Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7eb1d532-3342-382c-820a-32c57d5e6923.roa
File:                     7eb1d532-3342-382c-820a-32c57d5e6923.roa (raw, json)
Hash identifier:          SlGDEoNcIfsgB84XXgi4heLDOS8lAuImJkMG6VyceVU=
Subject key identifier:   E8:AD:C8:6B:60:04:E5:74:CD:E0:53:E6:71:33:55:53:1F:05:BD:34
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F37D008DE29B67F6213097920
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7eb1d532-3342-382c-820a-32c57d5e6923.roa
Signing time:             Fri 18 Sep 2026 17:24:04 +0000
ROA not before:           Fri 18 Sep 2026 17:24:04 +0000
ROA not after:            Thu 17 Dec 2026 18:24:04 +0000
asID:                     64267
IP address blocks:        174.140.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:d0:08:de:29:b6:7f:62:13:09:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 18 17:24:04 2026 GMT
            Not After : Dec 17 18:24:04 2026 GMT
        Subject: CN=c9a65469-56a8-46d0-abbc-08a8b161cae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:e9:7b:d1:a5:3e:6d:58:d7:89:9f:ed:92:
                    83:ef:9d:8c:39:40:f6:fb:15:2d:36:c9:3b:7e:6d:
                    b5:7e:13:59:5e:a4:31:57:87:89:6f:23:2e:bb:50:
                    80:09:98:12:9e:27:f5:c7:ac:b4:09:c0:e2:20:44:
                    33:20:c0:a2:17:85:c8:4e:d5:de:71:77:5f:0a:e9:
                    94:e6:18:48:37:ed:7b:f8:05:7d:7e:c6:d7:30:2b:
                    85:cd:c0:98:62:8a:8c:52:6a:05:c3:3b:66:43:7d:
                    0c:d3:24:fb:0b:a2:a9:8b:16:7b:60:8f:2e:3f:9f:
                    ce:ff:86:a5:a8:e3:9b:52:43:6f:e7:14:2a:72:ef:
                    bb:83:a0:9e:d5:d1:27:f5:d2:ed:dc:a8:31:33:d6:
                    06:8f:6e:54:ef:d0:8b:ce:ac:b6:e5:a5:d9:20:86:
                    87:f9:1d:47:e2:b6:d3:11:95:ad:83:15:75:67:57:
                    62:45:82:7d:c1:db:64:6e:06:79:a5:e6:d3:46:a6:
                    f9:2b:15:5e:e8:02:1b:2b:94:bc:d5:97:1a:17:f0:
                    14:ee:75:16:4a:aa:51:04:bf:32:38:4e:64:9c:bf:
                    a8:ec:aa:49:5e:e0:df:fe:8d:75:51:eb:e1:d0:f2:
                    12:26:03:bb:8c:6b:67:34:0d:62:47:3d:ad:b4:3c:
                    59:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AD:C8:6B:60:04:E5:74:CD:E0:53:E6:71:33:55:53:1F:05:BD:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7eb1d532-3342-382c-820a-32c57d5e6923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:05:d3:e6:14:7d:8c:d9:80:09:f7:f0:f3:10:85:74:72:
         98:5a:77:26:df:db:9d:53:a1:d7:99:7f:57:94:dc:cf:d3:75:
         7f:dd:3f:f3:87:52:58:ed:8b:34:f7:70:12:6c:6d:fd:39:ae:
         44:26:c7:60:dd:c8:38:ec:29:f0:91:ac:82:56:2d:01:f6:03:
         65:6a:64:72:e8:ec:88:62:b3:a1:b1:a4:ee:56:3f:84:67:d0:
         4e:33:d4:37:f8:83:33:0c:e9:78:71:b1:f5:dc:fb:7c:a3:15:
         92:34:6a:b4:ad:aa:62:fd:47:7b:71:f4:1c:f2:89:4e:35:2a:
         cf:51:6b:78:78:3a:b6:47:35:fb:e7:f2:b5:fa:24:26:01:b3:
         08:83:0e:26:40:97:b3:44:9b:69:c1:f7:fe:36:44:a5:2e:31:
         52:c2:98:99:87:26:0c:9c:1a:86:bc:98:92:11:60:b0:11:4c:
         6d:8f:90:3a:e6:79:06:72:9b:f9:3b:25:5a:2e:c9:c6:24:46:
         9c:8f:aa:e2:4a:01:1f:a4:a2:35:95:a9:77:d4:09:f7:5d:67:
         69:93:47:29:4f:86:c6:16:1f:6f:1e:de:d9:c1:5e:c7:6a:fc:
         60:38:4a:91:84:8b:cb:ab:87:de:b8:a9:ce:a2:77:2c:ff:9e:
         57:fc:24:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:45:07 2026 by rpki-client