Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa
File:                     bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa (raw, json)
Hash identifier:          C6wH0M8sQ4XO9Toh0WhAoTBCQ53GRNrdLDXGpeuCp+k=
Subject key identifier:   4B:BF:3C:FF:43:5F:D1:E2:D1:66:45:6C:B4:10:AF:04:6A:20:37:C4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EFCACCAD8333B250BBD681A20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     19344
IP address blocks:        216.10.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:ca:d8:33:3b:25:0b:bd:68:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=b9f62e2d-bf4f-4713-bcac-b3d39e08693c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:45:85:8c:e0:68:68:1f:45:36:49:75:57:3c:
                    f1:10:c3:69:c3:db:a7:0d:d0:b4:75:c9:d2:9e:be:
                    c7:c5:b3:9f:33:6e:bc:13:90:d4:2e:9e:71:3a:f5:
                    28:6f:69:0b:07:e5:67:0e:ca:ff:9a:5d:65:11:ad:
                    88:8d:7d:3e:03:5e:9c:3b:75:6d:8f:af:f5:29:40:
                    61:a8:b6:d8:1b:45:34:33:44:07:da:63:ac:e0:a6:
                    14:90:e9:01:d6:20:bd:1c:7f:6d:52:27:06:9f:3f:
                    de:66:68:29:ed:58:5b:4d:0b:b4:a3:81:83:6f:26:
                    20:19:f9:fd:9a:b1:80:3a:0d:89:05:de:8b:17:4d:
                    d4:51:25:f5:54:d7:fe:0e:84:a4:b5:25:24:c9:34:
                    ff:9e:52:e8:0a:39:a5:56:bc:02:2d:0c:7e:8c:9c:
                    49:f7:48:a0:12:18:d9:c9:bd:34:35:02:e3:1d:e5:
                    59:b1:d7:3e:78:92:57:72:a0:01:6f:28:c8:ce:21:
                    6e:77:51:db:c2:d1:a1:09:d3:47:31:aa:e8:8d:36:
                    a2:57:41:4b:35:22:bc:56:e2:19:72:0b:d2:6a:f0:
                    f0:be:32:dd:1f:54:ea:a8:54:7e:e5:01:7c:69:8a:
                    5a:8f:d0:70:be:33:45:e0:12:78:ca:e5:f2:2c:10:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BF:3C:FF:43:5F:D1:E2:D1:66:45:6C:B4:10:AF:04:6A:20:37:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc1d8d7f-1d6e-31f4-b7ba-e8dceb6b0c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:eb:99:66:3b:d4:10:c6:66:34:4a:95:74:20:4b:f0:b1:67:
         03:d3:3b:f5:79:b2:c8:0b:49:3e:3d:63:0e:73:9a:06:77:1f:
         23:3c:49:5a:6b:e6:10:c5:67:a5:34:84:9e:8e:09:96:88:d6:
         47:5c:cb:d5:16:c7:f3:a9:c8:0f:a6:a5:59:bd:d0:06:da:82:
         78:2a:cb:e5:f2:bb:23:0a:08:f5:2f:14:5a:f7:b8:72:4a:76:
         08:18:9d:a6:47:8e:1f:c3:f7:a0:44:c8:38:26:16:be:8a:24:
         0a:2f:1f:a0:eb:54:02:66:51:bd:52:32:68:ce:8d:91:f5:ee:
         39:09:ca:57:d4:e1:53:2e:eb:ea:39:c6:21:fc:6f:f2:b8:06:
         4b:41:05:a4:70:7a:ea:5c:3b:06:ce:51:d0:bb:84:4e:ed:a6:
         a9:c3:ca:c1:ac:a7:30:61:ae:bd:1e:31:a3:56:dd:03:8f:7b:
         cc:d6:96:df:7e:fb:ad:bb:1d:b2:2b:28:7d:71:30:c3:5f:38:
         30:85:fb:df:b3:c3:ca:1d:83:27:fc:5f:4f:c5:5b:78:7f:b7:
         ab:29:7f:03:1c:0d:c1:67:72:ff:cd:c2:29:e0:1b:2f:c1:af:
         a5:fd:b5:0a:aa:6e:7f:46:fa:de:de:16:f8:47:ab:37:5b:ad:
         cb:24:c0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:06:10 2026 by rpki-client