Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4cf3bbf5-4cda-3517-9b5f-8dcaa9e26fc6.roa
File:                     4cf3bbf5-4cda-3517-9b5f-8dcaa9e26fc6.roa (raw, json)
Hash identifier:          1mO3oXenpCOLK+ZtI5hSAdSn9YHhLfWc1Vk6CIPLhUg=
Subject key identifier:   00:55:99:D5:69:64:85:93:72:48:2F:74:05:CE:95:5A:3B:4B:FF:F4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DC433D8EC08ED1D07D5E28600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4cf3bbf5-4cda-3517-9b5f-8dcaa9e26fc6.roa
Signing time:             Fri 08 May 2026 14:44:29 +0000
ROA not before:           Fri 08 May 2026 14:44:29 +0000
ROA not after:            Thu 06 Aug 2026 14:44:29 +0000
asID:                     214054
IP address blocks:        216.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:33:d8:ec:08:ed:1d:07:d5:e2:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  8 14:44:29 2026 GMT
            Not After : Aug  6 14:44:29 2026 GMT
        Subject: CN=844f1a46-7a2b-4530-8f83-e97119f14119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:7c:1f:fb:75:e5:93:1d:1b:c1:4f:a0:1d:
                    49:31:b2:71:36:af:c9:2e:78:c1:95:da:b5:bc:0a:
                    2c:a1:5d:81:2c:80:d8:0f:d4:f3:00:c3:3a:42:6b:
                    4d:92:7e:38:8e:06:1b:99:a3:29:c6:10:31:a4:61:
                    3c:b4:c6:0f:c4:f1:3b:4b:d4:ba:fc:43:ce:5a:cb:
                    5b:08:7a:88:90:79:51:5e:bb:c2:b1:9b:9c:65:88:
                    16:14:af:cf:3c:fa:f5:e9:64:6e:54:cc:3e:34:0d:
                    c7:71:25:19:cf:5f:97:65:47:bb:25:16:5c:42:fb:
                    91:0a:50:de:34:6b:3b:9f:bd:f3:89:51:dd:44:7a:
                    87:c1:13:e9:aa:eb:24:48:6b:05:7e:24:c8:f1:33:
                    ae:d1:95:86:43:5d:43:d6:af:7c:7d:54:ac:35:ce:
                    91:91:ac:63:6e:22:b0:bf:cd:fc:a2:8b:b0:b5:bf:
                    bc:9c:a3:78:21:b0:6f:b2:c0:ee:19:94:18:28:4b:
                    11:55:7f:df:c3:61:11:d1:dd:94:7a:73:bd:b0:26:
                    1d:5e:80:26:81:f9:fa:31:74:f0:0c:32:19:88:86:
                    2b:28:63:c6:2a:c2:6c:d2:85:00:96:bd:55:f1:2d:
                    26:6e:4d:30:33:ab:ab:9c:14:56:48:91:2a:be:b7:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:99:D5:69:64:85:93:72:48:2F:74:05:CE:95:5A:3B:4B:FF:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4cf3bbf5-4cda-3517-9b5f-8dcaa9e26fc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:94:17:f9:2b:7c:d7:51:d6:ef:79:16:0d:ad:01:46:22:cf:
         29:85:df:9c:db:6f:1d:26:c4:ca:10:79:76:fd:80:18:69:30:
         4f:3b:49:01:a7:73:8b:48:d4:0f:86:74:6e:96:74:fd:06:c7:
         31:a6:98:95:be:77:7b:b0:00:62:1c:2c:b6:d7:4f:6e:0f:fc:
         45:bb:00:1f:b2:55:cc:21:d9:f6:82:c6:84:2e:c4:55:2d:19:
         90:27:e0:1b:92:a3:d5:b8:5e:93:e9:e8:84:d7:87:ff:c9:2f:
         5d:b2:de:f6:87:bd:24:69:db:de:a2:02:65:06:8b:fa:e5:57:
         ff:0d:1a:98:fa:30:a6:a6:dc:97:fe:78:c4:8b:ee:e7:e3:43:
         5f:39:72:78:54:a5:87:c5:92:7b:c2:d0:3c:4b:ba:22:c8:3f:
         93:b8:a1:ab:f4:c3:35:ad:7d:63:68:52:03:41:f4:34:c6:00:
         6e:8c:53:c6:d5:3f:72:b7:cf:c6:d2:b8:92:c8:10:c8:92:2f:
         ce:b1:56:fa:73:22:77:39:6c:30:aa:6f:8d:36:f5:a3:53:01:
         2c:32:4c:85:f8:5b:a7:33:97:a0:c6:89:08:31:13:6c:c6:92:
         f7:86:45:89:53:d1:17:b1:67:6f:94:91:26:15:eb:c5:bc:9d:
         ac:e1:e8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 23:33:39 2026 by rpki-client