Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8427027-aaae-3f3d-8096-aa48b358686e.roa
File:                     a8427027-aaae-3f3d-8096-aa48b358686e.roa (raw, json)
Hash identifier:          rO9OKevprYGL7Oga0Z4DNdqRQMdnoTiriYVO0bjqwH0=
Subject key identifier:   8B:00:59:F3:AE:E5:B8:25:19:41:FD:94:B2:7A:15:0A:C5:A2:97:D1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA787FEAF6D0C4E0549329380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8427027-aaae-3f3d-8096-aa48b358686e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     47007
IP address blocks:        184.174.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:fe:af:6d:0c:4e:05:49:32:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=789252f5-767a-468c-95d7-e27bfd60e234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:ac:94:59:ea:4f:f1:d1:6b:04:19:38:3c:
                    c4:e0:cd:52:d7:a4:bc:89:6c:d1:4b:a8:56:49:5c:
                    26:b0:6b:59:3a:90:28:14:5f:e2:d4:c1:9a:0f:18:
                    98:5f:8f:9a:de:17:cc:19:cd:ac:25:fc:f0:a1:73:
                    ea:38:17:39:58:2f:b9:f3:dc:3b:48:3c:26:ce:ee:
                    07:07:cd:bb:d1:f9:3f:6d:87:83:f3:e9:3e:30:a8:
                    81:33:bb:6e:76:57:29:21:3c:69:f2:0d:49:ad:02:
                    51:27:9d:3c:19:32:0a:b1:c5:76:69:a6:7d:9c:91:
                    7a:11:b0:84:d0:ac:d9:45:36:25:a4:21:18:98:a5:
                    fc:8b:5f:03:73:d7:ac:a5:80:7a:0a:4b:a0:fb:d5:
                    39:bb:86:63:ca:ed:d5:45:ed:34:9a:0e:d5:54:9b:
                    55:6c:88:17:89:02:fd:e6:54:20:05:60:b1:49:97:
                    b8:78:1e:b1:78:5e:28:c5:cb:2d:e3:c8:2e:6e:5b:
                    34:bc:b7:aa:39:34:4e:cd:0c:0f:4d:54:fc:83:94:
                    55:e5:07:00:2a:d3:e9:eb:aa:c4:e7:d6:f1:1e:8f:
                    22:ec:8a:d6:c1:42:0d:ea:dc:70:d0:67:1b:a7:af:
                    ad:7f:6e:d9:d2:a4:fe:e4:dc:1d:ed:8a:eb:d8:77:
                    11:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:00:59:F3:AE:E5:B8:25:19:41:FD:94:B2:7A:15:0A:C5:A2:97:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8427027-aaae-3f3d-8096-aa48b358686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:6f:92:d0:df:11:ce:42:43:93:a2:b3:0a:c3:64:75:11:17:
         9e:01:35:26:15:3b:7a:df:6b:4c:bf:2d:ce:53:e1:20:bf:f0:
         c6:4b:83:56:72:66:4a:90:ec:81:11:0c:04:db:0b:d7:8a:e6:
         34:72:d4:9b:33:1a:80:07:cf:b9:16:b2:cc:93:21:fd:df:b2:
         7b:f0:c0:69:10:71:95:5a:f1:ce:81:f7:c4:3b:2a:ae:48:c8:
         cc:d3:4b:cf:3d:0b:4b:b1:22:05:a2:39:da:f1:25:9a:7c:73:
         6d:32:87:61:5d:8b:3a:21:13:35:2f:fd:a5:54:bf:c9:74:f6:
         69:2d:c4:4f:7d:a7:ee:9a:d8:ea:50:dc:40:fd:c1:d4:00:71:
         66:22:93:a6:0e:ed:9f:5b:af:c4:19:61:9b:7d:da:4c:ec:f3:
         09:7b:9b:76:70:45:0a:79:c6:6c:0a:27:43:e7:3b:e3:1f:a4:
         4c:0b:e3:7e:ff:00:20:70:bd:18:a2:8a:07:46:0f:a2:13:2e:
         2a:90:01:ea:ac:3a:e5:3f:29:08:f6:11:cf:3d:7c:2d:94:11:
         db:ab:1d:bc:39:fc:88:1f:d9:43:91:ab:95:30:0d:07:38:bb:
         9b:7d:d8:5c:e0:c0:b3:59:f3:65:89:24:78:c2:3b:54:68:8d:
         ef:2d:18:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 11:55:39 2026 by rpki-client