Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a57528d-e786-3c9c-878e-0b218c9f5514.roa
File:                     0a57528d-e786-3c9c-878e-0b218c9f5514.roa (raw, json)
Hash identifier:          vsZxCjBjpUMGXERu5sWr6uECPrKJippXBBS7MmXdHM8=
Subject key identifier:   05:EF:FA:7A:2E:18:FE:F8:E8:8A:DE:28:DA:86:5D:14:4C:B5:41:E4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F374D2D40B3E743C840FF0200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a57528d-e786-3c9c-878e-0b218c9f5514.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     9009
IP address blocks:        67.227.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:2d:40:b3:e7:43:c8:40:ff:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=e1c6b0fc-27e8-433a-a107-d9750f980ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f2:d1:9d:54:09:ef:a2:3c:90:31:db:45:77:
                    f4:2d:2f:23:c4:56:b8:c3:c3:38:3f:f2:a7:c4:33:
                    9a:b3:ea:39:06:c1:29:dc:48:ea:73:07:17:76:fd:
                    46:2e:8c:cc:11:d5:fe:2c:28:ac:9c:6e:e1:1d:99:
                    3c:46:5c:aa:2b:f6:06:88:47:29:90:47:96:91:cd:
                    4f:c0:b4:a4:31:9a:70:a8:17:e6:cf:67:fa:2c:66:
                    42:69:19:13:b2:cd:de:5c:e2:95:b4:5c:b4:5e:2e:
                    a4:d2:c1:f8:7e:04:07:5a:2c:18:60:a7:56:d4:db:
                    c4:a4:e8:2b:c9:78:9e:a7:f3:10:be:f6:68:6f:99:
                    58:17:49:b6:7d:50:1e:0a:c6:08:97:80:3c:00:2a:
                    f2:4f:6a:b0:25:87:f5:11:90:26:1c:4b:cf:66:f0:
                    d9:26:3b:5e:0c:88:68:3d:ba:b3:1e:fe:e9:92:a3:
                    56:d7:57:70:17:37:88:d4:be:c0:84:a5:00:bc:24:
                    0f:86:b4:3f:02:34:cb:8a:be:de:a0:dc:c9:2e:16:
                    09:21:b6:6b:04:54:d7:09:12:ea:bb:31:0a:dc:68:
                    db:47:98:6f:92:e6:a4:23:6d:3a:84:52:08:fe:ab:
                    fb:bd:f2:c3:1a:03:39:1e:08:c0:ca:44:50:df:d9:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EF:FA:7A:2E:18:FE:F8:E8:8A:DE:28:DA:86:5D:14:4C:B5:41:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0a57528d-e786-3c9c-878e-0b218c9f5514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:09:20:96:4b:b2:82:c2:15:76:3a:d2:4a:3d:59:45:8f:
         e0:16:bf:ff:5e:b0:45:a6:70:56:47:cb:b7:6a:28:3e:df:68:
         a1:3c:b3:5e:8b:a2:5b:a2:0c:d5:15:d9:a0:eb:fe:3b:d8:f9:
         2a:75:c5:70:3d:63:e4:48:1c:9b:14:7e:3e:9a:64:e2:6f:7f:
         8f:5e:fd:91:68:6d:68:aa:2f:c7:05:34:68:13:ca:2c:19:77:
         bd:7f:bc:fb:89:79:b5:34:09:a9:c1:05:20:8f:83:ac:02:a0:
         2b:55:b5:87:cf:82:2f:c3:44:d9:1a:3b:ec:96:58:1f:34:d1:
         2a:7e:ea:89:2f:96:70:78:29:38:45:ba:61:66:55:e0:15:9d:
         13:df:16:ff:6b:7a:1b:83:3e:56:f0:d7:c2:c2:24:79:10:17:
         00:7d:64:93:41:9d:ab:0e:11:69:72:f5:ac:93:38:b2:8c:a2:
         a2:5c:ed:2a:0c:1d:d2:7c:37:a8:ff:35:73:e1:37:86:61:b7:
         fb:87:01:01:98:26:34:c4:82:b3:0b:2d:27:57:7f:03:7d:77:
         f5:15:58:e4:89:80:9a:f9:30:49:79:2d:96:f7:60:55:85:f8:
         e5:76:66:fd:0a:ba:6d:fe:77:0c:f9:2f:62:2e:a9:3b:4c:11:
         2d:88:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:05:31 2026 by rpki-client