Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2e092cd0-1531-392b-866a-0cc82c3d6beb.roa
File:                     2e092cd0-1531-392b-866a-0cc82c3d6beb.roa (raw, json)
Hash identifier:          V3V9ftM27+sVYm5vFDC4srHH/UoN7dEdNzA/FgSrZIc=
Subject key identifier:   35:06:D2:0F:44:DF:84:2E:4E:91:CC:90:C0:6D:C9:4F:DE:C0:37:7D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA79A2D9D325D45052F8B3480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2e092cd0-1531-392b-866a-0cc82c3d6beb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     200017
IP address blocks:        173.214.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:2d:9d:32:5d:45:05:2f:8b:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e938fc97-9609-49e3-83cd-936bcc33e228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:94:d8:55:2f:39:4a:e3:ac:73:65:7c:a1:
                    77:97:14:63:96:0a:7a:15:2c:0e:c8:10:df:27:c2:
                    4a:8a:43:cf:ec:73:d0:84:b2:f2:f1:27:e6:f7:f8:
                    ef:2a:06:dc:9c:69:0b:79:e4:25:71:5f:70:76:31:
                    27:5a:0b:0f:5a:e0:c8:cb:08:93:92:1d:cc:cb:c3:
                    da:0c:4e:f5:4f:94:32:fa:74:c6:be:2c:f8:7e:d0:
                    c1:18:2e:bc:e7:34:cf:f5:ae:1e:9f:b7:81:2d:1f:
                    1d:94:c4:f4:03:f9:d2:75:94:42:18:42:51:85:94:
                    8f:79:d1:54:58:fa:87:9f:62:93:26:ee:55:5c:34:
                    df:5a:c7:4e:45:71:27:70:f6:46:cd:ec:b9:2f:b7:
                    cf:e9:09:fa:b0:42:fa:e9:0a:58:c6:7f:dc:fb:21:
                    83:e5:55:ab:32:44:a1:54:39:21:81:1f:89:89:36:
                    ca:42:85:3c:e4:80:64:44:f2:21:9d:b1:b2:2f:f8:
                    4f:c3:37:11:e2:02:9b:62:a8:dd:0b:d0:d1:c8:56:
                    f5:eb:9e:f8:7a:ae:09:49:d5:10:55:09:0a:c5:c7:
                    7a:32:37:ba:35:06:4d:ee:a9:14:d4:a4:41:de:c3:
                    88:3d:3d:49:8e:4f:ef:99:24:1d:ad:72:10:ea:9d:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:06:D2:0F:44:DF:84:2E:4E:91:CC:90:C0:6D:C9:4F:DE:C0:37:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2e092cd0-1531-392b-866a-0cc82c3d6beb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:54:b9:cc:a9:02:ac:23:d0:07:ba:4b:d6:88:8a:cf:00:
         55:c4:71:77:46:e6:5d:b8:e8:eb:b5:cd:51:53:59:8d:af:42:
         ce:82:f6:40:ad:e5:f0:3b:79:33:b7:9f:50:32:c4:82:85:5f:
         cf:9e:5e:a7:d4:38:bf:38:12:09:45:8a:aa:6b:cf:2a:cd:e7:
         b7:15:4e:0c:4e:7a:3e:20:f6:b2:ad:1f:ec:0d:2b:f4:7d:e0:
         d7:c9:5f:a3:aa:eb:8b:57:3e:a4:5b:71:8f:96:cd:73:34:22:
         b3:59:81:f3:a8:bb:b8:e6:e2:0c:54:8e:98:c3:d4:df:42:29:
         11:db:b9:e3:49:9b:16:0c:d4:b4:68:a0:8e:ba:b7:8e:1a:c8:
         d8:4a:eb:3d:2a:bd:36:8e:45:dc:b9:bb:49:ea:1a:00:78:ec:
         d8:9b:65:c9:b5:44:1e:46:66:e9:6a:88:1b:16:f1:9b:81:ac:
         f8:5a:f0:74:cb:f0:73:b1:73:d1:04:75:2f:6d:7c:08:0d:20:
         e0:42:50:8f:08:46:45:e1:4e:dc:4e:57:97:55:e4:71:4a:20:
         5d:bc:04:14:34:3d:18:99:03:69:54:5a:d0:e7:d1:8d:e7:63:
         46:32:dc:08:56:aa:f5:9c:c3:5f:24:b3:44:8f:ac:92:94:b2:
         59:b3:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:14:05 2026 by rpki-client