Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3d4b62f0-61e8-3971-b63b-52787f018529.roa
File:                     3d4b62f0-61e8-3971-b63b-52787f018529.roa (raw, json)
Hash identifier:          7P1GDDLftlk8v7xt6QWfjd9l7gHXxDR5ff+Jpv3O0is=
Subject key identifier:   CA:40:C2:72:E9:B3:01:FE:6F:B3:94:3D:36:D5:D7:92:DA:D6:A4:0D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EDC9212FFDD796C68AF8D0F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3d4b62f0-61e8-3971-b63b-52787f018529.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     400810
IP address blocks:        67.227.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:12:ff:dd:79:6c:68:af:8d:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=bdfd01b2-229c-45f4-ba1d-a1e1fd1d4aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:59:29:78:fb:62:1e:2c:a7:0d:bd:70:b7:88:
                    39:cb:36:5b:e8:25:84:7a:77:d7:82:85:1b:b3:f9:
                    2f:29:e1:c9:ad:b9:e6:31:de:b6:a3:99:09:61:94:
                    16:2a:84:ca:17:56:9c:07:cc:c3:a9:d9:43:bc:9b:
                    25:2e:fa:0d:95:c0:39:97:10:8a:cc:7c:2a:1c:b2:
                    b9:f7:eb:9a:82:89:f2:d3:a5:76:98:bf:98:24:f8:
                    9a:cb:b4:5b:59:43:7f:71:2b:0c:f8:43:49:2c:a6:
                    df:ba:86:d3:35:33:f9:01:b5:92:be:23:e8:1f:4c:
                    0a:a7:b8:6c:c2:43:29:8c:b5:c0:a0:30:9c:4f:28:
                    52:4a:46:a6:11:6f:76:58:d3:41:f1:43:60:93:1b:
                    63:7f:88:de:c2:4a:58:f9:04:55:20:c4:f1:47:93:
                    a3:ed:38:51:05:3e:ca:39:54:78:ec:89:aa:a8:39:
                    50:72:1b:2e:42:22:7e:64:15:47:27:a7:06:d3:bf:
                    90:2a:24:ca:01:36:76:34:33:2c:cb:b1:fb:5a:4c:
                    ff:7e:fb:f9:d6:5d:28:1f:96:be:15:19:12:b6:03:
                    7a:a7:7d:b7:7e:9e:1f:57:c5:13:a9:55:8b:57:b7:
                    d4:68:c2:96:3c:72:ea:bc:51:a8:05:86:ae:c8:e8:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:40:C2:72:E9:B3:01:FE:6F:B3:94:3D:36:D5:D7:92:DA:D6:A4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3d4b62f0-61e8-3971-b63b-52787f018529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:25:33:05:19:6f:8b:57:03:07:04:9f:81:49:c1:59:71:2e:
         90:a8:d5:7a:85:ed:db:92:c3:2f:dc:7c:04:61:52:57:eb:1a:
         91:a6:db:ff:28:da:89:42:e7:18:8c:91:56:6c:84:33:00:1c:
         ee:48:44:fe:8b:ab:90:c8:c8:ce:67:f4:c0:90:cd:34:b6:3d:
         4f:03:ae:86:1c:33:ea:ee:62:64:5c:fe:a6:da:a3:a2:22:1d:
         0a:5e:49:66:5a:3c:31:55:fc:53:83:46:0b:8d:57:19:15:b2:
         2c:76:96:49:4c:8d:0d:fa:78:42:af:eb:b0:3e:2c:a4:fb:8c:
         b7:63:22:95:7f:ae:0c:99:2f:b0:34:62:6e:a6:d9:c8:06:ad:
         62:dd:03:bc:08:0d:c3:4f:e0:b4:fc:14:57:4a:1e:2e:d6:f6:
         aa:08:52:3f:f3:4b:4b:31:b4:89:04:2f:c6:f3:fa:a4:50:6a:
         a8:56:e5:f7:65:7c:c7:4f:52:e1:8a:26:b5:4b:5b:d0:72:a8:
         eb:72:ef:0c:bd:64:87:47:87:12:1e:1f:4d:7c:bf:a9:f1:96:
         41:4c:a5:30:60:9c:29:c0:d1:b1:81:34:87:73:fe:c6:73:b0:
         df:9e:9a:d8:4d:bd:f1:12:0b:3e:bc:06:f1:91:a4:0e:1d:ea:
         d1:bb:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 08:21:42 2026 by rpki-client