Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/22ba85d3-b574-3f4e-a2f0-d6f53df0901c.roa
File:                     22ba85d3-b574-3f4e-a2f0-d6f53df0901c.roa (raw, json)
Hash identifier:          m0JnoYw8goLKRsy2GXpGRDiJUHxvpt7VcnLSouWstMs=
Subject key identifier:   89:79:D7:BE:B2:1A:29:97:9E:D6:E2:2D:B0:97:B0:81:7D:D9:2D:6A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F6292D4C61FFC1A76685F4E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/22ba85d3-b574-3f4e-a2f0-d6f53df0901c.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     47007
IP address blocks:        104.143.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:d4:c6:1f:fc:1a:76:68:5f:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=58283dd3-9b33-4a28-8e89-67bc676db6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fc:87:f8:1c:2c:d1:b2:0c:37:3a:46:d5:9a:
                    e7:1e:5d:6d:c9:e7:96:07:00:9a:07:19:ec:4c:83:
                    f2:26:75:0d:0b:be:0c:b9:6f:20:b1:7a:3a:61:fd:
                    72:35:df:ac:ad:7f:21:2c:00:4a:f9:05:27:f4:07:
                    7b:7f:ab:b8:ea:bd:57:22:7f:1c:ea:8c:91:f0:6a:
                    da:49:97:8f:89:78:9a:cb:8b:c2:3e:8c:16:e5:37:
                    68:65:dd:cd:8a:36:87:fb:5f:f3:7c:1b:ca:0d:89:
                    99:a1:16:25:9e:87:0c:66:13:e7:96:e0:40:ff:44:
                    ab:1c:bb:a4:53:37:ae:90:23:3f:06:98:48:25:10:
                    b1:25:a1:5e:8f:fb:01:b2:e9:37:6d:cf:bf:67:fd:
                    59:36:99:09:62:88:0f:a5:3c:c0:74:2b:3b:9c:58:
                    e5:ca:36:ba:92:fe:78:c0:18:9f:c1:a9:7c:fe:0c:
                    74:50:be:de:9d:c3:9e:4e:12:79:fd:fe:01:c0:32:
                    ed:af:bb:39:9a:8c:40:2e:d0:5b:bf:15:5f:22:e2:
                    95:4b:82:64:b8:fc:45:c0:08:6c:b0:b1:4c:4d:bf:
                    5f:5d:53:3c:4d:f4:f8:13:07:70:e9:ae:1e:0c:c7:
                    73:2a:f6:81:66:ad:01:dc:de:8b:a6:25:03:25:9f:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:D7:BE:B2:1A:29:97:9E:D6:E2:2D:B0:97:B0:81:7D:D9:2D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/22ba85d3-b574-3f4e-a2f0-d6f53df0901c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:07:a9:1b:c1:08:0b:69:24:b6:30:a0:94:e4:6f:01:59:96:
         82:90:98:02:4b:a3:f4:7b:4b:38:5a:50:46:36:6c:30:23:0b:
         b7:3d:5d:be:0f:41:1f:f3:af:14:c0:fd:86:ad:99:b5:95:13:
         6e:c0:19:31:33:0a:30:ea:10:ae:62:50:4c:00:98:2c:fc:77:
         94:b1:78:1d:87:1d:a1:52:8b:c0:43:b5:6b:9a:8a:ab:6e:a6:
         23:f4:f6:75:42:af:30:9f:58:ef:5a:92:09:56:f4:a6:ac:6c:
         0e:e1:dd:2d:7a:0b:93:ee:50:62:18:a5:d3:70:db:21:cf:c8:
         56:7a:ec:af:bc:4b:05:e1:27:41:8b:fd:73:43:55:7e:82:e2:
         35:32:bc:99:9a:5b:f3:8f:cc:58:34:1c:de:3b:01:7d:4f:e5:
         ad:c7:e1:cb:e1:e8:a7:1b:a9:f8:df:22:fe:a9:00:99:ef:9f:
         6c:ba:9b:14:8d:2f:04:1b:6a:87:3f:d3:86:45:cc:c0:69:68:
         64:5e:98:f2:10:c1:a6:b0:b9:0d:8e:86:48:5a:a5:54:3c:3c:
         44:23:0b:0e:2c:fc:53:8a:4c:64:25:6a:7b:5f:17:38:7a:70:
         9c:f5:2b:e2:0d:c6:b5:83:9f:ed:02:a0:e0:51:83:e3:ee:b9:
         a0:61:c8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:02:56 2026 by rpki-client