Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fe77dad-5673-31d0-9308-53b9ea2c1f31.roa
File:                     5fe77dad-5673-31d0-9308-53b9ea2c1f31.roa (raw, json)
Hash identifier:          RbtBG5kHnHmpxBytWmpjP/tkUjihI3p1pHcTelIBWVg=
Subject key identifier:   D1:87:3C:67:06:4A:0E:F2:ED:70:5C:1E:36:12:13:1B:81:3B:11:73
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA79CCB6DBBE2B6F3A6858280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fe77dad-5673-31d0-9308-53b9ea2c1f31.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     153383
IP address blocks:        64.69.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:cb:6d:bb:e2:b6:f3:a6:85:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=238f89ac-3dae-4a3d-a4ef-fee0b5b4bd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:9f:e1:d1:a3:f8:64:11:fa:ad:a2:1f:03:
                    40:db:f9:0d:af:9a:ef:f3:d7:3a:7b:24:2d:de:d3:
                    62:49:75:c1:7e:4a:0a:7f:02:e2:92:18:56:10:e8:
                    65:92:01:e0:24:c5:3f:fb:e0:a9:d2:dd:f8:b4:bc:
                    0f:41:35:7f:cf:52:4e:e0:94:3d:e5:00:ae:1b:da:
                    cb:32:55:1f:e5:71:a8:ae:b2:4b:95:fe:51:a5:fe:
                    21:c0:a7:c7:9e:c7:19:cd:cf:31:e2:87:d3:a1:c9:
                    2f:d2:ef:5b:eb:00:6b:ae:b7:fd:25:1e:8c:88:f2:
                    b1:4d:d5:80:b1:f7:5c:e0:d2:75:78:26:34:ba:dd:
                    59:22:27:83:c0:29:59:ce:0d:83:98:0e:39:2d:1f:
                    ea:66:bc:12:4f:ff:52:37:37:b2:c4:53:b3:0f:1e:
                    bb:05:e0:4b:49:d6:2c:6b:04:d6:0a:6c:14:5c:d1:
                    b6:e4:18:6a:ee:ca:e7:82:a4:78:49:7f:a6:27:c3:
                    c7:c1:c4:25:03:22:44:d7:77:ec:79:cb:93:27:b3:
                    5b:77:57:a8:2e:26:e3:e6:06:23:1b:85:1e:b2:bb:
                    04:6a:cd:ad:8b:ac:e7:94:b7:33:76:9a:c9:1b:b4:
                    7a:a8:db:a8:27:f0:35:a5:66:0f:69:27:49:67:d5:
                    6a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:87:3C:67:06:4A:0E:F2:ED:70:5C:1E:36:12:13:1B:81:3B:11:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5fe77dad-5673-31d0-9308-53b9ea2c1f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:59:07:25:0c:e2:8f:4d:b2:8d:2f:b0:ee:d8:f5:d7:56:1a:
         48:7d:e2:aa:d0:5c:71:e4:75:f2:62:dd:6a:8a:a8:30:f2:48:
         27:84:85:e6:ca:b8:01:e5:10:36:05:06:ee:fc:60:34:f1:f4:
         d2:b0:d5:19:17:3d:4d:e5:dc:ff:76:c1:26:87:1d:cf:ee:18:
         5d:0c:cf:f0:c9:c1:d5:b7:0a:83:4b:77:5c:12:2d:8e:27:ff:
         cb:d2:8b:bb:34:d1:be:85:f1:2c:d4:bf:9c:19:94:07:5f:94:
         2c:ec:16:1f:cd:40:11:42:76:75:d7:cd:03:75:ae:3d:ec:81:
         b0:4e:4c:7f:24:9f:12:fe:93:39:d4:34:a6:90:5d:73:42:98:
         c0:fb:6b:ce:73:1d:25:e0:12:69:54:51:3b:41:f0:f1:6e:9f:
         43:d1:14:6c:47:27:a1:48:ef:d2:59:56:b9:ca:4c:d7:f4:e8:
         29:2d:ce:6c:58:85:ca:57:36:5d:30:49:16:e5:a1:e8:79:77:
         4e:28:f8:7e:0f:46:80:02:6b:2c:b2:55:ed:83:48:e0:a6:00:
         f6:ae:41:46:08:0d:3e:7e:47:75:04:e4:85:e0:82:ab:4d:b5:
         26:04:81:c6:24:4e:89:53:c1:98:ad:21:ae:f6:f4:68:20:a5:
         d1:3a:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 19:19:15 2026 by rpki-client