Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/900c9156-65fe-3852-a216-5cb5af9bacd3.roa
File:                     900c9156-65fe-3852-a216-5cb5af9bacd3.roa (raw, json)
Hash identifier:          ERELdJ3jaHn8hDgUTv8DZl270v6Dx25LwZ5hCI874ow=
Subject key identifier:   1D:3D:CC:F1:67:82:09:3B:6F:90:AC:29:8F:7B:0B:BE:52:50:CA:5C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F18FE3713398ECB96598EC200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/900c9156-65fe-3852-a216-5cb5af9bacd3.roa
Signing time:             Mon 07 Sep 2026 16:27:04 +0000
ROA not before:           Mon 07 Sep 2026 16:27:04 +0000
ROA not after:            Sun 06 Dec 2026 17:27:04 +0000
asID:                     834
IP address blocks:        198.102.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:fe:37:13:39:8e:cb:96:59:8e:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  7 16:27:04 2026 GMT
            Not After : Dec  6 17:27:04 2026 GMT
        Subject: CN=9b47a315-feaf-4b7f-812f-d66e6f195aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:d6:a1:9e:9e:b8:ba:8b:6e:a9:44:93:63:
                    b4:d1:89:71:e3:76:e7:53:c8:a0:5d:08:ad:4f:77:
                    a8:93:5c:34:82:6b:95:9c:08:2a:72:34:b2:3d:2d:
                    f0:55:c8:de:a9:15:45:8d:97:25:51:8f:d7:bd:da:
                    d3:94:0e:16:57:0d:22:10:27:22:e7:c1:df:36:63:
                    b7:39:0b:f6:34:50:30:d4:12:fa:ff:d6:a7:2c:93:
                    d3:0e:74:3f:c0:83:fc:16:fd:c0:82:47:cc:de:5f:
                    10:e9:90:4e:c9:3c:5c:18:6a:eb:bd:d7:57:9d:ed:
                    d9:5c:16:3b:4f:bc:24:49:1e:32:bf:4a:28:06:23:
                    6c:ef:02:a0:13:d2:da:80:43:4f:a1:fb:fc:19:94:
                    8f:44:ff:53:92:9e:ad:e3:65:21:60:92:0e:13:95:
                    8f:6f:27:cb:8f:e2:97:00:76:e8:7e:c6:a5:16:30:
                    3c:ad:18:29:2f:15:dd:7d:b8:de:63:ae:57:8b:68:
                    15:f1:56:4d:75:e3:d6:fa:ec:2b:64:57:ed:5c:4c:
                    07:42:a1:46:2f:e2:2f:70:80:5d:79:af:cc:9e:0d:
                    ed:44:d6:ee:f2:64:7c:e1:5b:31:55:bf:f7:e5:5d:
                    9b:34:92:a6:11:89:b0:5b:1c:46:e0:f8:5c:39:b4:
                    da:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3D:CC:F1:67:82:09:3B:6F:90:AC:29:8F:7B:0B:BE:52:50:CA:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/900c9156-65fe-3852-a216-5cb5af9bacd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:11:b1:da:97:dd:2e:c2:0b:35:50:d1:4c:22:10:50:7a:5a:
         6c:93:a7:c2:17:52:fa:f9:41:ea:d4:d4:07:19:38:18:b2:c0:
         a3:fc:22:f6:24:70:4b:b9:29:62:0b:ae:b9:27:85:18:23:5d:
         a5:96:4b:fb:66:8f:4b:10:c3:7f:0c:e0:3e:4e:6c:e8:46:f4:
         f0:c3:88:95:6b:e2:df:f3:6b:43:15:0e:40:56:8f:90:4b:db:
         37:10:a5:f5:cb:3f:f4:bd:a5:18:96:ae:de:9c:74:94:82:d1:
         6f:58:8e:a7:3a:27:8e:5d:9f:67:f9:7c:a4:43:af:32:f7:4d:
         cd:f3:d2:4d:ba:4b:aa:f2:e5:b9:7a:7c:40:e7:d6:4a:1c:f9:
         8e:d8:28:1a:a1:92:ae:12:0e:5f:c5:6d:71:71:30:38:55:b5:
         1d:75:3b:41:9a:e2:a4:f2:54:9b:74:af:53:9d:58:28:93:73:
         41:eb:a3:81:2c:8d:36:61:06:96:79:75:ba:ae:f9:01:89:c7:
         c0:11:67:d8:89:c2:80:67:23:ad:af:6f:6f:ba:db:6a:36:89:
         b1:52:84:18:1f:33:9b:6c:88:da:2e:9d:a9:40:25:cd:5c:63:
         36:c0:8a:85:c1:46:1d:d2:2c:a6:45:13:84:d3:af:43:b1:b7:
         06:59:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 03:45:11 2026 by rpki-client