Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
File:                     23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa (raw, json)
Hash identifier:          qzsO5jcDteRyezGscc2waAy+9AhWVg5CBET+SSfdqPA=
Subject key identifier:   C7:32:3D:28:8D:66:1B:4C:0D:15:25:E2:ED:F7:F6:CF:A0:C7:E4:AC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E2AD45FBBA88BA5465C4A6F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     5065
IP address blocks:        198.102.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:5f:bb:a8:8b:a5:46:5c:4a:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=e2bfbc05-1d55-47cd-89d0-952469600c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:ae:c2:dd:69:b8:25:04:18:0c:3e:87:31:
                    82:03:69:66:6c:f4:fa:f2:fa:93:86:7a:3f:fb:07:
                    8f:b8:2d:c4:de:e7:f3:6f:d2:e2:b4:be:a0:b6:fb:
                    35:e9:29:2e:f4:b6:fd:fb:da:d0:b7:f8:40:b1:bf:
                    92:9a:3b:26:9f:bb:47:15:12:dd:1a:00:b7:8c:67:
                    47:cd:cf:02:ff:b6:88:18:8a:9d:44:e8:18:c6:ab:
                    c5:91:55:e0:44:85:06:98:06:dd:c7:7b:cb:7d:cd:
                    b8:25:af:d5:11:f5:06:38:be:67:a9:d6:a5:7f:1c:
                    49:c9:4c:13:84:19:07:ca:d8:67:cc:e0:2c:ba:55:
                    aa:0f:6b:8c:ab:f4:5a:12:b1:32:77:de:8c:d1:cf:
                    8e:84:ed:86:44:33:ef:4f:5d:b0:01:c6:31:b8:41:
                    08:75:e3:01:00:00:ec:e4:bc:e4:50:64:72:94:12:
                    15:17:e7:47:7d:19:71:7e:6c:a0:e0:95:75:5a:fa:
                    29:c8:28:e6:43:7c:ff:b0:34:a9:1f:36:19:9b:3f:
                    ef:3a:4e:66:73:41:2f:2a:04:92:43:d5:1d:94:fe:
                    2f:d0:31:26:e4:33:03:e6:fc:3a:e4:54:42:36:96:
                    27:99:bc:b9:24:26:d4:75:93:48:75:97:6a:65:c9:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:32:3D:28:8D:66:1B:4C:0D:15:25:E2:ED:F7:F6:CF:A0:C7:E4:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:4f:97:84:61:38:86:ce:78:e1:95:59:1d:b6:a0:73:e7:5a:
         2f:14:95:f6:75:a0:86:cf:5e:74:af:fa:6b:03:d3:2e:55:92:
         31:cf:6d:a8:70:ab:17:38:1f:f7:c8:3f:37:16:1d:95:5b:31:
         f9:fc:87:95:3d:26:82:bf:d0:64:df:b4:5b:72:33:b6:55:42:
         83:e4:42:92:41:01:e4:3e:0a:c6:dd:d3:fa:66:fd:1b:8f:70:
         12:09:9c:9a:79:db:f0:63:56:0e:70:d6:c8:99:a1:6a:25:70:
         61:42:e1:79:3a:e4:61:6b:93:9b:9f:29:ec:90:4c:22:e8:5d:
         95:f5:ee:e7:4b:4c:1b:56:7b:82:6e:c6:da:5d:cf:e7:11:d8:
         61:07:65:9a:a5:9c:64:8e:56:03:b0:6c:b1:4d:bc:55:e4:4c:
         3b:9f:83:4b:b6:d3:e9:2b:21:38:e4:b7:f1:40:b0:1e:72:15:
         8c:bd:cb:ce:a7:8a:ca:34:17:8e:9f:09:c9:cc:9e:59:bb:0e:
         cf:3e:d2:17:31:a9:46:22:56:36:d3:e8:c7:b1:dd:8b:be:e6:
         2a:9a:f6:3d:3b:b8:cd:fe:b7:33:8e:7a:31:2c:fe:fe:fc:01:
         28:75:6a:c6:fa:31:d2:d3:5e:92:5d:47:3b:b8:05:c8:03:1c:
         7e:ab:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 09:28:58 2026 by rpki-client