Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6a24e2fb-01d2-3815-aa94-52f72dc0177d.roa
File:                     6a24e2fb-01d2-3815-aa94-52f72dc0177d.roa (raw, json)
Hash identifier:          +jecUtQDQoFhpYAZAifjxSO6SzBA5E8ekg5LFtQS/l8=
Subject key identifier:   2C:FA:E9:E4:2F:CC:5D:B9:B1:93:31:DD:43:47:88:A3:69:D5:65:FA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA794FA98D4557D49D4819180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6a24e2fb-01d2-3815-aa94-52f72dc0177d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     137517
IP address blocks:        216.74.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:fa:98:d4:55:7d:49:d4:81:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a28e88e0-148a-4d76-9e8a-3b4c8a13f079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:4b:10:9d:68:ec:7d:0e:9d:27:45:7b:e5:
                    24:21:48:98:44:02:9c:59:d5:63:17:86:23:a6:59:
                    30:f9:ec:ff:f1:48:b0:c3:dd:1d:73:1c:1e:13:db:
                    0d:a7:5f:47:fd:c3:12:f2:1c:ce:14:2b:46:43:80:
                    aa:55:41:2b:a4:93:ad:a6:ee:6b:4f:b7:1f:1c:ef:
                    9d:6c:9e:cc:29:73:92:ea:1e:96:e6:2e:c2:a2:81:
                    0e:1d:ba:a4:80:c0:1f:f2:27:d9:c6:03:95:60:e5:
                    d9:93:9a:de:e8:99:1d:fb:a7:f1:90:4f:54:b9:fe:
                    9e:f5:dd:f2:16:d7:3f:4d:25:b0:c8:5a:7e:ce:e7:
                    63:6a:92:49:d1:a9:9a:4b:c8:5e:c7:a3:2f:7e:50:
                    96:e8:ed:9f:cd:a9:1d:96:82:b1:3f:30:1f:d4:4e:
                    d7:0e:14:00:18:f8:f4:c4:6b:a7:1a:9c:52:0b:96:
                    8d:7e:25:cc:45:c5:04:4b:64:97:45:df:d1:bb:78:
                    db:bf:73:b8:80:d3:98:a4:ab:8c:99:11:a5:eb:2f:
                    03:d7:fd:63:d1:cf:3d:68:6c:7e:f0:b1:6f:f6:e6:
                    67:c0:86:aa:4b:2d:a2:9e:0e:85:8b:85:6e:0d:b1:
                    42:fe:68:d0:7a:d0:47:31:2c:71:10:ef:e0:92:57:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FA:E9:E4:2F:CC:5D:B9:B1:93:31:DD:43:47:88:A3:69:D5:65:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6a24e2fb-01d2-3815-aa94-52f72dc0177d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:50:7c:a4:fd:8b:24:10:93:a7:02:05:d3:62:6e:6c:ab:c9:
         f7:c8:9b:da:5a:8e:96:e3:a2:77:0d:db:f8:35:81:18:5e:83:
         19:83:6d:54:e2:db:fd:6f:2e:18:aa:a4:cb:4b:5a:74:a6:57:
         38:6e:18:77:50:7d:ad:db:ac:ca:30:4e:ca:f5:8c:35:fb:2d:
         0e:76:f5:69:38:07:b5:f1:8d:26:c6:b2:d6:84:8b:d7:1a:c2:
         03:1f:19:eb:58:c5:bf:47:04:f2:dd:41:dd:b3:db:a9:cf:0c:
         20:00:bc:d3:8e:52:4e:32:e6:7d:78:6d:42:65:c3:84:b7:04:
         65:e8:68:9f:3c:32:00:5c:6b:aa:52:33:f0:cb:09:3d:cd:9b:
         0d:e9:1b:2d:bb:89:87:20:ed:2c:d7:3f:ce:46:07:2a:63:07:
         14:a9:b8:d6:a2:86:fe:e9:eb:c0:c3:fb:20:45:36:d1:9d:16:
         27:48:0b:94:ec:66:52:8b:c7:2a:88:12:3c:b0:46:cb:04:16:
         98:19:fa:74:c3:75:5b:63:e3:72:56:7d:f0:8b:c5:70:87:37:
         e0:94:65:e8:06:e8:25:dd:5a:13:ec:aa:9f:2b:72:53:c2:26:
         0c:f2:58:b3:61:da:d1:d3:3c:b4:74:6a:54:c7:43:32:50:51:
         60:49:bf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 13:38:04 2026 by rpki-client