Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a2d111ae-0b64-331c-bf09-fe0564158731.roa
File:                     a2d111ae-0b64-331c-bf09-fe0564158731.roa (raw, json)
Hash identifier:          X9OFOrYDTRJ5zSVlcESknTO4Yo3M46jS4WC1ipcCp/g=
Subject key identifier:   B6:7F:01:30:B7:0F:4E:C7:7A:86:A2:4D:9E:4C:A4:D1:BB:0F:DE:ED
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EED1FAACF312B61E14C917000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a2d111ae-0b64-331c-bf09-fe0564158731.roa
Signing time:             Sat 22 Aug 2026 23:18:54 +0000
ROA not before:           Sat 22 Aug 2026 23:18:54 +0000
ROA not after:            Sat 21 Nov 2026 00:18:54 +0000
asID:                     214483
IP address blocks:        174.140.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:1f:aa:cf:31:2b:61:e1:4c:91:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 22 23:18:54 2026 GMT
            Not After : Nov 21 00:18:54 2026 GMT
        Subject: CN=3079a733-0933-4801-97a7-b7c078f816fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:63:de:b5:4e:d3:be:74:f6:c1:10:39:ac:
                    c9:cb:6a:d3:bf:c3:de:19:c5:87:67:92:39:71:60:
                    1c:fb:51:8c:12:1d:88:be:9b:22:37:0b:b7:bb:64:
                    20:6a:43:be:2b:95:37:6e:3a:f6:32:5c:fc:c9:21:
                    32:e3:d9:50:19:42:24:80:7b:ca:7d:fd:30:52:91:
                    ec:83:d7:da:f5:da:aa:9b:19:d8:0a:a2:1d:8e:ae:
                    1a:ad:bb:e8:8e:63:83:89:24:57:c9:94:74:2d:b3:
                    51:06:43:2b:44:73:7b:38:03:72:d4:a6:51:a5:f2:
                    7c:ab:66:c4:b9:16:9e:f4:22:4d:5d:00:18:74:42:
                    5c:03:85:ea:a5:d1:39:c0:69:01:9a:60:33:6a:81:
                    fb:73:57:ef:a2:7d:0a:e6:96:29:b7:ab:4d:88:6b:
                    3a:74:89:0f:9a:fc:bc:d1:bf:f9:64:52:1b:87:68:
                    c2:99:d4:d4:94:c8:71:53:bb:f6:76:16:07:b3:10:
                    43:51:84:df:82:e5:28:a2:76:2a:72:c0:02:c4:3a:
                    56:f9:a1:20:3c:bb:f7:ac:85:25:1f:b8:73:10:44:
                    29:c3:56:49:7a:f8:66:7d:4f:e1:2b:43:21:62:10:
                    c5:52:07:c1:4a:85:b8:30:28:78:d9:73:08:55:33:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:01:30:B7:0F:4E:C7:7A:86:A2:4D:9E:4C:A4:D1:BB:0F:DE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a2d111ae-0b64-331c-bf09-fe0564158731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:08:4d:60:64:5d:3a:b6:81:34:16:a5:0e:3b:55:31:c0:18:
         30:17:ac:6b:28:0b:08:80:6b:c9:25:91:88:e2:27:f0:9b:59:
         4f:bc:cf:82:f9:4b:4d:7a:3b:1b:c7:bf:50:5b:f8:97:dc:83:
         fe:fb:9a:13:9c:2a:92:d1:b8:da:f0:21:f9:7d:36:17:b5:19:
         90:ad:c1:20:71:89:8a:7b:87:f0:62:d8:ed:fa:66:8a:e7:8e:
         5f:8f:8b:86:93:29:cf:a1:67:cc:37:9e:da:47:4e:e3:a5:63:
         cd:df:ec:81:74:9e:82:cd:30:d8:7e:df:c2:ef:3b:df:d6:76:
         ea:84:f0:2d:cd:7b:c6:72:ef:f7:15:0c:10:e5:b5:b0:31:59:
         46:e7:a0:4a:0d:04:5e:93:f8:dd:1d:31:5c:ab:cf:3c:52:eb:
         41:f8:48:1e:58:57:72:ad:b4:ae:80:6b:a1:3f:2c:e8:73:80:
         2b:f6:5f:91:14:c0:7a:c0:ff:1d:75:4b:c0:7d:a2:a9:eb:37:
         a1:c9:0e:82:0c:ee:3b:38:72:e7:5a:96:db:7f:8d:d4:ca:4f:
         5b:ec:36:26:58:a0:46:4b:db:8b:d1:00:8e:09:0d:92:41:39:
         ba:6f:23:59:77:6f:3b:ce:85:43:17:6c:d2:e9:92:dc:51:7c:
         fe:5f:6d:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tH6rPMSth4UyRcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDgyMjIzMTg1NFoXDTI2MTEyMTAwMTg1NFowLzEtMCsGA1UEAxMk
MzA3OWE3MzMtMDkzMy00ODAxLTk3YTctYjdjMDc4ZjgxNmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifpj3rVO07509sEQOazJy2rTv8PeGcWHZ5I5
cWAc+1GMEh2IvpsiNwu3u2QgakO+K5U3bjr2Mlz8ySEy49lQGUIkgHvKff0wUpHs
g9fa9dqqmxnYCqIdjq4arbvojmODiSRXyZR0LbNRBkMrRHN7OANy1KZRpfJ8q2bE
uRae9CJNXQAYdEJcA4XqpdE5wGkBmmAzaoH7c1fvon0K5pYpt6tNiGs6dIkPmvy8
0b/5ZFIbh2jCmdTUlMhxU7v2dhYHsxBDUYTfguUoonYqcsACxDpW+aEgPLv3rIUl
H7hzEEQpw1ZJevhmfU/hK0MhYhDFUgfBSoW4MCh42XMIVTOWUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZ/ATC3D07HeoaiTZ5MpNG7D97tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYTJkMTExYWUtMGI2NC0z
MzFjLWJmMDktZmUwNTY0MTU4NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArozvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkITWBkXTq2gTQWpQ47VTHAGDAXrGsoCwiAa8klkYjiJ/CbWU+8z4L5
S016OxvHv1Bb+Jfcg/77mhOcKpLRuNrwIfl9Nhe1GZCtwSBxiYp7h/Bi2O36Zorn
jl+Pi4aTKc+hZ8w3ntpHTuOlY83f7IF0noLNMNh+38LvO9/WduqE8C3Ne8Zy7/cV
DBDltbAxWUbnoEoNBF6T+N0dMVyrzzxS60H4SB5YV3KttK6Aa6E/LOhzgCv2X5EU
wHrA/x11S8B9oqnrN6HJDoIM7js4cudaltt/jdTKT1vsNiZYoEZL24vRAI4JDZJB
ObpvI1l3bzvOhUMXbNLpktxRfP5fbRE=
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:09:18 2026 by rpki-client