Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2a7ea5dd-4a6f-3a6d-a53a-b013b8a6b0e8.roa
File:                     2a7ea5dd-4a6f-3a6d-a53a-b013b8a6b0e8.roa (raw, json)
Hash identifier:          INA6tzLMPpJ1vhFBDxbxBnetbX3gAdOu0i3vRtkwSfc=
Subject key identifier:   2E:71:28:B6:A3:C1:4D:49:6F:00:FD:8A:FB:DC:28:99:04:40:1F:A0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DE310728F56ACB4953289E480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2a7ea5dd-4a6f-3a6d-a53a-b013b8a6b0e8.roa
Signing time:             Tue 19 May 2026 16:03:13 +0000
ROA not before:           Tue 19 May 2026 16:03:13 +0000
ROA not after:            Mon 17 Aug 2026 16:03:13 +0000
asID:                     64267
IP address blocks:        216.74.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e3:10:72:8f:56:ac:b4:95:32:89:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 19 16:03:13 2026 GMT
            Not After : Aug 17 16:03:13 2026 GMT
        Subject: CN=982042c0-3746-4f7a-a071-badbed8f8e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1e:9b:45:7a:43:a6:b9:f9:9b:bc:af:9a:3b:
                    d2:57:6f:a7:12:15:27:fe:61:aa:71:8f:72:a2:e6:
                    e1:d2:40:19:c0:93:84:e1:bb:22:ae:34:de:59:d3:
                    7d:37:70:02:f8:c1:ce:4c:53:5a:c7:7f:ee:42:70:
                    44:19:de:7c:1f:66:6f:09:3e:13:c8:60:29:01:d2:
                    e5:e3:82:67:cf:ec:9b:f4:b2:8d:c0:32:cd:58:51:
                    e8:2f:af:b2:4a:22:97:53:78:70:c8:57:a9:38:7c:
                    77:22:36:a6:fc:5b:bd:59:77:cf:97:04:c0:59:e2:
                    bc:b4:c6:1f:c6:35:6b:ee:f7:a5:fa:67:7d:15:bc:
                    51:d5:e1:cc:f9:53:eb:9b:7b:be:b3:86:59:e9:0f:
                    c0:ab:26:0f:c4:88:b6:a5:01:f7:48:84:4c:8e:b3:
                    0d:07:5b:94:4c:76:0c:5b:52:e6:17:ac:d4:7d:34:
                    7f:9e:46:a6:46:2f:f7:0b:e6:fe:99:f0:fe:7f:9b:
                    14:3d:2c:85:3f:9b:25:b8:c2:e3:7f:c5:9b:ec:e8:
                    74:b4:97:84:a1:ae:53:b4:f7:f4:65:2e:e4:85:5e:
                    e8:0e:52:b4:bf:2c:9c:15:9c:1c:8f:c1:3a:fc:4e:
                    ed:3d:88:d1:4c:12:db:00:45:d5:22:68:5d:14:f7:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:71:28:B6:A3:C1:4D:49:6F:00:FD:8A:FB:DC:28:99:04:40:1F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2a7ea5dd-4a6f-3a6d-a53a-b013b8a6b0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a4:d4:5f:89:37:55:43:33:ee:50:c0:0b:d7:db:4c:8e:7e:
         64:4c:c7:d9:ca:c7:ac:5f:32:49:33:c4:d6:d8:88:74:db:78:
         43:4d:1b:95:c7:19:4f:c8:5e:2b:9b:0c:5e:a5:44:b5:90:b9:
         4d:89:59:64:c4:72:ae:98:7b:01:68:a2:b1:53:0b:fb:19:09:
         24:3f:e4:07:68:8b:14:43:d7:91:18:df:cb:9a:c0:c5:d1:cd:
         17:94:f7:91:da:74:46:72:f2:a0:d9:4a:55:6a:54:0d:56:7b:
         9a:09:5d:9d:d0:b9:8d:d5:fe:b2:83:b1:89:c1:20:1a:44:bc:
         14:ce:47:6c:80:36:0c:24:77:b8:30:7d:93:39:3e:37:f6:c9:
         0e:07:eb:d6:90:62:dc:c8:ed:1d:8a:1e:59:58:0a:d3:b8:34:
         61:8d:ba:5b:90:7a:34:ac:0f:fd:a5:80:9e:59:30:94:30:20:
         2c:32:ea:dc:12:0c:a8:53:16:5b:4a:13:8c:58:c1:51:91:26:
         c5:a0:53:b2:25:3c:f4:17:c8:ce:d8:fe:ca:fd:77:4c:50:e9:
         11:06:1f:53:f9:09:5a:76:37:71:a0:fa:99:0d:ca:e7:9e:47:
         f1:b3:f4:f8:57:67:d5:a6:2d:a0:c7:df:00:66:66:00:55:b8:
         ce:a1:66:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3jEHKPVqy0lTKJ5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDUxOTE2MDMxM1oXDTI2MDgxNzE2MDMxM1owLzEtMCsGA1UEAxMk
OTgyMDQyYzAtMzc0Ni00ZjdhLWEwNzEtYmFkYmVkOGY4ZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx6bRXpDprn5m7yvmjvSV2+nEhUn/mGqcY9y
oubh0kAZwJOE4bsirjTeWdN9N3AC+MHOTFNax3/uQnBEGd58H2ZvCT4TyGApAdLl
44Jnz+yb9LKNwDLNWFHoL6+ySiKXU3hwyFepOHx3Ijam/Fu9WXfPlwTAWeK8tMYf
xjVr7vel+md9FbxR1eHM+VPrm3u+s4ZZ6Q/AqyYPxIi2pQH3SIRMjrMNB1uUTHYM
W1LmF6zUfTR/nkamRi/3C+b+mfD+f5sUPSyFP5sluMLjf8Wb7Oh0tJeEoa5TtPf0
ZS7khV7oDlK0vyycFZwcj8E6/E7tPYjRTBLbAEXVImhdFPfBFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5xKLajwU1JbwD9ivvcKJkEQB+gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMmE3ZWE1ZGQtNGE2Zi0z
YTZkLWE1M2EtYjAxM2I4YTZiMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EpAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+k1F+JN1VDM+5QwAvX20yOfmRMx9nKx6xfMkkzxNbYiHTbeENNG5XH
GU/IXiubDF6lRLWQuU2JWWTEcq6YewFoorFTC/sZCSQ/5AdoixRD15EY38uawMXR
zReU95HadEZy8qDZSlVqVA1We5oJXZ3QuY3V/rKDsYnBIBpEvBTOR2yANgwkd7gw
fZM5Pjf2yQ4H69aQYtzI7R2KHllYCtO4NGGNuluQejSsD/2lgJ5ZMJQwICwy6twS
DKhTFltKE4xYwVGRJsWgU7IlPPQXyM7Y/sr9d0xQ6REGH1P5CVp2N3Gg+pkNyuee
R/Gz9PhXZ9WmLaDH3wBmZgBVuM6hZkU=
-----END CERTIFICATE-----
Generated at Wed May 20 01:18:38 2026 by rpki-client