Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3410d1b-5bb4-36d1-a048-ebe5693355b6.roa
File:                     a3410d1b-5bb4-36d1-a048-ebe5693355b6.roa (raw, json)
Hash identifier:          FEkIx4w/YS1G4knrmKVva0P8hs6ylMtDA6qrL3grR8A=
Subject key identifier:   6C:76:E4:42:8E:69:DD:AC:2B:D1:FC:56:2E:94:17:AF:10:0C:5A:E4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC0A70BDC021F0FDEA58BE670
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3410d1b-5bb4-36d1-a048-ebe5693355b6.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        216.10.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0b:dc:02:1f:0f:de:a5:8b:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=d6eec372-f0a1-4a07-ba48-2a531981a933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:5c:d4:29:99:e7:e1:10:cc:84:dd:c0:46:
                    10:fa:44:5f:25:73:ce:c3:b8:63:51:8a:e6:fc:c9:
                    c4:8a:51:65:49:21:ac:6d:46:af:ac:44:50:74:ad:
                    de:46:c4:03:58:02:f9:54:04:11:96:ec:c3:aa:2d:
                    32:f9:3d:90:48:fc:b3:e6:4e:9c:b1:43:b1:4c:d2:
                    49:c1:08:1b:a3:e9:8d:e6:b6:11:41:44:06:bb:ec:
                    f6:27:bf:a4:00:f7:87:eb:da:c2:c5:72:0d:43:63:
                    38:1b:13:3c:02:e6:0b:8c:f0:35:df:a8:1e:ae:cc:
                    9f:32:46:5e:c7:78:b8:05:92:90:73:4a:96:cd:0e:
                    86:a5:0b:45:cb:b5:f2:ef:23:be:fe:3f:19:86:84:
                    09:38:7f:cb:a6:6a:8e:e2:5e:fa:5a:0e:73:aa:f4:
                    4e:5f:f2:e6:65:8b:ab:63:f6:74:2f:04:3d:1a:98:
                    4e:d2:43:e7:d7:69:53:1d:8f:c8:5e:33:fd:d5:0d:
                    58:33:6e:5a:19:fa:31:92:41:e2:5a:df:47:be:2d:
                    e6:4c:50:a4:9f:02:0a:dc:0f:b2:3a:62:98:8b:3f:
                    44:38:8e:b4:41:71:68:79:ba:ec:c5:5d:28:86:b7:
                    ce:12:4d:cb:1d:08:53:98:82:aa:6f:c3:16:a0:c7:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:76:E4:42:8E:69:DD:AC:2B:D1:FC:56:2E:94:17:AF:10:0C:5A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3410d1b-5bb4-36d1-a048-ebe5693355b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:e0:61:10:00:18:a9:6f:e3:10:1c:d0:67:97:36:c6:aa:
         2a:ab:fc:3e:5d:58:41:d6:26:cd:bf:b8:0f:01:18:61:79:14:
         b8:81:98:40:f0:7d:85:a1:96:ac:ec:c6:09:79:c9:79:53:03:
         46:c9:a3:aa:55:e4:65:da:48:36:d3:41:e4:e3:12:ad:78:8e:
         51:70:ec:16:3a:e9:5d:6f:17:65:3b:3e:7d:e6:3b:ff:9f:0c:
         b9:65:44:39:7d:2a:05:46:97:c2:64:9b:3e:b2:ac:71:d9:fe:
         c2:5d:02:fa:d5:fe:98:e9:7a:56:fb:35:0e:44:d2:79:d9:ef:
         4a:27:fd:c8:59:4b:6e:5a:2b:9a:64:fb:7e:aa:2b:ea:5e:15:
         d2:a2:a9:5d:b4:1d:f9:c4:10:16:aa:b7:e4:2e:1f:af:7f:d1:
         42:2a:b7:9f:b3:4d:ba:90:54:dd:3b:f5:d7:ec:fa:ac:27:e5:
         8b:9c:c1:54:51:a3:fe:5d:77:73:fb:65:0a:df:27:93:3b:50:
         60:45:09:a4:b4:24:66:30:93:6c:2e:70:3c:2c:2d:61:3f:68:
         f3:91:73:3a:31:79:82:52:df:75:a5:fa:32:bd:de:98:d2:ce:
         c5:6b:16:52:9b:e0:a8:71:5c:59:3e:de:af:b0:09:40:8e:63:
         a3:79:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:06:36 2026 by rpki-client