Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9ec0f62e-7f70-3ecf-a924-514ddbb77ced.roa
File:                     9ec0f62e-7f70-3ecf-a924-514ddbb77ced.roa (raw, json)
Hash identifier:          BtsP0uhqlIJjAZVP3sFAw+VU+5mH+wzP9YEfU/HkT5I=
Subject key identifier:   52:5A:C6:6F:CE:14:20:09:1E:3E:0D:61:D5:6B:BE:70:C7:14:73:A7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584FADE4DACA8978686A5A4D1120
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9ec0f62e-7f70-3ecf-a924-514ddbb77ced.roa
Signing time:             Sat 31 Oct 2026 00:31:24 +0000
ROA not before:           Sat 31 Oct 2026 00:31:24 +0000
ROA not after:            Fri 29 Jan 2027 01:31:24 +0000
asID:                     21769
IP address blocks:        173.211.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ad:e4:da:ca:89:78:68:6a:5a:4d:11:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 31 00:31:24 2026 GMT
            Not After : Jan 29 01:31:24 2027 GMT
        Subject: CN=f1d856c8-dbda-4a0a-bda9-7f3ff26a0b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:c6:cb:2c:5f:dd:0e:08:1a:e9:ba:b8:6d:
                    cd:46:2f:f2:35:b0:9a:17:85:19:51:71:29:9c:86:
                    c3:a8:68:cb:8e:e1:ea:ca:89:ef:4d:a3:bf:78:a6:
                    a0:74:bb:37:19:78:62:23:ee:b7:ae:cc:cf:52:1b:
                    24:ba:37:39:5d:ce:ee:a0:f1:bd:40:5a:81:b3:60:
                    01:35:8a:fc:4c:a6:c3:fa:ca:31:28:fc:51:ad:d2:
                    0b:c4:7f:60:de:39:fe:c7:e7:0a:c1:26:37:b8:c3:
                    78:0e:2d:2f:e0:68:a8:83:ce:49:24:51:53:96:1b:
                    4a:31:18:38:37:46:79:50:74:46:db:7d:2b:67:f5:
                    b0:92:f4:21:f1:1d:e7:82:97:19:d4:a4:1a:74:48:
                    d6:bf:a4:fa:ee:03:ea:b9:68:05:47:b5:f2:d3:c8:
                    3d:bf:86:eb:7c:99:56:50:4b:3f:64:1e:5a:d2:f9:
                    aa:4f:d4:ed:b7:e4:77:cf:67:ad:fe:b3:78:be:94:
                    8a:74:fb:8c:5f:38:0a:70:2d:76:76:ff:7c:eb:5b:
                    5f:b1:43:08:31:0e:91:32:69:52:a2:e0:6e:78:1d:
                    bb:8d:62:6e:cc:49:2c:be:d4:54:56:3f:6b:3f:e5:
                    e8:35:e0:76:7e:08:9a:00:fa:66:da:66:e6:ca:17:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5A:C6:6F:CE:14:20:09:1E:3E:0D:61:D5:6B:BE:70:C7:14:73:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9ec0f62e-7f70-3ecf-a924-514ddbb77ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2c:a8:f8:6d:e2:0c:62:de:09:d3:4f:72:7f:25:f8:35:1b:
         8a:33:b8:59:fa:26:f5:15:eb:d0:f1:c7:cc:4d:25:99:26:ef:
         f4:df:22:c3:98:1d:5e:f1:cb:53:52:14:b4:98:75:50:c2:a8:
         1a:5e:c3:11:fc:18:1d:b8:6e:6a:c0:e1:32:b7:ce:f5:6b:3a:
         05:98:b4:50:66:73:72:d4:f7:b0:71:fe:81:db:c9:ad:f3:ef:
         7f:bc:20:43:54:a8:ba:8b:7a:7a:8e:88:bc:c7:84:eb:0c:fe:
         6a:63:a7:90:df:44:e2:5e:7d:44:8e:3b:a0:ed:79:7b:a2:46:
         82:a8:e2:8c:07:ec:fd:da:55:5b:6c:4e:f7:03:42:60:e9:23:
         1a:90:eb:c7:a1:27:d0:3d:9c:8b:cc:2d:94:f2:9f:9d:19:9b:
         74:b1:61:bb:6f:ba:19:8a:b9:5c:4c:84:c4:1a:86:5e:6f:c1:
         8e:78:1c:cd:6c:a0:db:fa:bd:1a:31:6d:c1:68:fb:8e:55:6a:
         4c:6c:98:07:cc:b7:c8:97:e4:7d:94:6b:23:55:b0:75:58:6d:
         4d:56:37:67:1d:6d:a1:bc:1d:d9:ae:04:cc:e1:e1:6e:52:5a:
         4c:00:db:ce:24:51:70:58:75:28:f4:6f:30:2c:b3:cf:5e:0f:
         c1:cd:39:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+t5NrKiXhoalpNESAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MTAzMTAwMzEyNFoXDTI3MDEyOTAxMzEyNFowLzEtMCsGA1UEAxMk
ZjFkODU2YzgtZGJkYS00YTBhLWJkYTktN2YzZmYyNmEwYjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMjGyyxf3Q4IGum6uG3NRi/yNbCaF4UZUXEp
nIbDqGjLjuHqyonvTaO/eKagdLs3GXhiI+63rszPUhskujc5Xc7uoPG9QFqBs2AB
NYr8TKbD+soxKPxRrdILxH9g3jn+x+cKwSY3uMN4Di0v4Giog85JJFFTlhtKMRg4
N0Z5UHRG230rZ/WwkvQh8R3ngpcZ1KQadEjWv6T67gPquWgFR7Xy08g9v4brfJlW
UEs/ZB5a0vmqT9Ttt+R3z2et/rN4vpSKdPuMXzgKcC12dv9861tfsUMIMQ6RMmlS
ouBueB27jWJuzEksvtRUVj9rP+XoNeB2fgiaAPpm2mbmyhdmWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFJaxm/OFCAJHj4NYdVrvnDHFHOnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWVjMGY2MmUtN2Y3MC0z
ZWNmLWE5MjQtNTE0ZGRiYjc3Y2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHksqPht4gxi3gnTT3J/Jfg1G4ozuFn6JvUV69Dxx8xNJZkm7/TfIsOY
HV7xy1NSFLSYdVDCqBpewxH8GB24bmrA4TK3zvVrOgWYtFBmc3LU97Bx/oHbya3z
73+8IENUqLqLenqOiLzHhOsM/mpjp5DfROJefUSOO6DteXuiRoKo4owH7P3aVVts
TvcDQmDpIxqQ68ehJ9A9nIvMLZTyn50Zm3SxYbtvuhmKuVxMhMQahl5vwY54HM1s
oNv6vRoxbcFo+45VakxsmAfMt8iX5H2UayNVsHVYbU1WN2cdbaG8HdmuBMzh4W5S
WkwA284kUXBYdSj0bzAss89eD8HNOc0=
-----END CERTIFICATE-----
Generated at Thu Nov 5 04:54:31 2026 by rpki-client