Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa
File:                     0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa (raw, json)
Hash identifier:          4MWUGE/UW/QI29Gyh0v9dR5eh2N+3Yqj7aU5P10WTAI=
Subject key identifier:   90:1B:0E:7B:17:6A:F8:69:CB:DD:AD:AA:21:32:E3:DB:99:41:EC:FA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EEEB75C320523CED46AE89600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     212384
IP address blocks:        173.211.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:5c:32:05:23:ce:d4:6a:e8:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=2b47f044-9d79-4ade-a8e0-98b443e1f5ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:7d:a1:b4:2b:14:38:0f:b1:51:a4:94:89:
                    f5:56:52:f2:78:58:7d:e7:80:55:2b:bd:88:18:23:
                    38:66:03:d7:c6:bb:86:4e:5a:e4:df:a0:e1:7a:0f:
                    3f:3b:2a:f9:5c:2c:5f:c3:81:ed:a1:b5:47:08:ca:
                    c7:93:1a:bc:6d:c3:57:b4:aa:16:c3:78:f0:36:63:
                    65:7e:9a:15:5e:d6:90:9f:1e:cd:3d:d9:c8:ca:81:
                    12:17:d8:f7:9d:16:8e:a6:7f:ab:66:75:32:4f:b6:
                    b6:85:17:45:4a:72:6a:0f:d1:e2:9c:57:89:91:89:
                    59:0a:76:81:2d:9d:33:2b:36:8e:39:7d:8b:ad:19:
                    fd:1e:95:82:c5:0f:37:63:a9:53:8c:40:ad:35:45:
                    5c:43:00:e1:96:4c:60:9b:9c:74:dd:c5:1b:73:09:
                    fb:79:ca:53:dc:8d:f5:c8:67:84:44:9d:a5:bf:ec:
                    eb:3b:e9:81:ef:5a:f7:ea:ce:c8:92:76:f2:73:29:
                    fd:7c:a7:54:b1:3d:c4:07:c5:d8:7d:d4:63:68:fe:
                    67:eb:5c:c1:e1:2e:56:32:34:3b:3e:b5:c8:51:43:
                    f2:5d:9b:3e:e5:7c:3b:98:29:a6:cc:d1:b7:9a:8e:
                    9f:f2:3c:fb:28:c0:b8:22:26:7c:e3:07:db:f4:38:
                    ec:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:1B:0E:7B:17:6A:F8:69:CB:DD:AD:AA:21:32:E3:DB:99:41:EC:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:36:ae:ae:c2:9f:95:7e:b1:a2:d1:a6:aa:55:d8:22:47:
         33:cf:26:73:cd:a9:8d:99:42:02:42:99:7b:d3:b7:1f:ab:ef:
         8c:43:58:22:af:11:e7:9a:9d:3a:1f:65:e7:73:1f:35:1b:80:
         b0:20:22:57:6f:7a:86:28:53:d6:37:94:05:0a:a4:b2:d6:11:
         c6:ba:e6:c1:4f:b7:5e:12:8d:f4:61:7d:ef:3e:0d:e7:ce:43:
         60:ff:ef:82:d9:08:3d:ae:37:4a:5e:8e:b3:f7:f6:85:30:5a:
         f4:5d:c2:0b:a9:14:c8:39:d3:ee:76:70:d5:d7:62:68:f7:0c:
         cb:74:67:da:b3:e6:b9:b2:35:df:2b:ec:26:ed:2a:49:b8:17:
         fa:bb:de:48:96:a6:17:fd:e3:cd:ae:9a:78:2e:c9:bf:dd:b0:
         a8:f5:78:83:5b:d1:65:39:cb:e9:f3:a9:c8:25:af:9f:76:ee:
         dd:a6:12:3c:bb:51:04:d9:6f:5b:ec:a7:50:91:8a:b7:1f:6c:
         b2:14:d2:6a:48:b2:e6:31:70:ed:3b:d2:02:92:a1:aa:54:ba:
         30:9f:be:23:ea:79:77:ce:03:2c:91:0f:c4:35:41:ca:64:b1:
         9d:b7:f0:84:30:4d:3f:e7:e8:f8:84:3b:e1:93:83:ae:d2:6d:
         a3:73:ee:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:36:59 2026 by rpki-client