Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4aa59f8f-5334-35a5-9591-17cf816bafac.roa
File:                     4aa59f8f-5334-35a5-9591-17cf816bafac.roa (raw, json)
Hash identifier:          qusKCyn+uUh72KOoJtIJHLJalRlo62DcM/Wx9fNgAbU=
Subject key identifier:   FC:F3:81:6A:64:6E:26:99:72:EF:98:A7:EC:E3:FD:FF:A8:C9:7B:8E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F067228FC23BC3BD7A0538B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4aa59f8f-5334-35a5-9591-17cf816bafac.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396356
IP address blocks:        184.174.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:28:fc:23:bc:3b:d7:a0:53:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=bfa8edd3-566c-4080-bc76-c6c66fff1c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:6a:88:8a:f1:cd:50:ce:6e:23:de:e0:1f:
                    e6:9d:d1:04:9d:4b:78:65:c4:48:5b:36:2f:38:bf:
                    21:c9:8b:52:28:ba:7c:48:af:9e:50:15:13:bd:b1:
                    05:17:1b:b6:a9:11:a6:74:27:19:57:3e:73:6c:e6:
                    46:c5:a9:e1:d2:22:c3:94:fe:2c:9f:d6:f4:a6:33:
                    2e:b4:31:5f:c8:03:72:8b:90:7b:e7:89:fb:74:ac:
                    24:e8:ec:4f:38:71:fc:00:5d:41:55:4e:fe:bb:ac:
                    35:16:f2:67:5b:f2:38:b2:26:ea:78:1c:8d:56:eb:
                    65:8a:67:57:fe:1e:3f:ef:6a:f4:fe:5b:ee:ab:70:
                    60:f6:7f:82:27:0c:76:a5:3e:f8:04:2d:61:4e:6a:
                    83:d2:fa:9c:14:1d:ed:37:76:79:57:55:20:11:fe:
                    5d:8a:d0:74:ba:ab:a0:eb:1b:57:4b:89:15:c7:21:
                    d2:e4:d8:ec:cb:0c:54:ac:e5:f0:d4:40:0f:04:47:
                    50:9b:cc:66:4e:e0:08:1a:5d:5f:44:5c:e6:64:55:
                    c0:2b:c2:47:08:aa:d0:00:f3:93:93:61:d3:a9:0e:
                    e4:a7:27:a9:28:00:de:48:05:d7:cf:43:93:4f:2e:
                    97:de:09:ce:41:3b:ee:1b:75:1b:34:f9:47:5a:90:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F3:81:6A:64:6E:26:99:72:EF:98:A7:EC:E3:FD:FF:A8:C9:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4aa59f8f-5334-35a5-9591-17cf816bafac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:47:d1:83:b0:c5:5a:c9:8d:5b:e4:e1:46:ce:64:c0:fe:73:
         b9:62:ab:d3:76:29:86:43:48:c6:92:3c:b5:3b:98:de:43:08:
         a5:1e:3c:4e:bf:e7:89:5a:13:86:e1:69:24:d9:1d:a0:20:2f:
         a8:11:b6:26:4e:12:35:f3:47:b4:3d:62:86:c8:df:e2:57:eb:
         6f:43:fe:8b:05:75:1c:5a:81:1b:ca:db:ee:12:41:ff:4c:c8:
         dd:f1:c0:ff:70:37:d5:7a:38:d3:c2:32:fb:30:93:f3:67:9a:
         13:d5:81:18:67:aa:23:9b:de:3d:2c:00:df:05:1b:0a:87:1e:
         0f:60:18:15:e5:48:f6:e9:a1:36:01:88:19:2a:42:fe:d3:91:
         4a:49:a3:f6:1f:79:20:a5:3e:ea:55:23:e7:42:46:0f:43:3e:
         c6:1d:c7:27:fe:a4:e2:74:f6:1c:38:d2:f9:54:2f:7d:00:14:
         ba:71:05:93:31:40:a8:2e:af:4c:2b:71:6e:02:28:39:2d:c4:
         02:33:3b:c5:8b:b3:e2:49:66:fb:fe:58:f0:a2:2b:22:00:44:
         55:29:44:a0:f5:ac:6b:21:04:20:98:8c:9e:af:26:84:00:a2:
         b2:14:16:93:23:6d:b7:c8:d2:b5:45:02:48:21:ca:7b:33:0f:
         a3:c6:5f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 23:54:30 2026 by rpki-client