Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/902254ba-fe21-3403-8791-56c1731dcc9e.roa
File:                     902254ba-fe21-3403-8791-56c1731dcc9e.roa (raw, json)
Hash identifier:          CSr4XAoWWgKqce8C3BNqxuCZl49JEbRjjICbhjp7/s0=
Subject key identifier:   12:99:D6:EF:F5:C4:2F:EA:99:FF:AF:B2:15:1C:19:58:41:0D:27:11
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D11E14404D347AF8875538A20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/902254ba-fe21-3403-8791-56c1731dcc9e.roa
Signing time:             Thu 05 Mar 2026 17:44:12 +0000
ROA not before:           Thu 05 Mar 2026 17:44:12 +0000
ROA not after:            Wed 03 Jun 2026 16:44:12 +0000
asID:                     834
IP address blocks:        104.247.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:e1:44:04:d3:47:af:88:75:53:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 17:44:12 2026 GMT
            Not After : Jun  3 16:44:12 2026 GMT
        Subject: CN=6214751e-3f49-49ff-8944-b9a96fa0b364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:36:2c:fe:da:49:e1:f0:80:26:d1:64:31:
                    68:c5:e9:17:61:36:ab:0d:f8:c3:24:60:29:22:e1:
                    f9:ba:a1:2b:82:fb:c8:4e:e5:44:1e:2b:c1:82:5b:
                    d8:77:c0:37:30:53:63:70:c6:ba:f5:5e:be:27:79:
                    b6:be:18:70:b0:88:75:98:66:3f:01:b6:a4:7b:64:
                    70:09:5c:45:a4:5d:da:89:0f:34:38:fc:af:d5:1e:
                    b5:ba:5e:a1:2a:6a:65:41:12:fe:d7:60:72:da:7b:
                    c7:68:b9:b6:59:a9:56:d9:83:22:38:5b:5e:c6:ad:
                    c0:49:7a:51:96:83:e8:0a:de:94:aa:9a:9f:d9:05:
                    76:2f:74:0c:9c:65:b4:53:b8:b7:59:3c:be:2f:eb:
                    eb:cf:4a:c6:3f:a0:e3:c3:32:18:0a:cd:e9:98:82:
                    61:e2:51:35:d7:35:05:52:70:2d:fb:e3:f0:c6:2f:
                    60:9b:2b:b2:e3:f6:b5:ba:73:c2:d9:a8:d6:cc:a4:
                    2f:03:73:ad:d6:d1:5a:ca:0a:4a:8f:a5:cd:55:f5:
                    f0:fd:2b:a5:5e:9e:08:92:f9:28:57:28:a9:1d:e6:
                    56:37:9f:34:da:66:a4:74:3d:27:07:5e:16:41:7a:
                    a4:e0:4f:14:41:d9:60:08:5d:88:f9:7d:98:05:43:
                    37:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:99:D6:EF:F5:C4:2F:EA:99:FF:AF:B2:15:1C:19:58:41:0D:27:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/902254ba-fe21-3403-8791-56c1731dcc9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:58:ec:2d:15:d5:f5:14:fd:76:89:81:1f:61:a6:af:fb:b8:
         61:ea:dd:89:08:fb:76:dc:95:b2:1d:02:40:5e:9c:e4:df:6a:
         ff:fe:2e:5a:9c:67:24:ff:aa:46:df:fc:a7:93:04:ef:29:14:
         9d:4f:c1:1b:3b:47:e8:a2:40:67:d4:a1:50:60:d2:d0:55:0f:
         06:c9:fb:1c:6c:81:c6:2b:c7:fc:29:2f:bd:0e:58:77:cb:4a:
         de:75:73:be:da:4c:4e:e6:c9:d5:e2:c7:bc:c1:27:2e:05:d4:
         a9:af:6d:b5:9f:b4:3e:a7:17:03:53:bc:67:a3:44:2f:8f:4f:
         21:da:5e:3d:65:ba:54:b2:0c:44:50:52:42:f5:a2:de:fe:d1:
         e6:eb:86:c6:7c:e7:25:19:ad:de:5c:0f:24:c8:b8:fe:46:20:
         d8:8d:f6:36:09:f0:db:be:9c:21:5e:17:fc:85:88:83:d7:b0:
         db:cb:8e:e2:cb:dc:3a:5b:9a:84:23:c6:97:29:c9:58:ca:8e:
         0a:78:f5:15:cb:a9:8b:b3:a5:a2:e5:60:5a:06:a5:2a:3f:f9:
         4f:10:d6:11:85:cb:d3:fe:b3:ca:3e:99:f2:5f:d5:6c:e2:6f:
         81:95:f6:bd:05:f5:a0:41:bc:6e:79:48:0b:ec:5b:f4:06:72:
         c9:cc:69:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0R4UQE00eviHVTiiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDMwNTE3NDQxMloXDTI2MDYwMzE2NDQxMlowLzEtMCsGA1UEAxMk
NjIxNDc1MWUtM2Y0OS00OWZmLTg5NDQtYjlhOTZmYTBiMzY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlA2LP7aSeHwgCbRZDFoxekXYTarDfjDJGAp
IuH5uqErgvvITuVEHivBglvYd8A3MFNjcMa69V6+J3m2vhhwsIh1mGY/Abake2Rw
CVxFpF3aiQ80OPyv1R61ul6hKmplQRL+12By2nvHaLm2WalW2YMiOFtexq3ASXpR
loPoCt6Uqpqf2QV2L3QMnGW0U7i3WTy+L+vrz0rGP6DjwzIYCs3pmIJh4lE11zUF
UnAt++Pwxi9gmyuy4/a1unPC2ajWzKQvA3Ot1tFaygpKj6XNVfXw/SulXp4Ikvko
VyipHeZWN5802makdD0nB14WQXqk4E8UQdlgCF2I+X2YBUM3dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBKZ1u/1xC/qmf+vshUcGVhBDScRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTAyMjU0YmEtZmUyMS0z
NDAzLTg3OTEtNTZjMTczMWRjYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPeaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZY7C0V1fUU/XaJgR9hpq/7uGHq3YkI+3bclbIdAkBenOTfav/+Llqc
ZyT/qkbf/KeTBO8pFJ1PwRs7R+iiQGfUoVBg0tBVDwbJ+xxsgcYrx/wpL70OWHfL
St51c77aTE7mydXix7zBJy4F1KmvbbWftD6nFwNTvGejRC+PTyHaXj1lulSyDERQ
UkL1ot7+0ebrhsZ85yUZrd5cDyTIuP5GINiN9jYJ8Nu+nCFeF/yFiIPXsNvLjuLL
3DpbmoQjxpcpyVjKjgp49RXLqYuzpaLlYFoGpSo/+U8Q1hGFy9P+s8o+mfJf1Wzi
b4GV9r0F9aBBvG55SAvsW/QGcsnMac8=
-----END CERTIFICATE-----
Generated at Fri Mar 6 07:44:01 2026 by rpki-client