Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85d1c059-3b4b-3d7e-9123-4e654a0fe127.roa
File:                     85d1c059-3b4b-3d7e-9123-4e654a0fe127.roa (raw, json)
Hash identifier:          nyqVxGcJQqRibdS1mgfm/AqxgszE7aqftK+H5fiZXus=
Subject key identifier:   B2:5A:CB:A7:70:46:0F:97:4A:D3:06:D3:9D:81:0F:44:B7:6D:BE:B6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E95CF0ED5A34537DC411E5970
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85d1c059-3b4b-3d7e-9123-4e654a0fe127.roa
Signing time:             Wed 22 Jul 2026 16:41:09 +0000
ROA not before:           Wed 22 Jul 2026 16:41:09 +0000
ROA not after:            Tue 20 Oct 2026 16:41:09 +0000
asID:                     17252
IP address blocks:        174.140.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:cf:0e:d5:a3:45:37:dc:41:1e:59:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 22 16:41:09 2026 GMT
            Not After : Oct 20 16:41:09 2026 GMT
        Subject: CN=e27257b5-b645-4a93-a37f-7c177fc829f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:9f:e1:0b:6c:1f:41:df:04:a2:46:fb:6c:
                    ad:a3:1f:57:d7:8c:05:76:0a:a8:46:18:69:fd:05:
                    80:a4:af:37:6f:65:95:f7:fd:e0:01:7f:9b:12:2c:
                    1e:9d:9a:97:ac:a6:ce:93:49:a3:de:8b:be:53:63:
                    fb:41:87:16:ad:b5:72:b6:f6:87:e0:5e:23:85:9a:
                    f6:ba:32:05:27:d9:95:1c:35:fd:41:56:da:f0:03:
                    b9:f5:b8:c7:0b:aa:79:57:1f:27:d4:38:29:8a:69:
                    75:18:3e:73:f2:bf:d9:7c:3a:9a:fa:2d:c9:02:a3:
                    6f:2e:8a:c3:ce:25:10:6d:f9:a1:f9:aa:ca:f8:73:
                    a7:23:04:76:df:fe:e4:61:bb:62:76:6f:cc:45:80:
                    7a:6f:01:9b:59:74:06:95:59:ee:49:8d:6f:a3:2a:
                    48:86:c7:1a:a0:73:2a:b7:1e:70:94:52:2d:2b:c4:
                    59:9f:87:fb:1b:76:c4:1a:c9:02:dc:2c:7d:87:4a:
                    4b:09:13:69:26:c3:59:39:42:d4:33:10:2b:79:d6:
                    06:ca:a7:10:48:58:f8:8b:fb:4d:9e:2b:12:d3:a1:
                    31:29:78:0d:a6:47:d1:a0:2d:18:b9:8d:90:f5:76:
                    94:99:94:30:98:62:ed:6f:6c:65:bc:82:54:32:87:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:CB:A7:70:46:0F:97:4A:D3:06:D3:9D:81:0F:44:B7:6D:BE:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85d1c059-3b4b-3d7e-9123-4e654a0fe127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:e0:4b:02:97:76:a7:4d:e9:c1:95:f2:98:74:28:9c:ff:d2:
         6e:26:c7:ee:78:dc:b6:90:40:30:b0:2c:c7:aa:4f:0a:3c:69:
         f8:26:ad:2e:0c:78:9c:2d:ff:c8:d9:4f:08:24:39:e2:b8:48:
         a5:17:9c:0a:2e:32:bf:bf:b9:8b:c6:b9:c5:81:78:99:38:20:
         4d:32:a2:03:70:f8:ef:ed:28:26:66:79:88:1b:27:b0:75:85:
         39:a0:5d:b2:4c:64:af:a2:ab:84:aa:d3:d4:75:55:05:99:d0:
         9f:fe:81:51:23:fb:d3:18:2a:37:c7:f6:c7:3e:fe:c5:66:e5:
         c1:c5:b9:80:8b:94:fd:d7:12:37:cc:a2:7a:37:fa:e4:81:78:
         e9:a6:7a:05:19:35:81:0b:7a:21:f2:51:f7:04:59:84:1e:8d:
         b3:95:d3:02:68:fd:47:74:24:81:87:38:63:4b:57:1e:d0:5d:
         3c:d8:c4:26:3d:cc:40:05:57:01:1b:03:67:ab:19:09:9d:73:
         b8:39:90:b6:ac:19:de:f4:1b:ed:d7:44:02:f3:46:6f:50:26:
         82:45:06:9d:fb:96:f6:2c:d8:67:a1:c7:28:64:73:83:95:e4:
         4d:cc:b8:08:f2:30:c2:c0:fb:8b:97:f6:6e:54:90:85:8e:d6:
         dc:c8:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 12:42:26 2026 by rpki-client