Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a4a685d-01f0-324a-9553-41707b58bb01.roa
File:                     9a4a685d-01f0-324a-9553-41707b58bb01.roa (raw, json)
Hash identifier:          KwIOYw6yo2NjXGkNTdn36rHcXVBuPMDXFzBxu+KMs04=
Subject key identifier:   AB:57:3E:38:F5:1B:6C:FB:19:44:7A:C1:73:83:33:FC:88:26:BC:8B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC0A70F6185A8BECEA70E51E8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a4a685d-01f0-324a-9553-41707b58bb01.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        174.140.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0f:61:85:a8:be:ce:a7:0e:51:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=f3869352-b505-4f0c-80d6-48477a50d916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:4f:78:4a:84:a5:c7:68:42:64:93:bd:44:
                    b3:96:25:ae:1e:7d:26:3e:27:9b:b4:d5:dc:dc:69:
                    2a:7d:91:03:57:a0:4d:0c:ca:da:fc:38:68:0d:bc:
                    9d:8f:10:aa:19:c3:a7:d6:d0:ae:60:2c:3d:fb:ec:
                    9a:ea:0a:12:ad:92:c1:10:b0:ad:5a:a8:c0:5a:b7:
                    6d:ec:6d:9f:85:0f:1e:db:1a:ef:82:a8:3d:f7:85:
                    7a:9e:97:ae:f3:1f:03:86:9c:24:74:69:35:a9:6a:
                    e9:48:5c:15:56:43:1c:35:f8:ee:cd:e3:79:6a:c3:
                    8d:63:c5:d9:8c:a9:95:c9:b4:9d:8c:64:21:6c:2b:
                    ed:7a:f5:60:e5:07:69:1f:24:04:14:30:86:94:31:
                    2f:1a:07:ec:47:fa:77:7e:ee:6d:ad:58:c7:5f:7b:
                    0a:d6:b1:31:f1:61:cd:08:05:18:a3:bc:6c:97:c8:
                    d3:ca:11:45:2c:14:4d:db:53:e6:04:8c:b2:e5:74:
                    b0:11:5e:13:ff:38:aa:3d:e0:0c:76:d3:3b:ca:13:
                    08:40:6d:42:45:bd:82:30:81:95:11:3f:1e:83:b4:
                    dd:05:03:f0:34:7c:c9:36:b0:ae:25:03:b0:0e:4e:
                    6a:6a:30:0d:48:9b:5b:aa:1c:af:eb:44:e6:2d:e1:
                    88:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:57:3E:38:F5:1B:6C:FB:19:44:7A:C1:73:83:33:FC:88:26:BC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a4a685d-01f0-324a-9553-41707b58bb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:5d:1e:09:b6:3b:dd:20:91:a7:d1:86:74:a9:f2:d0:53:91:
         3d:6c:fb:d8:c7:7b:b1:97:a7:6d:cc:2d:40:66:4e:67:72:9c:
         4d:f2:2d:60:28:82:d6:64:37:95:94:e0:7e:80:dd:a4:2d:e0:
         52:a6:10:83:e5:69:12:48:51:46:0e:c8:cd:da:24:93:5e:c8:
         4a:3a:51:64:93:6f:10:01:1c:42:75:f6:8e:2d:25:42:87:58:
         ff:67:8a:2c:9e:a1:3b:1c:b0:42:9b:b8:16:19:29:99:63:f1:
         c6:69:a6:ba:47:cc:d3:ab:1f:ac:37:51:85:ac:40:b9:82:62:
         c9:11:b3:66:54:5e:20:16:9c:15:c9:7b:3e:1a:31:16:1c:bf:
         7e:de:28:e4:2e:94:c8:79:8e:74:02:66:ef:de:e7:53:23:66:
         64:04:fc:99:69:45:05:05:65:14:c6:5e:6c:b7:c8:d7:f8:5b:
         17:e5:a9:5a:3d:c7:9b:ca:4d:bb:11:eb:30:95:c0:58:28:0c:
         ae:d1:a6:1e:ad:a8:be:01:10:e1:03:ab:c4:dd:e9:28:99:4e:
         a1:46:4f:d0:79:79:f2:ad:85:eb:37:b8:c7:b7:82:0a:4e:2e:
         ec:79:12:ba:a1:19:c6:67:5f:77:2b:ff:c9:49:5a:da:a2:e2:
         9c:16:7c:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apw9hhai+zqcOUegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk
ZjM4NjkzNTItYjUwNS00ZjBjLTgwZDYtNDg0NzdhNTBkOTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvFPeEqEpcdoQmSTvUSzliWuHn0mPiebtNXc
3GkqfZEDV6BNDMra/DhoDbydjxCqGcOn1tCuYCw9++ya6goSrZLBELCtWqjAWrdt
7G2fhQ8e2xrvgqg994V6npeu8x8DhpwkdGk1qWrpSFwVVkMcNfjuzeN5asONY8XZ
jKmVybSdjGQhbCvtevVg5QdpHyQEFDCGlDEvGgfsR/p3fu5trVjHX3sK1rEx8WHN
CAUYo7xsl8jTyhFFLBRN21PmBIyy5XSwEV4T/ziqPeAMdtM7yhMIQG1CRb2CMIGV
ET8eg7TdBQPwNHzJNrCuJQOwDk5qajANSJtbqhyv60TmLeGIOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtXPjj1G2z7GUR6wXODM/yIJryLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWE0YTY4NWQtMDFmMC0z
MjRhLTk1NTMtNDE3MDdiNThiYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArozpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKxdHgm2O90gkafRhnSp8tBTkT1s+9jHe7GXp23MLUBmTmdynE3yLWAo
gtZkN5WU4H6A3aQt4FKmEIPlaRJIUUYOyM3aJJNeyEo6UWSTbxABHEJ19o4tJUKH
WP9niiyeoTscsEKbuBYZKZlj8cZpprpHzNOrH6w3UYWsQLmCYskRs2ZUXiAWnBXJ
ez4aMRYcv37eKOQulMh5jnQCZu/e51MjZmQE/JlpRQUFZRTGXmy3yNf4WxflqVo9
x5vKTbsR6zCVwFgoDK7Rph6tqL4BEOEDq8Td6SiZTqFGT9B5efKthes3uMe3ggpO
Lux5ErqhGcZnX3cr/8lJWtqi4pwWfJk=
-----END CERTIFICATE-----
Generated at Wed Sep 9 04:08:35 2026 by rpki-client