Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b51fd69a-ed2b-3cf9-b121-74aaa58f6e32.roa
File:                     b51fd69a-ed2b-3cf9-b121-74aaa58f6e32.roa (raw, json)
Hash identifier:          YbTxzZ7vWENPe5EIcCn6FX+G8i9BdyEGcG2bH8W6XgI=
Subject key identifier:   74:18:0E:7A:A4:89:5E:35:BD:1E:A1:22:B7:39:8D:70:67:FA:76:FA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F15CCEABD39312CC59B1CE148
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b51fd69a-ed2b-3cf9-b121-74aaa58f6e32.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     21769
IP address blocks:        216.74.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:ea:bd:39:31:2c:c5:9b:1c:e1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=34e72b3a-22a1-43c9-a4e7-de921be50a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:4d:a5:2d:18:e7:64:53:78:86:10:f9:ec:
                    5a:40:27:b9:85:ad:93:d6:81:85:c1:b3:d6:e1:67:
                    4e:3b:ea:21:c0:62:3b:e8:56:3e:8e:dd:31:27:a8:
                    58:ea:6e:b1:23:65:e7:97:ea:a4:62:d4:bf:e8:14:
                    59:31:a8:2e:b4:8f:98:07:ec:c7:93:95:e5:ee:3e:
                    85:68:bb:4c:92:82:89:3c:f3:56:2c:07:9d:20:9f:
                    09:55:38:0a:d5:43:99:f1:7c:d6:98:73:ce:38:b6:
                    ec:c8:88:f7:04:4e:26:3e:0d:39:d4:72:5b:fe:ea:
                    1c:40:a7:b9:a9:21:75:63:ef:61:8f:c2:39:d9:07:
                    54:2b:f6:dc:cd:f5:72:f8:94:46:14:8b:5d:9b:e7:
                    fc:69:b1:29:4f:4c:48:38:1d:a7:9b:cb:4c:5f:d1:
                    ee:4e:da:b4:a0:5f:51:3a:55:04:29:d0:e2:d3:d1:
                    47:47:2e:b5:30:4c:3c:0c:fa:ad:1e:a2:25:c0:70:
                    08:83:ca:54:e9:46:b1:06:0e:f9:f4:93:00:0c:c1:
                    15:19:1b:d9:43:46:2a:ef:2b:d2:3c:77:fb:33:d4:
                    6d:a3:9d:ec:34:cb:01:40:d4:af:20:7a:98:7c:ab:
                    b9:ef:b9:64:67:67:5f:3b:2c:5d:0e:89:ff:6b:72:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:0E:7A:A4:89:5E:35:BD:1E:A1:22:B7:39:8D:70:67:FA:76:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b51fd69a-ed2b-3cf9-b121-74aaa58f6e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:bc:50:85:85:e4:c0:fc:24:c7:df:c4:12:8c:e2:e1:42:
         cc:fc:79:20:ed:84:d3:1d:c0:ae:38:b1:38:1e:9d:7b:cb:5b:
         c0:35:f2:0d:5c:6f:7b:68:01:88:ac:a9:65:a8:e2:8b:28:98:
         44:7f:b7:68:6f:65:4d:ee:73:4a:be:8a:d2:a5:ea:24:43:83:
         e0:af:53:a8:f5:e6:e3:78:e0:00:1d:9a:49:82:f2:0e:64:db:
         44:fc:3f:bf:98:2f:48:c8:0c:16:59:3f:d5:8e:b7:68:48:35:
         13:39:1d:1d:48:e8:43:e0:e5:c8:4f:3c:bf:b1:5a:9b:62:63:
         18:4b:70:92:0d:20:d4:b7:0a:94:e6:fd:a6:eb:17:e2:05:0b:
         d6:d8:5b:c0:89:3b:aa:9f:1c:aa:38:30:88:4f:dd:8f:56:f5:
         31:22:29:c9:8e:74:6e:2f:74:ab:bd:a7:cc:9d:8b:49:d0:4e:
         69:55:ac:b1:55:2a:b9:de:5e:15:ff:84:37:39:a0:94:c3:50:
         b0:55:8b:7c:54:ed:8a:2f:09:53:9d:0c:c2:fa:76:7c:0d:b3:
         e8:98:d8:c9:d1:05:26:44:5a:f5:b4:e4:ce:a1:f7:37:0e:cb:
         4e:28:ce:37:4d:34:f3:bc:a9:e5:6f:35:78:e3:b5:34:bc:f3:
         3e:b0:1d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 03:46:43 2026 by rpki-client