Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6b612949-e550-34be-8afb-7cab5ad49e9d.roa
File:                     6b612949-e550-34be-8afb-7cab5ad49e9d.roa (raw, json)
Hash identifier:          vt+dz+Uqj9pUp8U5j1quIiNGp4BNvd/hGf+7OL4Tw8o=
Subject key identifier:   BA:DC:46:FF:21:0D:17:5E:2E:E4:5B:0D:C7:85:6C:08:55:C0:30:05
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F888F1F26DC99DD55D49CF000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6b612949-e550-34be-8afb-7cab5ad49e9d.roa
Signing time:             Sat 17 Oct 2026 15:33:45 +0000
ROA not before:           Sat 17 Oct 2026 15:33:45 +0000
ROA not after:            Fri 15 Jan 2027 16:33:45 +0000
asID:                     152726
IP address blocks:        104.247.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:88:8f:1f:26:dc:99:dd:55:d4:9c:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 17 15:33:45 2026 GMT
            Not After : Jan 15 16:33:45 2027 GMT
        Subject: CN=b0430514-7c3e-4ab6-96f8-9d70b4b809a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:01:9e:03:1e:14:df:87:36:52:1c:22:b7:
                    f9:7a:ce:1b:85:f1:75:9b:fc:75:8d:22:c9:91:32:
                    a4:39:fa:63:5b:12:8c:93:24:85:0f:30:a4:18:21:
                    d6:4e:f5:68:78:53:00:d6:da:58:22:21:d8:5c:f3:
                    15:00:70:c2:ed:a1:39:05:b8:c1:45:66:5f:bb:85:
                    0e:f3:a2:60:b0:36:4f:98:06:2a:6c:be:0c:fa:ec:
                    95:eb:31:b8:30:44:4e:99:51:9b:eb:b5:48:51:40:
                    8d:2f:b6:75:54:60:ae:df:a7:10:ce:75:f7:91:81:
                    d1:ec:f0:b8:0f:8b:53:26:15:ae:3a:a1:27:6f:0b:
                    5e:22:8a:e6:85:9b:5b:72:92:74:43:78:6d:2c:84:
                    9a:b4:68:03:79:95:89:60:eb:88:b2:2a:3a:0c:33:
                    7c:f1:d6:a2:ee:31:fd:7d:1c:dc:98:be:d7:2b:55:
                    82:8e:14:9d:23:3b:ed:87:ca:7c:cf:51:85:88:a2:
                    55:59:32:68:57:2e:85:03:bb:97:87:10:9e:f2:6b:
                    f1:31:ef:51:68:ba:51:7c:f5:3c:81:74:8f:65:e7:
                    fb:60:fa:82:7a:46:ab:df:f1:80:59:55:f9:b1:2a:
                    a0:e7:52:05:01:ef:69:aa:c7:e1:79:99:d3:49:ab:
                    71:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DC:46:FF:21:0D:17:5E:2E:E4:5B:0D:C7:85:6C:08:55:C0:30:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6b612949-e550-34be-8afb-7cab5ad49e9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:90:24:b1:ff:ac:6a:e9:69:3b:da:4e:4f:75:b7:bf:6f:2f:
         be:9b:fb:15:a2:29:69:99:09:a2:2b:82:b1:97:00:da:b1:5f:
         9b:fa:77:79:95:2b:2c:21:62:ee:2a:56:a4:fe:f9:c3:e3:ea:
         86:99:45:c6:41:ad:17:42:12:7f:fe:66:ff:9e:8e:bc:93:f8:
         73:dd:ef:da:74:91:03:81:50:7b:76:cd:7f:7b:ce:0c:ee:66:
         9e:1e:94:5f:ed:24:b0:db:a9:19:7f:06:f7:30:ff:43:8f:1f:
         af:63:b6:74:67:2e:43:15:2c:ff:93:95:7c:c6:9e:c0:9d:5e:
         22:1b:d1:b4:a7:39:3c:f6:c3:6e:70:96:62:3b:88:d3:5f:ab:
         70:ce:8a:d6:83:ef:8c:b4:72:3f:71:53:72:3a:d3:05:e3:e5:
         bb:fc:a4:51:ba:cc:90:a0:ac:67:f8:22:fa:f2:8c:70:49:b8:
         1d:ac:19:cb:20:35:d0:e5:0b:37:43:a7:f9:bb:b2:2f:43:1b:
         2d:19:e6:20:02:c3:2f:59:16:a6:e9:02:ad:40:ed:f8:52:d3:
         d6:23:2b:ed:dd:ad:73:cb:44:03:e5:f4:71:4c:7e:72:42:f9:
         de:fe:af:14:04:72:20:33:eb:f7:27:69:1a:17:ca:cf:99:45:
         72:9b:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:29 2026 by rpki-client