Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa
File:                     1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa (raw, json)
Hash identifier:          HXJ/n0tNTzStpt0crSZL52fm+I07PDniRqMiRnklHwA=
Subject key identifier:   EF:DA:96:42:85:5C:94:19:FF:2D:C7:40:1E:2A:70:C1:CB:C5:4C:EC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D300A4DD4C8615A94BE9BB380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     61317
IP address blocks:        173.211.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:4d:d4:c8:61:5a:94:be:9b:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=2ae0201c-a5fb-4f93-bedb-f6cbd5cf64f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:1c:d5:72:90:d5:a6:07:1b:be:1e:19:eb:
                    e2:d6:02:d0:18:26:42:7a:03:f1:46:0c:45:f2:86:
                    d3:6d:0d:2a:41:eb:d3:20:55:da:8e:d8:39:04:09:
                    09:99:a4:f4:e1:7f:35:14:ad:20:7b:25:b9:18:0c:
                    86:bd:32:dc:ab:4d:a2:82:2d:54:67:d5:e1:c5:d8:
                    4b:35:4f:40:35:57:45:7a:ef:3a:48:48:b6:5d:94:
                    75:5d:e8:ca:f5:03:04:fc:e4:c6:92:b0:78:c5:94:
                    84:53:2b:b9:6e:81:c3:49:a7:7f:32:cf:9a:de:a7:
                    b2:ef:a0:72:c3:64:1a:e5:d1:09:f3:31:27:7c:c4:
                    49:41:3e:63:3c:62:51:5f:33:05:48:73:4c:e1:35:
                    ba:3e:52:f3:cc:6a:70:be:71:81:1f:e3:61:9b:bd:
                    72:cb:bb:d2:ad:87:47:51:83:52:a2:bd:46:d9:c9:
                    df:88:6f:31:4b:c7:76:03:09:ac:aa:df:b4:fc:3f:
                    34:f3:6a:1f:be:b4:8d:08:15:b3:0b:c6:20:40:2a:
                    a7:08:cb:72:e4:4f:ac:97:59:fe:6e:c1:79:85:78:
                    2f:54:24:cb:f5:3a:b6:c6:24:16:00:9a:12:9f:9d:
                    eb:bb:90:a2:52:76:c7:09:f6:eb:74:16:78:5b:07:
                    25:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DA:96:42:85:5C:94:19:FF:2D:C7:40:1E:2A:70:C1:CB:C5:4C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1add9d2a-e5b3-3fa2-a44c-2e8fae72087f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:d6:f7:cf:29:89:2b:8c:af:1f:51:cf:e9:37:8f:f9:bd:df:
         8d:5e:6a:a3:c0:df:72:7a:a8:2b:1e:c4:ab:4f:f8:23:96:55:
         ed:65:e7:c7:e6:61:df:1e:09:33:25:91:62:98:69:29:7d:25:
         70:dc:68:a4:02:2f:24:9a:b3:dc:c5:08:cb:8d:42:40:6d:e4:
         3b:47:ae:14:7b:ae:16:29:3d:cd:27:66:a0:02:b9:ea:a1:4a:
         8e:5b:8c:49:2b:ac:82:49:c2:90:38:af:87:a5:fc:70:4a:6f:
         6b:0c:2d:f5:a0:fe:66:76:20:c7:ad:a6:06:c2:de:d6:f7:93:
         23:4b:7c:36:7a:ff:8a:a9:32:d5:47:cf:5e:70:db:8a:c7:e0:
         ef:a5:e3:16:b9:9f:20:65:66:91:63:ba:07:89:a9:80:8d:62:
         3c:83:b6:34:19:12:65:88:28:ce:ad:e8:ae:f6:c7:97:c9:8f:
         66:8e:78:b5:e9:60:0d:1b:bb:07:22:25:ab:e6:09:42:21:a2:
         c6:c8:1a:7f:01:37:25:e3:81:72:99:52:70:fa:5f:43:52:40:
         88:54:d5:71:11:74:88:54:1b:28:8f:e0:89:a4:97:d4:1f:09:
         91:bb:ce:1c:4a:dc:29:f6:9c:45:9a:da:64:c2:26:6a:e1:69:
         0d:9f:b8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:27 2026 by rpki-client