Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/992317a1-744f-3399-b64d-ccab65b80c91.roa
File:                     992317a1-744f-3399-b64d-ccab65b80c91.roa (raw, json)
Hash identifier:          RP44RIkcYENESOC8qahnsheKxwO43xWWFjGLgoE4LgQ=
Subject key identifier:   CF:FE:8C:88:DD:57:E6:EC:18:53:9E:D9:63:61:10:82:91:BD:33:DA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F9446823520BDAB93C74FA880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/992317a1-744f-3399-b64d-ccab65b80c91.roa
Signing time:             Wed 21 Oct 2026 20:17:09 +0000
ROA not before:           Wed 21 Oct 2026 20:17:09 +0000
ROA not after:            Tue 19 Jan 2027 21:17:09 +0000
asID:                     51852
IP address blocks:        173.211.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:46:82:35:20:bd:ab:93:c7:4f:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 21 20:17:09 2026 GMT
            Not After : Jan 19 21:17:09 2027 GMT
        Subject: CN=7a0ba77b-ace6-4ed1-b690-88e01ff36164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:76:dd:1f:1a:bb:6b:cc:70:57:ca:17:84:
                    cc:45:60:92:28:2c:f9:08:ac:84:e0:b2:59:47:bf:
                    f1:39:fc:16:09:1b:0c:ea:db:67:f9:bb:b4:ee:a2:
                    51:21:b6:27:a6:4f:23:f1:2c:19:d7:b3:3c:17:8d:
                    9d:be:89:d2:35:e3:1f:44:5b:86:df:56:b1:50:ca:
                    f5:03:96:a0:d7:2e:0e:c2:df:fa:06:37:9b:1c:70:
                    95:61:03:6f:59:3c:15:57:9d:c1:85:28:df:37:1f:
                    c4:aa:66:af:20:c1:f3:73:c9:bf:03:8c:db:86:80:
                    26:ee:c5:1a:ab:6f:ed:7d:c5:f0:d8:0f:19:15:7f:
                    d2:bd:8d:5c:2c:99:24:3d:0c:2e:0e:2c:15:b5:98:
                    b3:9d:53:d5:aa:2b:67:df:06:2f:e6:55:3a:a2:57:
                    bf:bc:71:c1:ac:6f:66:ff:1f:98:02:f3:1f:87:84:
                    39:5f:f9:30:50:6b:3e:48:96:f8:f6:96:d0:56:31:
                    9b:7e:08:fe:f3:aa:5c:e2:8c:bf:ce:72:ff:55:0b:
                    62:88:61:a9:e6:ad:fb:ec:83:24:cc:54:71:e4:b8:
                    c7:1a:fc:be:57:0e:00:5d:57:8c:42:d1:56:62:01:
                    c0:b7:c0:0f:80:e4:33:41:43:fb:3c:0b:d8:f7:03:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FE:8C:88:DD:57:E6:EC:18:53:9E:D9:63:61:10:82:91:BD:33:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/992317a1-744f-3399-b64d-ccab65b80c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:f6:e5:2b:6b:b4:ab:5f:8a:eb:88:2c:9d:c2:24:51:c7:
         25:3b:57:24:19:57:2c:34:7e:11:04:79:3a:06:f1:9a:90:cb:
         91:7a:50:2c:7c:44:ce:9c:ba:77:10:2d:35:a4:20:a6:9b:49:
         7f:2d:b0:b4:f0:2b:89:f8:f4:77:33:94:1d:28:17:3d:5b:91:
         02:84:10:6b:5b:5c:fc:81:cb:1c:01:27:3c:8a:6e:4b:07:64:
         c4:22:d7:e7:ac:a4:73:c2:7e:af:28:54:d5:61:43:b0:75:f7:
         9b:87:db:15:62:8f:53:23:8b:a6:72:9c:7c:07:78:23:ce:b7:
         82:89:ff:9d:68:04:cc:7b:1e:d7:ce:73:6c:fa:29:03:f6:71:
         20:b1:0f:b0:42:73:2a:d2:1a:79:4b:79:55:1d:b5:44:d5:e2:
         b4:bd:fd:c2:af:e4:76:c1:d7:07:f6:ec:b6:7f:9f:39:5b:0d:
         2e:68:8c:8b:8a:74:b9:7e:92:10:61:4e:54:34:f5:cf:f7:84:
         d8:09:be:3f:d7:1c:0e:df:f9:ae:91:14:6b:e3:84:0e:90:46:
         8a:f6:1c:b4:9b:06:9e:35:18:25:26:e6:71:ef:a6:56:76:ad:
         32:47:25:16:fd:07:ce:ac:3b:54:f0:d9:0e:5a:96:7d:5a:28:
         c5:1b:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:05:55 2026 by rpki-client