Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/86f0481f-2e7f-37e3-9e04-dd3a01b2b939.roa
File:                     86f0481f-2e7f-37e3-9e04-dd3a01b2b939.roa (raw, json)
Hash identifier:          fyRSqZuEHCFL83ALVIHJ29haiZOwxjgcHr/lUn8KM/8=
Subject key identifier:   03:37:3A:22:B0:33:73:28:13:64:4C:DB:88:0A:BA:71:E4:20:44:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E95CC04339D484D819188BFA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/86f0481f-2e7f-37e3-9e04-dd3a01b2b939.roa
Signing time:             Wed 22 Jul 2026 16:35:01 +0000
ROA not before:           Wed 22 Jul 2026 16:35:01 +0000
ROA not after:            Tue 20 Oct 2026 16:35:01 +0000
asID:                     17252
IP address blocks:        174.140.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:cc:04:33:9d:48:4d:81:91:88:bf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 22 16:35:01 2026 GMT
            Not After : Oct 20 16:35:01 2026 GMT
        Subject: CN=38b71907-3327-46f7-8c4e-af58e5ab15b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6c:fd:44:14:9e:c8:5f:e6:fa:a9:52:3d:1b:
                    ab:52:1d:53:4f:d9:14:75:1d:a3:29:44:23:e1:8b:
                    a0:89:ba:2a:77:01:c5:18:d9:28:6e:bf:95:a5:06:
                    28:e8:51:82:e6:c2:a7:4a:3e:8e:46:5d:0c:97:de:
                    b7:98:1e:cc:1f:54:21:b3:89:b4:f6:c7:21:ec:09:
                    bb:78:ae:90:9e:99:91:09:38:9a:61:d1:9f:72:06:
                    7d:38:66:fb:fd:bc:c8:7f:5c:d2:86:b0:e3:d4:22:
                    54:19:8d:d2:fe:5f:9a:1e:99:9e:3a:df:99:28:c9:
                    08:a4:7b:4c:34:df:33:36:77:cc:95:56:97:81:81:
                    95:c6:b1:d9:2d:f9:42:d4:1b:de:2e:dd:ef:7f:ed:
                    40:91:57:65:04:bf:d7:21:56:df:fb:69:b7:df:53:
                    97:4f:9c:75:15:53:3f:f8:df:cb:fa:b0:34:ba:c2:
                    f6:0a:bc:81:24:60:ed:11:09:d5:e0:cb:28:61:3a:
                    9c:30:5e:81:02:08:e0:a2:17:c8:30:55:ef:c7:18:
                    27:96:fa:48:30:d6:ac:b1:8f:0b:60:6f:55:b6:60:
                    34:16:48:8d:9e:94:c3:93:c3:90:07:14:c5:b7:c5:
                    00:66:84:81:bd:23:64:45:22:86:fa:8f:81:50:94:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:37:3A:22:B0:33:73:28:13:64:4C:DB:88:0A:BA:71:E4:20:44:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/86f0481f-2e7f-37e3-9e04-dd3a01b2b939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:0d:dc:13:8d:19:88:88:7c:0b:7a:57:d8:1d:80:33:a3:25:
         b2:ff:93:cf:37:81:23:41:bc:79:82:54:39:ad:01:7b:aa:28:
         da:8d:26:85:82:06:1f:5b:f1:97:ba:0a:da:6f:ab:9d:b3:fa:
         5c:1b:c1:77:74:ea:9a:3f:78:10:3b:b7:3f:38:70:52:b6:2e:
         f8:5f:da:d7:82:7e:2b:df:24:e2:ca:74:53:62:a9:ca:5e:1b:
         76:06:20:56:a4:e0:a1:5e:a1:3d:a2:0f:26:01:69:96:d9:66:
         94:0f:34:21:cd:2f:bb:60:8d:a7:aa:2e:3a:19:32:c9:8a:8a:
         89:91:07:88:5f:d2:09:d6:83:04:b0:fb:c7:9b:36:1b:22:02:
         6c:dd:71:82:e3:f4:cd:c1:53:f5:75:28:49:3f:85:7a:d8:28:
         34:13:f7:4c:aa:0e:a9:4c:51:f6:30:24:80:ed:96:e2:d6:27:
         fb:c5:d3:f0:d8:55:e0:cf:31:f7:09:e0:a2:af:58:ed:ac:b4:
         d3:6c:50:eb:36:61:c3:19:a2:fb:a5:40:e5:24:f7:dc:76:33:
         f9:85:14:3c:b4:8e:01:47:43:b0:63:d5:df:d6:dc:fb:fe:e3:
         d9:fb:7f:af:25:2b:8c:3e:47:b0:6b:8a:d3:7d:3e:73:53:21:
         95:cb:23:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 12:44:13 2026 by rpki-client