Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/45d5ba8a-2d2d-35b5-983e-59b647a7d21c.roa
File:                     45d5ba8a-2d2d-35b5-983e-59b647a7d21c.roa (raw, json)
Hash identifier:          920JfooEH+KAzItBZQhvk4wxYwZNeY88NVR8lnzMcAE=
Subject key identifier:   5F:FC:41:4B:8A:44:9C:09:9F:AA:B0:8E:F8:B1:F1:5D:D2:35:36:DD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D815E75708C512A308F186A00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/45d5ba8a-2d2d-35b5-983e-59b647a7d21c.roa
Signing time:             Tue 14 Apr 2026 16:11:10 +0000
ROA not before:           Tue 14 Apr 2026 16:11:10 +0000
ROA not after:            Mon 13 Jul 2026 16:11:10 +0000
asID:                     198250
IP address blocks:        64.69.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:5e:75:70:8c:51:2a:30:8f:18:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 14 16:11:10 2026 GMT
            Not After : Jul 13 16:11:10 2026 GMT
        Subject: CN=a781da29-5956-49d5-b50b-8546023c3e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:45:52:17:c9:00:de:2b:22:d1:e0:31:25:8e:
                    06:d6:5e:68:f2:61:f6:6c:d0:e7:04:d1:de:ff:1d:
                    a7:f0:eb:5e:7b:bd:e9:45:72:a0:33:f9:bb:1a:e7:
                    89:e2:b1:0d:50:5a:cb:16:92:09:e3:4e:84:66:90:
                    c4:b5:b6:90:b7:1b:c5:87:18:32:7a:df:b3:43:2d:
                    1d:a6:2e:85:6c:7c:72:01:2a:8a:98:59:1c:99:d4:
                    f1:5e:b6:f0:0a:56:17:c6:b2:2a:2c:16:25:01:f5:
                    ac:b8:7e:db:2b:28:f7:a3:cc:7e:d8:1b:c0:7a:e6:
                    f8:74:13:22:2c:c9:10:0c:8a:0b:66:0e:b7:55:ce:
                    dd:81:1c:69:a5:fa:34:2b:37:11:79:62:d0:c9:f3:
                    12:69:db:bf:5d:07:8a:74:57:08:3d:a3:e8:b1:06:
                    72:4e:00:82:93:4a:c6:83:a5:25:a5:cb:9e:73:56:
                    30:38:28:c7:6b:7a:2b:ad:79:5e:8d:63:f0:86:37:
                    8b:7e:77:2c:f5:66:54:7c:4f:ae:a3:61:13:e6:8d:
                    76:8d:f6:06:c7:7a:f3:cf:b0:98:37:b3:10:b9:44:
                    6f:c5:0a:80:9d:97:7e:77:3b:0a:8b:58:69:7f:7a:
                    df:59:f9:df:33:f4:70:e7:0a:b7:47:3f:ca:99:57:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FC:41:4B:8A:44:9C:09:9F:AA:B0:8E:F8:B1:F1:5D:D2:35:36:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/45d5ba8a-2d2d-35b5-983e-59b647a7d21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:bc:ea:e9:c2:4a:d0:21:b7:1b:96:24:8f:8d:62:d5:fd:
         d8:ef:74:11:84:b2:9f:7d:fc:33:e5:a4:5b:d4:5f:a2:1c:44:
         46:37:3b:5e:4a:5c:0f:44:d6:2b:34:ed:ac:9d:a8:98:4b:40:
         aa:31:16:eb:88:df:5d:34:e9:ca:d9:73:74:d3:3c:50:5f:39:
         00:4a:26:bd:cf:d7:2d:92:60:9c:73:bf:32:06:da:e0:1c:3b:
         c7:c6:f1:bb:64:4d:2a:ab:5f:32:a1:2b:f3:aa:18:b2:9d:cd:
         33:6a:7f:eb:4b:d3:0d:dd:99:3f:f0:a9:cb:62:50:16:1a:da:
         24:43:2d:4a:7a:66:93:e1:c1:dd:4f:b0:0e:cf:cb:b7:c0:b8:
         b5:b0:ac:d0:d2:6b:db:63:53:56:92:96:ca:78:8d:4b:86:7a:
         31:ee:ba:18:0f:fa:ee:b9:48:71:db:46:69:e8:5c:63:c4:5b:
         f1:0d:de:1f:c1:0a:70:0e:59:9d:c2:94:f0:1e:a4:62:3a:d1:
         31:0a:c6:b3:fc:cb:06:92:3b:d0:23:7b:d8:a6:64:91:75:44:
         63:fb:4c:c7:cb:ca:94:86:fc:1f:b4:8e:4d:33:2a:2a:1a:a0:
         ac:78:79:4a:e8:f6:1a:6e:08:57:2c:68:f6:18:af:96:10:a1:
         10:4c:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 14 22:01:07 2026 by rpki-client