Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa
File:                     0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa (raw, json)
Hash identifier:          kI5c3SDPm8rbyxF2p5VUU9o2sURI3gJzdDH9KWw3owA=
Subject key identifier:   FA:29:6D:DA:64:38:89:C4:0B:7E:4F:00:92:54:1A:D9:98:6B:44:B2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584ED1671FC0D61A78A9CF8B1C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     47007
IP address blocks:        104.129.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:1f:c0:d6:1a:78:a9:cf:8b:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=16513d1e-10ea-4047-833d-c9685a5cf0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:09:2e:49:5b:17:fe:ce:26:c3:09:eb:31:3c:
                    ca:a0:ea:c5:15:47:9e:e6:c6:a2:b0:2c:d0:16:b7:
                    29:f5:36:4e:79:bf:6c:50:e6:22:b7:77:98:7d:f6:
                    b2:21:21:45:87:f7:8e:8f:26:c5:7d:f4:41:f5:56:
                    34:4a:25:91:ee:8a:1d:fc:c9:2b:32:2d:d5:6c:27:
                    96:1d:59:9e:78:2e:55:9e:8b:bb:0e:1a:81:15:27:
                    e5:e7:1e:dd:f9:07:6a:b2:54:47:67:d3:98:be:6d:
                    51:d0:b0:c4:78:7e:73:aa:39:ba:20:0f:c3:c3:40:
                    a2:a9:65:ee:65:57:88:dd:9d:6a:03:3a:0f:b8:db:
                    c4:dd:9e:a7:99:71:6a:0d:4d:e2:ab:6f:b4:73:62:
                    45:9b:42:67:62:9f:df:6b:bd:50:07:65:0e:dc:79:
                    a1:ef:d0:a5:77:64:04:6e:b8:68:49:cc:b8:78:cd:
                    38:c0:a5:13:85:30:c0:9d:3c:fc:66:65:41:15:88:
                    31:9a:a2:6b:30:ec:16:b8:e0:41:ba:79:5e:d9:9d:
                    66:ca:f3:2c:19:2f:61:13:27:dc:d4:96:d7:4b:14:
                    41:cb:af:63:92:7f:74:83:2c:6a:a5:d8:23:b1:04:
                    d0:e7:12:ce:15:d0:92:39:ce:5e:ff:69:91:ed:67:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:29:6D:DA:64:38:89:C4:0B:7E:4F:00:92:54:1A:D9:98:6B:44:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0cffc156-fe9d-3c7d-bfd4-2714ee906943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b6:08:0d:77:3f:80:80:30:86:f8:e7:36:0d:dd:59:da:a0:
         e9:ec:39:d3:39:2c:a3:ac:26:40:b3:c4:59:3f:12:b6:83:69:
         a7:49:42:03:30:93:eb:2c:ce:fd:04:8f:f2:30:b8:c3:11:79:
         4a:03:de:ba:8a:55:84:ee:4c:0d:04:6a:7b:49:21:da:5f:03:
         5d:cc:8a:06:b9:26:13:35:de:b7:03:12:b5:cb:cb:3c:ec:8a:
         20:0b:b3:63:e8:40:42:11:83:b9:fc:8c:d0:a0:79:12:55:2b:
         c8:6b:10:bf:2e:cc:5d:11:a3:ef:b0:4d:60:33:a4:72:d1:40:
         af:cf:60:53:3b:0e:a5:69:f8:8e:bb:94:56:43:71:2a:e0:93:
         d3:f3:0d:8c:3a:4c:d6:d2:9f:38:2c:e8:d9:c9:4a:44:37:72:
         45:40:21:43:9d:34:bb:db:68:94:37:f0:ac:1d:d3:0a:f0:65:
         a8:dd:57:bf:94:0a:7d:32:91:a5:d8:54:76:6c:69:10:f7:38:
         9b:a0:87:53:97:e9:38:9c:fe:74:f6:5b:35:68:b5:28:96:16:
         3d:f8:2b:89:c3:c0:59:a3:44:36:44:44:76:5b:4a:9b:ea:53:
         e9:09:dd:4f:4a:e2:21:60:4f:df:05:e1:e5:9a:df:b2:38:a4:
         8d:c9:04:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 15:18:23 2026 by rpki-client