Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/877d9e2d-3a05-3ab4-bb81-8ede1bb4dfaa.roa
File:                     877d9e2d-3a05-3ab4-bb81-8ede1bb4dfaa.roa (raw, json)
Hash identifier:          fL1Jb+Mhk7La5JlSdxo2nFmo3qnl7bddFEESFG4Qqnc=
Subject key identifier:   45:65:0B:E8:79:CB:7D:72:67:47:7E:4C:49:43:43:99:F3:A1:A0:A4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DBEB9559E79833D0C4102BB80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/877d9e2d-3a05-3ab4-bb81-8ede1bb4dfaa.roa
Signing time:             Wed 06 May 2026 15:38:35 +0000
ROA not before:           Wed 06 May 2026 15:38:35 +0000
ROA not after:            Tue 04 Aug 2026 15:38:35 +0000
asID:                     834
IP address blocks:        67.227.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:b9:55:9e:79:83:3d:0c:41:02:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  6 15:38:35 2026 GMT
            Not After : Aug  4 15:38:35 2026 GMT
        Subject: CN=99a0a2a1-a30c-4342-ac8f-93e2fd9c380e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:24:60:11:fa:13:a0:17:32:d6:62:7c:b8:
                    47:0b:15:ca:b0:15:49:69:48:1a:99:a2:34:29:d4:
                    66:f6:de:67:76:e0:a2:81:21:ca:c2:3a:cd:c4:7d:
                    24:ec:7a:8b:3b:87:d1:34:dd:66:b2:da:09:1f:d7:
                    1f:1e:7f:0b:a4:c9:8c:3a:81:12:76:c3:4c:1e:54:
                    79:ca:63:1d:e4:dd:97:cc:89:c2:68:16:e9:14:44:
                    07:fc:de:1c:a5:d7:f9:ad:6d:88:61:0b:5c:84:61:
                    4b:15:22:93:cb:07:2f:89:ba:fc:5b:0d:71:e8:b8:
                    c4:87:12:6f:e2:72:07:3a:48:df:4b:00:8c:a6:70:
                    48:28:ef:2e:1d:d6:67:0d:0f:da:37:f5:42:c3:29:
                    97:92:c1:04:58:76:c9:2a:3a:cc:be:6d:69:9b:e7:
                    55:c6:f3:ad:8d:72:c2:de:af:ba:81:2e:dd:4f:d0:
                    f0:b6:f9:b1:e0:4e:4c:51:97:82:3d:35:0d:4a:d2:
                    c1:9b:f3:ac:34:75:c0:30:24:b7:d7:a8:b0:d5:c7:
                    2d:9f:8b:d0:de:69:f8:bb:f8:ad:3a:27:16:76:25:
                    67:d6:54:a4:d2:ba:b0:5c:dc:c4:9e:8b:50:99:be:
                    ee:0c:a4:4d:2a:56:81:d2:ce:3d:2c:06:95:0b:5f:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:65:0B:E8:79:CB:7D:72:67:47:7E:4C:49:43:43:99:F3:A1:A0:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/877d9e2d-3a05-3ab4-bb81-8ede1bb4dfaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:e2:bc:94:da:0d:e1:59:10:5d:57:6a:ae:4b:6a:24:6d:85:
         b4:b5:fb:9f:52:99:13:4a:71:a0:da:93:db:6d:e1:59:04:94:
         54:ff:6f:09:66:f3:e2:cb:70:14:6d:05:33:80:6b:24:98:4f:
         fc:a5:db:44:70:a7:4d:0f:4a:7e:be:2c:f6:b2:82:cb:9c:0e:
         4a:6f:16:c2:9c:c4:13:55:5a:58:61:fd:5c:b3:0f:8b:d0:e6:
         e3:b1:9e:a8:ad:93:42:b6:24:cd:69:fa:b1:8f:4d:6e:87:5a:
         cb:16:13:b9:a8:36:b2:04:f9:a0:7f:d3:a0:56:08:9b:e8:73:
         32:d8:5e:8e:e7:92:01:d1:1d:d9:18:4e:0a:51:2a:70:d6:83:
         4c:e5:cb:cf:c3:ec:95:38:41:db:2a:a5:9b:44:08:2a:7a:6e:
         f1:16:92:c5:0a:95:83:ff:32:a8:30:83:d4:c8:3c:94:a0:80:
         98:ab:c5:57:91:bc:be:d1:a3:04:5d:a7:09:7f:10:63:97:e5:
         d5:ca:29:4f:ec:39:30:aa:1b:07:54:df:ba:d5:1c:9b:e1:be:
         6b:d0:a7:be:ed:d2:a1:25:6e:1b:22:55:bb:9d:39:6d:53:5c:
         27:70:94:76:dd:02:16:23:af:9e:b8:e2:a9:cd:0f:34:74:07:
         1e:75:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:07:04 2026 by rpki-client