Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ec4ca9e-f79a-31bb-8837-054b2eee363f.roa
File:                     8ec4ca9e-f79a-31bb-8837-054b2eee363f.roa (raw, json)
Hash identifier:          CKFpSULgXWsEBtAYrIQOO7C1Aui2ZDEOkYi893QGBqc=
Subject key identifier:   95:94:08:AC:DD:15:9B:8F:20:1B:7B:D7:A5:36:FD:37:10:64:D1:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D11E2F355A65475DBB3B15900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ec4ca9e-f79a-31bb-8837-054b2eee363f.roa
Signing time:             Thu 05 Mar 2026 17:47:36 +0000
ROA not before:           Thu 05 Mar 2026 17:47:36 +0000
ROA not after:            Wed 03 Jun 2026 16:47:36 +0000
asID:                     32693
IP address blocks:        216.183.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:e2:f3:55:a6:54:75:db:b3:b1:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 17:47:36 2026 GMT
            Not After : Jun  3 16:47:36 2026 GMT
        Subject: CN=0b371594-8159-40e9-a6b0-1cf587723b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:23:c7:34:08:c0:87:f9:7c:86:4e:07:ee:66:
                    a0:9a:3b:da:a5:0a:d4:ef:2a:88:e8:7e:10:77:a8:
                    7c:e3:5c:50:7c:b3:68:34:05:1e:ef:6c:6b:b6:73:
                    a3:49:43:1a:49:12:13:1e:cf:7e:7d:4c:5c:0c:3f:
                    79:fa:61:0d:7b:0d:ca:44:fd:08:0c:a0:51:d6:83:
                    c4:02:b7:23:c7:42:44:03:52:10:3d:99:52:a8:88:
                    4a:46:e6:25:d3:cc:d7:fc:72:3e:3b:60:9e:79:ce:
                    69:b0:71:f4:c5:fd:48:92:c7:95:2e:d0:a2:ae:90:
                    0a:46:d4:6c:a1:df:5e:cb:db:3d:38:d0:8f:00:2a:
                    bf:86:79:f7:0e:4d:1a:ad:b9:f7:97:f1:10:be:f6:
                    af:e9:fc:13:20:44:c0:fe:0c:cc:9f:15:cc:d0:ff:
                    43:8e:65:41:73:a8:cb:b1:fa:bb:09:50:05:44:0d:
                    76:66:e6:f5:47:98:ef:88:33:72:a5:45:45:5b:ce:
                    d9:e5:38:ec:a3:7f:b5:4e:0b:96:ff:2f:6d:18:b9:
                    c8:06:18:7c:97:03:70:6b:78:86:14:f4:b3:fc:cd:
                    65:fa:4a:5b:de:81:dd:06:9d:c7:e8:93:d8:7c:cf:
                    d7:05:17:0c:dc:aa:cd:ef:42:b4:bc:eb:79:eb:81:
                    6c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:94:08:AC:DD:15:9B:8F:20:1B:7B:D7:A5:36:FD:37:10:64:D1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ec4ca9e-f79a-31bb-8837-054b2eee363f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:d6:27:71:fb:68:92:b2:6b:32:94:69:56:d4:d3:88:4b:
         43:e1:d0:96:cc:29:d8:1e:74:30:e7:90:96:02:b0:08:50:56:
         32:2c:27:fc:e6:7e:64:d3:41:70:ed:d2:9d:30:e2:6b:09:33:
         06:86:66:0d:ee:46:00:01:44:e0:70:7f:ef:48:df:2e:5b:22:
         10:be:32:82:23:b7:18:36:f2:a7:4f:3b:d6:7a:99:de:e7:12:
         63:7c:88:39:12:e7:3a:b8:e9:59:14:d6:46:3c:b6:2b:a9:31:
         b0:24:17:4c:fb:e1:93:8d:52:b9:3b:27:5b:8e:cc:ff:1b:85:
         84:42:d6:ca:7d:90:bf:63:3f:6b:a3:dc:35:69:4d:b6:15:5e:
         59:e3:86:56:cd:56:2c:ed:bf:9c:ed:0a:37:0c:d4:9a:ef:60:
         49:f4:aa:78:c8:89:6a:10:df:9c:79:28:bc:32:a5:ef:f3:15:
         df:53:53:ac:2d:4c:83:27:f0:3e:fc:98:33:89:af:8f:15:6f:
         93:a1:4e:22:6a:48:c5:f4:3c:c8:35:10:6e:7a:68:68:41:d9:
         1d:da:ae:85:65:41:e0:b4:86:73:dd:22:16:57:54:28:c0:17:
         fc:0c:cf:32:d5:0c:81:e4:dc:52:63:8e:73:3a:9e:c3:9b:4f:
         a7:ad:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 07:44:23 2026 by rpki-client