Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/64271b3e-ba1f-345a-946d-da3348ab099b.roa
File:                     64271b3e-ba1f-345a-946d-da3348ab099b.roa (raw, json)
Hash identifier:          MxqZva4GKq5pR+pJko7arHPBTnczyz8pykYAnjGfuRA=
Subject key identifier:   4B:4A:2A:C6:86:C2:12:82:87:21:09:F5:3E:67:95:EF:EC:74:D0:4B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E0CFA594ABF569B741CB1AD20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/64271b3e-ba1f-345a-946d-da3348ab099b.roa
Signing time:             Wed 03 Jun 2026 16:22:38 +0000
ROA not before:           Wed 03 Jun 2026 16:22:38 +0000
ROA not after:            Tue 01 Sep 2026 16:22:38 +0000
asID:                     834
IP address blocks:        216.75.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:fa:59:4a:bf:56:9b:74:1c:b1:ad:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  3 16:22:38 2026 GMT
            Not After : Sep  1 16:22:38 2026 GMT
        Subject: CN=2d5aac9b-9e5e-4f3b-800e-58ba06c290a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:c7:3e:f9:5b:e6:38:e4:ab:5c:a8:75:4d:
                    34:db:51:e9:7c:a2:cb:5a:f9:97:0b:ac:0a:be:95:
                    3a:12:05:81:ee:63:1f:1a:2e:8d:ea:bb:3a:74:17:
                    d5:da:b1:9c:21:2a:0b:ac:f0:93:33:0b:65:3b:ca:
                    7d:6d:2a:71:3a:05:75:e7:f7:f5:a2:66:45:41:34:
                    b5:58:0b:ab:a2:c8:c3:70:12:4d:0c:4f:14:4c:16:
                    af:9c:a9:c2:0f:e5:15:fe:8f:5e:d6:90:a1:49:ab:
                    cb:d7:65:40:1b:47:70:94:05:fe:35:75:2e:b0:df:
                    88:d8:36:e3:69:24:09:6a:4c:45:ae:9c:70:3f:43:
                    98:c1:13:fa:57:c2:d3:fc:b2:e3:f5:79:7e:43:68:
                    92:c9:96:b5:56:94:b8:60:78:5e:32:ac:a9:70:00:
                    96:5e:a3:92:37:c6:ed:aa:82:60:5d:df:11:d5:be:
                    d8:51:6c:a5:23:c8:19:74:f6:c1:e4:c9:31:74:49:
                    d8:4b:f2:98:12:6f:41:ed:8a:b6:0a:5e:04:af:b5:
                    e4:9e:53:83:35:1c:0a:16:3a:95:e0:3d:8e:8c:76:
                    52:ab:10:fb:fa:28:47:e6:93:6e:2d:c8:a4:54:fa:
                    71:44:56:30:5f:66:d8:d9:a8:b9:c3:f0:91:8a:8a:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:2A:C6:86:C2:12:82:87:21:09:F5:3E:67:95:EF:EC:74:D0:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/64271b3e-ba1f-345a-946d-da3348ab099b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ac:82:6c:89:ac:0f:62:0d:31:a8:93:5b:7a:fa:86:92:bc:
         1c:6f:f5:39:0b:81:f8:d9:72:0a:e7:62:1c:77:81:63:a9:45:
         aa:e7:87:3a:0f:d5:b3:65:0e:64:f4:67:a8:ae:1a:b7:fa:e9:
         8a:cb:bd:e0:fb:84:32:c1:b4:68:e5:5f:47:d7:9b:c9:d2:bf:
         e8:e2:80:7b:4b:11:c9:86:71:b7:7d:df:f8:1b:e4:37:3c:0a:
         38:88:d1:37:cd:f1:dd:ea:45:33:11:ae:95:3b:b9:a5:c6:8b:
         99:27:16:ea:ef:a5:07:4c:e7:78:bd:3e:52:67:a0:26:40:c7:
         b8:1e:bd:b4:6b:84:af:63:63:5f:96:61:3d:22:b4:28:bf:33:
         95:74:e5:67:1d:df:ad:8d:cb:82:53:da:1b:42:ed:cd:54:6d:
         4e:50:93:00:36:c1:2f:47:49:cc:11:3e:aa:ee:06:58:0f:65:
         2d:0b:2d:47:d2:43:bd:00:bd:fb:ca:e5:64:38:aa:38:a0:c5:
         f4:6d:5d:59:db:5d:2c:a8:f9:51:2b:bc:4a:f0:96:38:6a:a4:
         bf:39:fd:00:a6:3c:8f:a5:85:af:a8:ae:bd:32:cf:48:75:dd:
         e1:82:4b:e0:88:98:92:67:2b:90:f8:0b:03:ca:58:21:d7:98:
         53:c6:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:47:14 2026 by rpki-client