Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/893fc7e8-fa18-3664-9fcb-a474fc97927f.roa
File:                     893fc7e8-fa18-3664-9fcb-a474fc97927f.roa (raw, json)
Hash identifier:          LAD71ANj8zSuqoXOzppLgU1fsm6XYcyiV0eYmz3KzvY=
Subject key identifier:   FC:FA:BC:1F:A7:53:03:4D:80:35:1F:04:02:3D:9F:90:7D:59:EC:54
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D9D42CCBD9FBD48729F8B55C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/893fc7e8-fa18-3664-9fcb-a474fc97927f.roa
Signing time:             Fri 24 Apr 2026 15:58:05 +0000
ROA not before:           Fri 24 Apr 2026 15:58:05 +0000
ROA not after:            Thu 23 Jul 2026 15:58:05 +0000
asID:                     174
IP address blocks:        216.75.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:42:cc:bd:9f:bd:48:72:9f:8b:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 24 15:58:05 2026 GMT
            Not After : Jul 23 15:58:05 2026 GMT
        Subject: CN=e560e4e3-4ff6-4a6f-b7fc-f6ce054f401a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:29:07:c1:09:5a:3a:a5:51:97:e6:93:26:
                    db:26:76:e8:64:9f:4c:b7:9e:2a:39:93:d4:ff:bd:
                    c1:74:9a:b5:65:b0:7f:3c:db:b5:3d:62:64:dd:d4:
                    79:bc:08:d7:ee:22:5e:5b:63:ee:6d:c9:4f:d6:b1:
                    b1:6d:c0:63:50:90:86:2b:ff:a0:d6:ee:03:23:ca:
                    9c:17:b0:39:e5:2c:fe:bd:ce:dd:35:7b:dd:01:28:
                    f6:21:fa:4a:b1:ad:87:a4:ae:d7:46:3c:9b:23:59:
                    9a:1a:84:e9:45:ec:7c:d3:26:a3:05:08:3e:0f:19:
                    2c:0a:d6:9a:94:70:43:72:10:17:19:f5:ae:ae:76:
                    68:34:17:73:fc:58:15:f3:9d:d1:5e:87:05:00:1f:
                    ff:07:ff:a7:f8:59:8e:1a:1b:be:d5:8b:36:db:8e:
                    af:90:57:d5:a3:aa:a5:d4:83:01:15:98:76:f3:c8:
                    08:8f:cc:72:e2:ff:7d:1e:72:cb:10:31:93:db:29:
                    07:4b:52:20:69:fe:b3:1c:a9:e4:95:65:f3:f4:73:
                    eb:96:fa:20:cd:73:49:48:75:fd:0d:e5:eb:84:b5:
                    25:e0:96:26:33:79:af:43:9b:3b:13:82:03:3c:c0:
                    a8:ca:75:73:5c:00:3b:4e:db:b6:f5:73:75:f1:c0:
                    fe:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:BC:1F:A7:53:03:4D:80:35:1F:04:02:3D:9F:90:7D:59:EC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/893fc7e8-fa18-3664-9fcb-a474fc97927f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:cb:e5:21:c0:90:f7:35:19:dc:86:d5:d9:1a:d6:52:a8:
         66:70:10:47:9f:55:7f:4e:7f:bb:05:8b:17:40:e0:be:0e:d3:
         13:7a:4b:05:5f:3d:07:9e:de:f5:cc:f4:89:56:9b:17:6b:e9:
         fb:1e:c2:3a:28:75:b0:ae:d7:f0:6d:23:0d:13:62:e9:a9:31:
         55:11:5e:c3:6c:cf:d1:18:b9:c8:ff:b2:1c:04:fc:47:ea:ad:
         7d:c3:b0:8c:1d:e4:91:5e:ba:ff:c9:68:19:c2:30:0e:f4:67:
         ec:cf:61:50:89:0a:c3:6e:6b:69:45:bf:6d:f6:03:42:2e:a5:
         ed:ec:cc:c6:58:b2:50:b7:d8:f1:03:69:ae:38:7c:5d:c6:87:
         89:ea:c2:ef:22:3b:e4:e9:64:44:8c:48:74:6a:b8:ec:46:1e:
         53:7f:9b:df:1c:1e:98:86:9a:e7:b7:0e:07:b4:1f:94:52:6d:
         83:ff:2b:ed:f3:61:43:00:d8:c6:58:1a:bf:ce:2e:bd:2e:6b:
         39:9c:1c:a6:b5:08:f1:7f:2b:9b:c0:d6:df:f2:c2:d1:2a:30:
         47:83:23:61:ca:40:1b:ed:92:3f:4c:aa:79:8a:16:36:89:29:
         48:ea:a5:6b:46:87:e1:64:b4:8a:ab:c5:d7:30:36:d4:2f:57:
         c9:ad:63:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2dQsy9n71Icp+LVcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDQyNDE1NTgwNVoXDTI2MDcyMzE1NTgwNVowLzEtMCsGA1UEAxMk
ZTU2MGU0ZTMtNGZmNi00YTZmLWI3ZmMtZjZjZTA1NGY0MDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZEpB8EJWjqlUZfmkybbJnboZJ9Mt54qOZPU
/73BdJq1ZbB/PNu1PWJk3dR5vAjX7iJeW2PubclP1rGxbcBjUJCGK/+g1u4DI8qc
F7A55Sz+vc7dNXvdASj2IfpKsa2HpK7XRjybI1maGoTpRex80yajBQg+DxksCtaa
lHBDchAXGfWurnZoNBdz/FgV853RXocFAB//B/+n+FmOGhu+1Ys2246vkFfVo6ql
1IMBFZh288gIj8xy4v99HnLLEDGT2ykHS1Igaf6zHKnklWXz9HPrlvogzXNJSHX9
DeXrhLUl4JYmM3mvQ5s7E4IDPMCoynVzXAA7Ttu29XN18cD+3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPz6vB+nUwNNgDUfBAI9n5B9WexUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvODkzZmM3ZTgtZmExOC0z
NjY0LTlmY2ItYTQ3NGZjOTc5MjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EtbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADr5y+UhwJD3NRnchtXZGtZSqGZwEEefVX9Of7sFixdA4L4O0xN6SwVf
PQee3vXM9IlWmxdr6fsewjoodbCu1/BtIw0TYumpMVURXsNsz9EYucj/shwE/Efq
rX3DsIwd5JFeuv/JaBnCMA70Z+zPYVCJCsNua2lFv232A0Iupe3szMZYslC32PED
aa44fF3Gh4nqwu8iO+TpZESMSHRquOxGHlN/m98cHpiGmue3Dge0H5RSbYP/K+3z
YUMA2MZYGr/OLr0uazmcHKa1CPF/K5vA1t/ywtEqMEeDI2HKQBvtkj9MqnmKFjaJ
KUjqpWtGh+FktIqrxdcwNtQvV8mtYyE=
-----END CERTIFICATE-----
Generated at Sat Apr 25 00:13:50 2026 by rpki-client