Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9fb73f17-4ace-33f7-8fd5-6480b777ff61.roa
File:                     9fb73f17-4ace-33f7-8fd5-6480b777ff61.roa (raw, json)
Hash identifier:          I1Ni/8UAQme9/34OByiA3Ed0bkK07IUk7NOEM6y688I=
Subject key identifier:   02:29:36:70:3C:15:63:C9:25:F8:D5:20:5D:D5:62:CF:64:4A:CB:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584FADE42520C6B6C5FFBF8AA000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9fb73f17-4ace-33f7-8fd5-6480b777ff61.roa
Signing time:             Sat 31 Oct 2026 00:29:59 +0000
ROA not before:           Sat 31 Oct 2026 00:29:59 +0000
ROA not after:            Fri 29 Jan 2027 01:29:59 +0000
asID:                     21769
IP address blocks:        173.211.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ad:e4:25:20:c6:b6:c5:ff:bf:8a:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 31 00:29:59 2026 GMT
            Not After : Jan 29 01:29:59 2027 GMT
        Subject: CN=cfceabd6-04fd-453f-9fd6-e7480ff32b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:0b:d0:34:f0:aa:5a:03:03:b3:db:8f:f8:
                    aa:0f:15:ec:82:fe:dc:99:15:96:c1:dd:05:39:a5:
                    0c:3e:be:25:3b:76:e4:79:e7:0f:51:e3:a8:5f:15:
                    ed:22:2b:82:32:f2:65:ee:03:3b:19:52:19:6d:78:
                    03:30:2e:c7:0f:de:80:32:ee:1d:b3:20:01:5a:30:
                    22:fd:dd:50:ec:9b:5d:47:20:77:cf:cf:d8:4f:fb:
                    54:38:0b:4e:a7:90:6c:ed:f3:65:86:09:37:9a:33:
                    25:a4:75:f0:35:62:6d:cd:e0:c3:e6:2b:d7:7c:a3:
                    77:4b:30:4c:0f:99:3a:b9:a3:30:39:a8:9e:54:ea:
                    a7:20:2e:db:f8:e7:fb:44:3a:b3:3f:a9:08:59:de:
                    11:77:b3:97:30:21:15:1f:bd:e2:d5:b5:19:76:60:
                    d2:af:72:01:ad:ec:d7:8e:02:d3:47:80:1c:2d:6e:
                    20:e4:f0:95:52:f6:c9:ab:70:4c:b7:5d:5a:05:e3:
                    96:9c:b3:f2:0a:cb:a5:09:08:0f:c0:95:52:45:f4:
                    b8:aa:d5:75:08:5c:24:cd:9f:1c:70:ae:a5:a8:03:
                    82:e3:96:d9:07:0f:46:f9:7c:c0:d4:a6:2c:7f:c9:
                    6b:2c:d3:e5:70:69:08:e2:e7:9e:b1:eb:8c:5f:f9:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:29:36:70:3C:15:63:C9:25:F8:D5:20:5D:D5:62:CF:64:4A:CB:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9fb73f17-4ace-33f7-8fd5-6480b777ff61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:58:43:ff:d6:eb:ac:58:60:ee:0c:09:f5:82:2d:f6:58:0c:
         22:83:7c:3b:b9:21:f2:d5:0f:8e:0c:dd:da:c8:33:61:d8:18:
         de:38:3c:01:9b:df:fa:76:0a:5e:ba:f8:85:53:e8:d7:44:8e:
         60:7c:43:3b:e6:93:23:e4:42:5f:9a:2b:04:ca:0d:01:d1:9d:
         64:d5:59:b9:80:7d:36:86:a6:2b:23:70:7f:5d:20:9c:a0:97:
         e6:a2:04:64:31:9f:0c:00:11:65:65:39:39:f9:a0:3f:be:cb:
         cc:11:f1:24:fd:95:4c:b4:a1:73:c5:be:61:47:71:fa:fb:68:
         16:7a:db:cd:6a:1f:ce:11:f0:97:6e:80:a3:6c:55:f6:82:2e:
         6f:13:f3:27:1c:3e:10:09:7f:45:b1:bb:c7:03:78:98:d5:76:
         43:0c:7f:2e:b7:50:b3:8c:8f:01:81:45:a8:a3:5c:b6:12:50:
         d7:e5:b2:68:a7:f7:82:8d:ce:7a:a4:4d:1b:11:a1:c5:9b:a6:
         6a:40:98:8e:67:23:18:b5:ac:53:d9:5e:07:9e:49:1f:fb:92:
         14:7e:58:98:79:82:c5:d7:79:73:29:f4:3f:86:ef:39:88:0a:
         93:6e:e5:a8:0d:5f:0b:96:c0:da:88:16:e3:51:32:1c:e2:52:
         05:65:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:16:58 2026 by rpki-client