Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a80193e1-a564-3f7d-a191-b6abcdec1b7e.roa
File:                     a80193e1-a564-3f7d-a191-b6abcdec1b7e.roa (raw, json)
Hash identifier:          HwE14pdMepD0aRZkyrDO4HWUhhO/CsawjlD9ffPh2cE=
Subject key identifier:   05:02:49:B0:83:81:45:1D:D9:E0:28:67:70:7B:29:61:B8:A8:0A:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC0A70F221934E15BEC551DA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a80193e1-a564-3f7d-a191-b6abcdec1b7e.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        67.207.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0f:22:19:34:e1:5b:ec:55:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=cb7414ef-a7a5-4dae-94f0-a0f92bdfdbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ec:f7:7e:11:24:f1:7d:da:62:d7:88:ac:95:
                    db:98:48:50:6c:cc:9a:b0:fa:ff:e8:08:75:78:0f:
                    36:af:c3:a4:d3:07:7f:6d:50:ee:76:35:e9:e0:e1:
                    99:de:11:78:16:1d:4f:62:c2:b8:7e:15:5d:a4:4a:
                    93:ef:b4:76:5f:fc:26:64:31:57:41:bb:47:13:e5:
                    02:4d:8d:03:a9:6a:c9:df:45:e9:40:44:36:f9:cd:
                    6e:80:30:f7:93:ee:70:19:de:d0:96:cb:0d:da:4f:
                    fd:d0:cf:4e:6a:91:d7:a5:85:76:ac:b4:02:23:a8:
                    56:e8:60:6b:26:6a:63:3c:e7:b6:8d:24:de:94:2e:
                    ad:6e:66:a7:b1:dc:58:48:79:d0:0b:e9:eb:94:60:
                    1b:64:39:f9:c5:ec:6e:64:0f:8e:9d:5e:bc:ae:5b:
                    5d:1d:b5:de:c0:f8:f9:95:bf:1f:37:42:14:50:bb:
                    23:0e:7a:da:e8:7c:e3:77:c4:75:3a:e0:81:e3:39:
                    af:f4:3e:a7:10:48:a5:90:12:5b:45:a8:b9:70:ff:
                    fb:a7:c9:64:6d:29:da:4d:04:18:c6:f7:07:18:8d:
                    d6:90:e0:d3:15:dc:7b:97:12:c5:f8:6c:29:ac:45:
                    5b:aa:08:6b:0c:b5:88:f8:a8:7c:2d:93:c8:e5:29:
                    a8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:02:49:B0:83:81:45:1D:D9:E0:28:67:70:7B:29:61:B8:A8:0A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a80193e1-a564-3f7d-a191-b6abcdec1b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:94:c3:df:2f:da:b5:36:f8:dc:6b:b0:bc:4b:33:6e:c9:44:
         42:4f:2f:15:f6:8c:94:bc:34:25:c5:63:cb:8a:eb:cf:9e:7b:
         b4:47:b8:fd:a8:e1:96:ee:76:04:74:f4:33:34:bf:10:62:5c:
         02:a0:5c:f0:67:c1:04:4d:b1:1b:d1:ed:ae:49:e7:a3:39:4d:
         ea:95:92:a4:f7:a3:3a:1f:3d:78:90:28:9c:de:38:10:37:d0:
         d7:60:78:f7:be:8b:6b:c5:a3:b9:31:30:36:45:53:a3:6d:d3:
         47:51:5a:af:7a:2b:4d:02:be:50:66:e7:fe:55:87:f3:b8:33:
         19:a9:49:e9:7e:0a:72:4e:d6:70:5d:ce:48:16:89:82:a8:5f:
         d8:24:62:60:f9:ae:2d:8c:14:ae:ae:6b:0d:98:f0:de:8c:70:
         d2:3f:20:0d:b6:0a:60:45:1f:09:3f:d7:09:4e:eb:f7:0f:eb:
         b3:30:11:2a:f2:a2:c3:3d:ab:03:38:b9:8b:e6:2d:f0:d0:2a:
         5d:67:a9:a2:a1:e4:50:73:4a:63:2e:bd:3d:21:38:16:02:d6:
         61:7b:8a:a3:cb:8a:b6:dc:82:99:1b:8f:0e:03:8f:bd:29:3f:
         53:8a:ec:95:db:c0:9f:03:73:b9:a3:39:3a:d7:db:a5:1e:f3:
         c7:cc:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:06:38 2026 by rpki-client