-947c-fb509b0bc090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.14.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f9:c5:d6:9b:46:fd:c7:80:ce:ba:a7:45:14:6d:ad:28:f8:
         f9:80:dd:8f:99:97:52:96:6f:65:61:0c:c4:c5:28:7f:65:9f:
         2c:59:0d:b1:33:f3:2e:c6:fc:24:6e:4a:72:fb:70:36:8e:3e:
         e2:ef:83:60:5c:45:54:41:3c:00:54:0e:46:48:d9:7b:1e:c5:
         a8:e1:76:e7:6d:e7:6c:5a:4a:95:99:01:d0:d1:5b:6e:c5:b5:
         87:03:79:02:b7:92:dd:01:84:ce:61:00:69:be:99:fb:57:6f:
         49:5d:8b:6c:67:e5:d4:ea:9a:d4:3d:4b:09:2f:c7:98:ff:6e:
         0a:e6:17:90:59:6a:9c:c5:74:58:2f:75:07:e9:33:b4:af:a4:
         d4:10:37:da:c8:86:7b:dc:12:6f:c6:96:4a:07:2a:fc:2c:11:
         56:5d:30:48:fc:a8:a1:4a:53:c9:0a:67:4a:3c:25:35:49:eb:
         d7:97:b8:bf:1e:2e:78:f6:45:05:90:e6:2d:0b:8a:b9:be:37:
         02:24:0d:33:76:33:09:c1:21:02:63:b9:ef:fa:60:25:6b:7d:
         f0:2c:e3:6d:8c:58:84:26:e2:57:91:24:bd:93:36:67:e8:03:
         2a:34:43:28:f1:2a:8d:47:3d:31:00:d1:7b:f7:9e:05:f0:9e:
         e9:3a:22:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:12 2026 by rpki-client