Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7bc440c8-9a4f-3416-b13a-a12e972e57bd.roa
File:                     7bc440c8-9a4f-3416-b13a-a12e972e57bd.roa (raw, json)
Hash identifier:          MQ1wAhBTCUpg28OSKmZWKPO2MP6VzCnJxaWJPgyobr4=
Subject key identifier:   44:7C:34:0F:80:81:F4:55:6A:51:9A:2B:BD:79:82:98:8F:63:92:74
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F37CF7E87D2CFF3AFB44EA300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7bc440c8-9a4f-3416-b13a-a12e972e57bd.roa
Signing time:             Fri 18 Sep 2026 17:22:59 +0000
ROA not before:           Fri 18 Sep 2026 17:22:59 +0000
ROA not after:            Thu 17 Dec 2026 18:22:59 +0000
asID:                     54252
IP address blocks:        64.69.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:cf:7e:87:d2:cf:f3:af:b4:4e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 18 17:22:59 2026 GMT
            Not After : Dec 17 18:22:59 2026 GMT
        Subject: CN=90745c44-3b5e-4595-808c-88577af0bbc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:cd:4f:4a:3b:79:20:51:d2:bf:15:45:ac:
                    27:a8:24:fb:88:b3:9d:e3:b4:1c:dc:ef:eb:d1:47:
                    e8:85:b3:98:80:1d:5d:89:cd:5c:bb:f1:73:35:b4:
                    db:20:71:7a:9c:15:dd:27:5e:b9:0c:a6:f3:f0:2c:
                    e4:63:53:93:8b:3c:04:25:ee:f8:fa:73:e8:fa:dc:
                    60:87:44:ae:9a:d7:23:b7:44:21:8f:36:c4:04:ff:
                    27:da:cd:bc:13:29:37:79:25:6c:ed:c8:66:af:2e:
                    92:cd:9d:40:19:73:e6:38:76:28:d2:ac:3c:33:94:
                    70:77:57:43:62:24:01:47:ff:06:6e:a2:47:2f:78:
                    6c:ff:eb:e5:1f:9f:bc:8c:c7:91:14:64:0f:b4:c4:
                    75:2b:82:bf:52:5f:6c:b8:70:ef:fe:9e:33:ba:d0:
                    fb:03:07:d3:d9:9c:34:49:66:21:4f:d5:fb:09:2b:
                    0b:ff:fe:39:84:92:76:a9:fb:f8:7e:27:79:64:c1:
                    5f:a2:2a:3a:76:e6:5a:b9:ce:26:d5:0c:23:af:25:
                    52:89:9e:2f:74:ae:e3:82:7d:bc:e5:3e:76:5f:03:
                    92:e0:48:de:fb:1b:60:d9:1d:72:e9:90:5c:f3:52:
                    d8:68:6b:f4:41:5d:ed:e0:10:67:c2:2f:be:04:dd:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:34:0F:80:81:F4:55:6A:51:9A:2B:BD:79:82:98:8F:63:92:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7bc440c8-9a4f-3416-b13a-a12e972e57bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:2d:9f:e5:1e:6b:81:50:7e:a3:13:e9:8c:90:ee:69:80:a3:
         29:be:1d:cf:80:53:7a:d8:5c:99:c7:0e:a1:95:08:11:ec:e2:
         12:a9:4d:9d:e4:da:b0:08:da:16:15:69:2c:08:cb:af:d4:78:
         b1:8d:b2:96:f5:75:45:51:b3:de:90:21:a4:c5:60:1d:95:d4:
         0f:d9:90:29:9d:19:4d:87:4b:7b:e5:ed:1b:1b:29:3b:c3:b8:
         8f:69:5a:d1:93:be:ee:9f:5f:fe:92:2f:bd:0d:d2:a7:cd:de:
         c7:a7:f6:ea:b7:45:8c:a9:45:62:40:f9:dc:06:e9:e7:b2:b1:
         06:70:91:72:61:2a:21:af:a4:c1:dd:e5:56:29:53:2b:f9:62:
         a0:20:5d:86:8e:94:4d:9c:cd:b8:fc:7c:b6:99:2a:a5:bd:61:
         58:b0:81:df:60:24:7b:60:a7:87:32:49:f4:aa:7b:86:5f:6a:
         78:0a:4a:e7:d5:f5:f2:29:89:8e:6c:41:43:bd:98:f7:12:9c:
         21:5e:42:97:88:a0:16:80:4d:d4:26:8a:c3:12:0e:52:7a:d8:
         76:16:e1:2b:7f:cf:5a:fe:a3:5d:7d:03:09:d1:2b:8f:5e:ba:
         5a:f1:54:00:53:4a:29:2e:09:d6:52:56:a6:ca:3c:da:cf:1d:
         17:0d:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:44:05 2026 by rpki-client