Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70ffdb46-f300-315c-975f-5785419fb74d.roa
File:                     70ffdb46-f300-315c-975f-5785419fb74d.roa (raw, json)
Hash identifier:          AW6nckptfKUZuOarey5WOfm3eZuGAipYTHdYr05cdKM=
Subject key identifier:   E4:18:D8:DF:76:EA:D0:24:21:7E:8C:BD:FD:43:52:86:BB:B7:2A:8B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F2957B765B4706761F51DB100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70ffdb46-f300-315c-975f-5785419fb74d.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     174
IP address blocks:        216.75.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b7:65:b4:70:67:61:f5:1d:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=4afba608-3733-4817-a08d-c011b6c7d6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:9e:a5:ae:b1:f4:7a:6d:70:35:75:25:f3:
                    f2:2a:7c:05:0e:16:e5:24:70:92:d1:5c:bb:f2:f5:
                    54:1f:e1:db:97:06:a9:8f:90:97:6c:56:59:e0:6a:
                    86:27:5b:af:94:e4:a3:ff:8e:a7:ae:df:60:b8:59:
                    f0:75:91:86:d3:7e:6e:2a:16:52:80:15:72:09:6e:
                    a3:68:19:55:74:56:a9:f4:a1:d3:6a:42:4d:5e:ab:
                    82:be:b1:2b:e0:6d:1b:31:d3:05:0c:d0:8d:2c:3f:
                    0c:27:b2:cf:0f:37:b1:ac:f3:7d:36:26:86:1d:16:
                    98:4a:3f:ef:d0:89:10:85:54:18:0b:75:3b:2d:ff:
                    f0:d3:a7:29:df:1b:f0:66:24:ed:db:eb:fb:9e:48:
                    16:ff:e5:ec:a0:c6:d3:02:1b:b1:51:2c:e1:45:95:
                    ca:21:61:c6:73:80:4e:e6:46:c8:d4:76:db:51:48:
                    33:56:5f:ce:33:14:ec:29:46:09:87:62:78:5f:8b:
                    13:b9:0c:b5:24:ee:de:7a:66:7b:14:57:96:e3:2e:
                    9d:99:5e:46:be:9b:2a:10:98:a1:74:38:ec:eb:9a:
                    d6:1e:27:f0:c6:4a:3e:53:a6:79:a7:d8:ae:d5:73:
                    ea:9b:bf:8a:38:4e:d8:a3:98:3e:20:26:1a:09:43:
                    53:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:D8:DF:76:EA:D0:24:21:7E:8C:BD:FD:43:52:86:BB:B7:2A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70ffdb46-f300-315c-975f-5785419fb74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:b1:f0:6f:92:af:49:3f:d4:1a:e5:00:70:50:74:29:c6:
         e4:e6:de:3a:45:8e:11:ff:f7:ee:6d:53:d2:e2:57:ba:4f:87:
         b1:5a:89:c4:38:d4:4c:c5:f0:3c:47:16:2f:72:9b:69:e5:93:
         7c:2a:a9:0d:e6:81:57:f0:de:cb:b9:58:a9:bf:56:15:af:d5:
         f4:d3:d4:9c:27:e7:a3:fa:63:60:de:5e:d8:e3:82:1d:06:2f:
         67:93:c8:f4:bd:58:79:4b:aa:3d:a7:be:8e:4f:13:1a:c6:fd:
         da:28:ff:3f:b3:3f:17:a6:36:b6:5c:42:18:16:48:ad:62:17:
         af:85:85:b7:4c:cb:8b:60:b0:1b:85:ec:45:0d:f2:0d:de:56:
         ce:79:c9:16:47:6b:0c:f7:56:ac:bf:c1:62:3a:db:db:92:fb:
         c8:2f:26:85:5a:0b:95:e4:00:30:91:19:5a:2d:5f:95:42:32:
         e1:4e:8a:70:0e:8e:41:c0:7b:af:47:98:fc:d0:4c:e8:d9:23:
         b5:da:0c:a0:73:6a:93:a8:85:eb:d6:d0:d8:ae:44:63:85:45:
         bf:fe:42:2b:24:b7:b7:d1:4a:a3:fb:85:e6:b2:cb:b7:59:a5:
         d2:83:92:21:a4:8c:8f:09:b5:e7:d8:93:d2:45:bf:be:1f:24:
         b8:f9:6c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 11:18:40 2026 by rpki-client