Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8d1a8afb-67a1-35a6-b78b-f867877ab062.roa
File:                     8d1a8afb-67a1-35a6-b78b-f867877ab062.roa (raw, json)
Hash identifier:          xAdhdfB+2gm59maq2Y2Vf67f0MznjFejwJ7ilZ0sQD8=
Subject key identifier:   3D:A6:52:03:68:E2:12:80:CB:FE:1D:D9:AB:18:D7:1A:FB:D8:55:66
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EB57C4BD330579EB3F207C500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8d1a8afb-67a1-35a6-b78b-f867877ab062.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     21769
IP address blocks:        216.183.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4b:d3:30:57:9e:b3:f2:07:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=ef493b98-4796-473b-b99c-5559441b0ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2b:f0:4a:b9:eb:69:fd:68:00:92:16:21:02:
                    e4:6b:c3:44:2c:f1:c8:7c:33:4a:8f:64:83:97:86:
                    1a:2a:d6:58:ea:1e:3b:f1:f9:5c:fc:14:bf:67:40:
                    b8:1c:04:e9:61:ad:9a:7c:9b:d7:f2:94:e3:b9:ce:
                    a8:88:e2:87:cb:32:08:1b:65:69:ff:40:e3:8d:58:
                    3f:45:ec:c5:0c:1e:79:2a:07:96:9e:bc:07:d1:ec:
                    d4:aa:18:3b:54:5a:fb:10:ca:30:bd:a8:0a:81:45:
                    c4:0d:76:b7:01:62:65:6a:f0:da:2e:a0:c0:84:9a:
                    9d:f2:36:eb:c2:19:ff:60:27:12:7d:fe:29:46:19:
                    5f:98:a2:ea:0b:6b:09:8a:27:10:96:58:6b:ed:6d:
                    c1:5d:da:95:36:6a:0a:e2:2c:d5:19:14:0d:17:66:
                    10:81:14:a9:37:a2:03:58:72:e0:02:a6:2a:f1:16:
                    a5:b8:2b:07:d2:45:9a:ac:aa:35:53:28:2a:d7:2d:
                    cc:33:5f:ca:19:88:e9:9e:b9:57:e4:0b:4c:86:db:
                    9e:92:74:b3:a5:f3:0e:a2:99:1d:90:dd:7f:9d:f3:
                    7b:6a:11:92:92:f6:14:cc:08:3f:66:41:e2:7b:7d:
                    0d:12:f8:b5:e1:2f:63:48:d2:a7:cb:0d:0d:8e:fb:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:52:03:68:E2:12:80:CB:FE:1D:D9:AB:18:D7:1A:FB:D8:55:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8d1a8afb-67a1-35a6-b78b-f867877ab062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a6:ab:77:48:68:9a:3a:ef:7d:cc:57:21:03:c9:93:f8:8a:
         90:7f:ea:d2:12:81:aa:1c:5a:5d:4f:26:17:4e:3e:af:cf:a3:
         3e:16:28:c5:47:80:97:9b:ca:a7:20:94:d2:18:79:ec:38:99:
         5c:ea:66:c0:27:d2:ff:4b:fa:1f:10:6b:5a:39:08:eb:65:40:
         51:52:71:aa:98:dc:af:72:ad:b5:c1:35:d7:43:33:44:ba:e5:
         56:89:30:8b:18:a6:1f:90:39:af:15:6a:75:90:94:bc:d4:72:
         c2:9a:7b:23:15:ed:db:1f:14:ec:6f:8d:07:92:17:d4:0e:0b:
         3d:fa:2d:10:62:fd:58:3d:3f:22:77:10:f8:61:5c:43:0b:28:
         6a:03:eb:e7:c2:ac:c8:85:a3:83:3f:ba:11:40:53:5e:9b:36:
         36:34:2c:51:bf:16:70:5f:f1:09:cc:ff:2b:f6:83:8e:d9:99:
         41:23:eb:31:cd:7f:13:5e:64:9f:b4:eb:49:cc:9e:7f:25:29:
         54:2a:61:ba:09:07:1b:80:41:ce:98:d2:68:8a:81:5e:24:3f:
         f9:40:8f:7d:7e:f0:31:48:7c:88:13:74:fc:f2:84:7c:94:0c:
         06:55:05:d6:41:56:c7:8d:15:c8:00:8b:bf:7b:ab:b5:c4:f7:
         0e:0e:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:39 2026 by rpki-client