Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a54cbe16-3452-326e-821a-3f593138ccfe.roa
File:                     a54cbe16-3452-326e-821a-3f593138ccfe.roa (raw, json)
Hash identifier:          qczYiuxgm9wRey38EvoYqR8UDIBA28FEoGfvryKO20Q=
Subject key identifier:   D7:AB:C1:F7:36:72:B5:A8:B7:8F:84:D5:CC:47:F3:E3:DD:C0:50:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EB2B1C2AC21537A29D6F4CA80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a54cbe16-3452-326e-821a-3f593138ccfe.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     9009
IP address blocks:        174.140.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c2:ac:21:53:7a:29:d6:f4:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=609704c6-acc7-4e30-ac29-b91cdd41d22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:76:a3:92:03:a9:16:93:be:27:75:c1:02:a0:
                    03:e3:4b:53:99:4c:eb:45:18:c5:cb:52:e9:d7:44:
                    fe:5f:f5:d9:2e:61:43:e5:a7:1d:de:39:25:80:ec:
                    6b:6a:06:1b:de:78:46:b1:e5:cf:38:64:4c:26:d1:
                    2d:ac:12:45:72:db:fd:48:26:f5:c1:1c:dd:e7:e0:
                    fa:9c:47:78:64:e3:10:df:df:ea:f1:f1:3f:97:d2:
                    b5:d5:d7:7e:d4:e2:fe:08:57:8a:cb:d1:bb:63:33:
                    61:67:f6:b6:61:42:d8:c7:f1:eb:57:3c:0b:19:8b:
                    8c:2e:93:dd:7f:1b:6d:2f:1a:d5:b1:a1:f4:43:a9:
                    6a:40:6a:c2:27:28:74:72:2b:e7:9a:81:57:70:6f:
                    49:6e:de:56:c7:02:42:5d:7c:60:94:98:96:76:57:
                    bc:1a:b9:fb:cf:57:f4:cb:7d:3d:87:ba:9f:c6:3d:
                    bf:92:8d:c7:e2:55:e6:e2:51:e6:97:d7:56:61:dd:
                    fe:28:d4:d1:f2:32:e4:3b:f0:97:f8:d1:09:6a:9e:
                    7b:12:85:12:ce:60:d1:f1:08:99:eb:2f:53:78:c3:
                    5a:6c:09:55:f3:36:40:88:12:d1:39:af:0b:47:ae:
                    84:11:73:3c:fb:e8:87:00:08:93:3b:a6:e5:3d:d8:
                    cd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AB:C1:F7:36:72:B5:A8:B7:8F:84:D5:CC:47:F3:E3:DD:C0:50:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a54cbe16-3452-326e-821a-3f593138ccfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:6b:af:6e:ee:a7:a0:c5:1c:d4:cf:f6:a0:20:a2:65:2d:
         02:6e:e8:71:b6:a3:35:c7:28:38:b9:96:2e:7c:a1:48:47:3f:
         39:65:46:3a:36:7f:3a:13:e7:08:b2:54:db:bd:c5:9a:a5:ae:
         a6:5d:04:c5:4a:73:cf:28:8e:d1:8c:77:8d:49:54:fc:cc:4c:
         f8:57:77:f0:13:6b:2b:4f:17:7b:59:bb:43:98:c0:0d:af:07:
         3e:17:81:02:b6:6f:75:97:2d:0b:f9:81:ee:4d:dc:0a:85:45:
         3d:1b:d4:c6:16:9a:14:9f:3d:36:dd:6d:24:ef:e9:9d:c6:f1:
         74:16:67:47:28:db:0e:e1:aa:b3:65:28:8b:65:3f:c1:0f:01:
         fa:fd:7f:9c:cb:f0:22:94:91:8b:ce:17:b4:fb:6f:3f:60:2d:
         3b:15:33:96:c3:f6:6a:3c:20:30:8e:21:84:36:61:c9:86:98:
         01:18:2d:37:85:91:b1:f7:8a:8d:3b:ef:33:b1:a9:a3:bc:0d:
         b8:0b:32:64:db:ac:87:ae:0a:3c:51:fd:28:fa:3a:e9:b5:93:
         43:3a:c3:89:de:e5:ed:58:6d:08:55:98:33:09:c7:1a:47:10:
         3a:12:2f:d7:37:57:de:7a:91:b2:d0:11:d0:57:94:42:96:47:
         ad:4d:81:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:43 2026 by rpki-client