Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4a1b6825-5b8d-30b6-a67c-f4e0e42f50d1.roa
File:                     4a1b6825-5b8d-30b6-a67c-f4e0e42f50d1.roa (raw, json)
Hash identifier:          tFb1JYpxHt3H3UO4/qgI/ZED/2wm2uZlxsjhSz4CLCw=
Subject key identifier:   3D:F5:F2:A0:A8:2A:60:A1:4E:A7:83:8E:AE:CD:18:C8:3D:76:09:89
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F0881EB45885B6FDC29BC5FC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4a1b6825-5b8d-30b6-a67c-f4e0e42f50d1.roa
Signing time:             Tue 01 Sep 2026 18:43:41 +0000
ROA not before:           Tue 01 Sep 2026 18:43:41 +0000
ROA not after:            Mon 30 Nov 2026 19:43:41 +0000
asID:                     401362
IP address blocks:        64.69.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:08:81:eb:45:88:5b:6f:dc:29:bc:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  1 18:43:41 2026 GMT
            Not After : Nov 30 19:43:41 2026 GMT
        Subject: CN=226d5583-4139-40d5-a531-8a72a627597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:db:27:ab:31:5c:2b:c6:e6:ab:e9:8c:9e:
                    d7:60:6f:f2:3b:cc:62:c2:c2:96:e8:36:c5:cc:c1:
                    53:4e:33:7f:7c:3d:7b:40:af:91:c0:ab:39:65:53:
                    33:2e:d1:8a:90:fe:6b:5e:56:2d:e3:7b:16:96:f4:
                    3e:fe:63:8a:a1:07:16:ec:d1:6a:2c:c1:c9:59:f0:
                    90:eb:73:49:53:79:1b:6b:89:19:ad:1f:6d:1e:39:
                    2c:5f:8a:b0:97:5d:6c:e5:e6:9d:a7:f9:e7:1b:5c:
                    7d:a8:5d:a5:08:9a:fd:9e:7b:05:20:ec:e6:1d:3b:
                    20:23:90:8c:55:14:e3:d3:91:5d:2b:3c:6d:7d:b0:
                    23:24:25:4b:03:0b:22:a5:34:8b:5b:da:0a:03:19:
                    f8:80:cd:a5:de:1a:82:a8:98:ee:ac:c5:39:1c:00:
                    10:41:47:43:19:d7:1c:df:b7:e3:79:89:54:ee:09:
                    4f:5f:10:14:ef:2a:76:c2:a0:fe:86:ab:20:f7:2a:
                    5d:f1:ba:c1:25:4c:e5:89:1b:eb:ae:91:db:1f:32:
                    2a:b0:70:7e:ba:12:7d:eb:97:b9:92:8d:98:23:8d:
                    30:61:0e:b3:22:6d:84:46:14:09:fb:ba:95:22:a4:
                    4a:dd:fb:36:fd:ff:d0:a2:f2:11:fc:89:56:ec:aa:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:F2:A0:A8:2A:60:A1:4E:A7:83:8E:AE:CD:18:C8:3D:76:09:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4a1b6825-5b8d-30b6-a67c-f4e0e42f50d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:72:99:8f:1d:ca:17:9e:8b:27:1b:9a:a9:ce:60:00:fd:a8:
         81:6d:4a:dd:f0:c2:ca:b8:29:54:83:35:9e:1b:f0:51:84:0a:
         43:5a:98:61:49:35:f8:f4:4e:78:70:44:06:f2:e7:47:a7:32:
         6d:ea:7d:24:49:3c:63:e9:48:c3:70:50:89:37:df:e9:2b:51:
         e9:d1:0f:42:9e:8b:f1:b4:9a:d4:13:57:5e:01:00:9b:ab:85:
         22:cc:01:4a:19:4b:fa:9e:24:21:d9:b4:d5:8a:52:95:4f:49:
         7a:7a:16:36:0a:2c:1e:36:e2:93:c1:ce:bb:df:ee:20:b5:27:
         15:e1:8f:e1:f7:97:4e:33:f2:bd:ea:4c:8b:91:b6:bb:2a:79:
         c6:6c:2a:c5:2c:74:f0:16:f7:6e:34:38:b5:cb:d9:c3:34:45:
         ac:71:37:89:a6:d1:06:9c:16:4c:1e:2d:6e:93:c2:b4:93:67:
         5d:a6:5f:9c:96:35:43:5f:b4:8d:40:50:37:ea:f1:de:9a:9b:
         00:e8:74:fc:96:ff:0a:7e:a4:69:cd:96:83:40:ed:46:36:76:
         17:6c:e9:92:82:13:05:ac:87:f3:c4:0c:ad:4f:da:1a:4d:73:
         aa:d1:52:6d:6d:9e:08:57:c3:26:df:90:99:8e:b9:b5:8f:80:
         55:61:20:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 20:58:35 2026 by rpki-client