Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6859cce6-25bb-3d49-9a20-8f5b57ac9183.roa
File:                     6859cce6-25bb-3d49-9a20-8f5b57ac9183.roa (raw, json)
Hash identifier:          YRurujqnwU5ysUDCrE48YoqxsyoNTrIzyTdyYxin1lc=
Subject key identifier:   53:F3:8E:86:3D:8F:14:9E:53:FF:39:FA:FF:54:84:1B:26:95:AB:C6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA78872AFAFCCF55921A0D240
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6859cce6-25bb-3d49-9a20-8f5b57ac9183.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     47007
IP address blocks:        216.183.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:72:af:af:cc:f5:59:21:a0:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3a59a56f-1caa-428b-a2af-8ec49df26df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:c4:53:ae:b0:48:ea:6e:d1:de:72:6c:d7:
                    b3:89:48:e8:77:df:7f:ca:d9:60:c9:ae:61:b7:46:
                    17:1b:0a:28:33:7b:cf:e6:9f:11:fb:04:dd:cc:cd:
                    6f:8b:f2:6e:ed:7e:c0:2b:c1:81:76:90:21:d4:69:
                    37:e9:30:e2:f2:50:47:bb:c8:57:a6:51:60:11:57:
                    67:aa:c8:72:19:bc:4e:06:1f:2e:1f:19:5d:a9:a9:
                    1b:ca:05:aa:68:df:2d:bb:21:18:a5:a5:c2:d0:62:
                    26:31:09:e9:99:2f:cc:0e:d4:65:1d:6d:90:74:93:
                    68:77:ed:d2:3d:bd:a6:3f:f7:88:f4:81:ff:24:51:
                    f7:bb:e2:f4:03:01:cb:43:9f:92:01:ba:37:a7:75:
                    92:95:27:bd:e6:88:cb:ed:57:2d:00:80:15:05:a6:
                    bb:af:3c:1b:b5:3f:a0:76:b0:21:44:88:c5:2e:fc:
                    e9:e5:3b:af:0a:3b:20:6e:8a:b5:02:10:a8:9a:6b:
                    9d:0c:ab:3a:54:75:5d:ef:dd:90:29:71:f6:95:80:
                    7a:96:8b:2a:0f:9c:db:5e:a6:29:da:25:76:e8:3f:
                    53:35:6f:cf:9a:15:07:02:f8:51:ab:b7:7c:f7:8c:
                    47:19:dc:00:02:3f:09:1b:1f:95:00:4c:ef:67:a4:
                    90:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F3:8E:86:3D:8F:14:9E:53:FF:39:FA:FF:54:84:1B:26:95:AB:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6859cce6-25bb-3d49-9a20-8f5b57ac9183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0e:b3:cf:ff:10:5f:b5:01:c1:48:02:da:56:9c:ee:4f:af:
         c2:8e:91:a7:b0:fd:8f:11:4a:9e:dd:97:da:8e:3b:24:b2:86:
         e8:38:ab:d3:17:7b:5c:53:f0:35:b3:f9:16:86:01:7f:e6:cf:
         fa:32:26:ed:3f:3e:58:2e:5d:31:f5:56:16:0a:29:fd:21:bc:
         1d:b6:fa:ff:cf:a1:69:e2:e6:10:d6:bd:fb:39:a3:50:35:c4:
         d0:93:83:e1:cf:7b:25:02:94:3a:3f:fe:f3:bb:59:eb:97:b4:
         7a:70:52:14:a6:a9:fa:a9:9d:db:85:2e:49:00:04:f5:62:fb:
         4f:da:0c:8f:c5:b6:89:9b:95:31:12:7e:84:16:d9:24:e7:f2:
         16:ba:2f:5d:9f:9a:9c:65:22:c3:96:c0:9d:16:8f:3a:3b:27:
         22:e9:37:07:d0:75:22:ca:c8:d6:60:9b:fa:6d:c6:47:14:e0:
         0a:91:03:18:58:21:fe:f6:47:07:d0:19:78:72:12:15:c8:85:
         9e:4c:d1:f8:3c:dd:bc:31:df:97:f8:83:d8:a7:87:be:37:43:
         00:c5:38:b6:cd:08:d5:50:c0:02:ec:41:19:62:62:6c:41:c4:
         22:17:b0:55:c1:ec:ac:4e:72:48:02:43:63:35:f0:5b:8d:3b:
         63:ab:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 11:56:45 2026 by rpki-client