Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c1a869ef-6032-3186-ad74-7ed886a24bb3.roa
File:                     c1a869ef-6032-3186-ad74-7ed886a24bb3.roa (raw, json)
Hash identifier:          oiLorxxCiuTdlKQRJJVYY66uYDDdbfjRyXjlulxKFII=
Subject key identifier:   A6:EE:D6:2A:4B:E5:62:08:AA:28:1D:79:A0:73:03:4E:7F:19:45:50
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F37D0CDE08B6D72D2631D35A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c1a869ef-6032-3186-ad74-7ed886a24bb3.roa
Signing time:             Fri 18 Sep 2026 17:25:37 +0000
ROA not before:           Fri 18 Sep 2026 17:25:37 +0000
ROA not after:            Thu 17 Dec 2026 18:25:37 +0000
asID:                     54252
IP address blocks:        64.69.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:d0:cd:e0:8b:6d:72:d2:63:1d:35:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 18 17:25:37 2026 GMT
            Not After : Dec 17 18:25:37 2026 GMT
        Subject: CN=e7a6845a-41bd-4160-84af-9701e0fce533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:62:24:51:c5:b7:0a:4c:13:25:3a:c2:14:
                    a8:fc:b6:6d:2c:c0:69:09:9d:53:10:81:c1:11:1c:
                    70:b0:59:1e:99:84:6e:62:aa:f6:e6:61:64:6a:a6:
                    ab:15:45:87:23:9e:66:43:1f:8f:68:66:c9:a5:65:
                    07:e9:67:12:0d:4c:03:4a:a0:d1:97:f6:34:fb:e4:
                    d9:91:a3:d3:7c:e3:4f:44:88:f6:2f:57:fe:c8:e8:
                    86:69:9f:6a:fa:3b:b1:22:b0:7c:92:19:e2:26:41:
                    11:78:00:76:ad:17:36:29:f9:30:6a:37:b0:9d:20:
                    1e:eb:97:b5:05:b8:ab:f4:14:5f:87:a6:15:93:1d:
                    77:c3:6a:00:45:41:98:43:b8:76:7b:80:fa:e0:12:
                    e7:2d:a8:99:ee:ba:41:d8:c8:0a:24:b4:df:68:32:
                    f3:8b:ad:3c:8d:e9:7a:12:30:36:90:69:b3:09:fc:
                    ea:ea:9e:66:e4:b3:25:fd:e3:e8:59:6f:3a:7a:9b:
                    6b:b0:73:8c:7a:b8:7d:59:ee:56:e3:9c:45:41:0e:
                    85:08:03:da:7a:eb:db:07:8f:4b:60:7b:b0:e5:9c:
                    28:8b:fc:69:9e:37:99:9d:12:69:71:d2:68:d3:6a:
                    3d:8f:0b:5f:2d:e9:62:3e:86:81:38:9d:04:3d:c4:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EE:D6:2A:4B:E5:62:08:AA:28:1D:79:A0:73:03:4E:7F:19:45:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c1a869ef-6032-3186-ad74-7ed886a24bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:f2:47:40:12:52:c9:25:f7:bb:83:fb:d0:5b:45:82:5b:
         1d:cf:cb:38:7b:7e:31:eb:80:4b:e4:4b:9b:88:f6:0f:01:11:
         d0:28:a9:9c:a9:68:cf:56:3c:96:65:e0:09:b9:73:1d:95:40:
         4e:c7:7f:9f:df:f0:89:7a:be:8f:94:f7:1e:c3:e1:56:d7:30:
         24:5c:e5:23:5f:37:5b:08:1d:29:c2:8e:dc:83:a4:9f:3e:0f:
         7a:58:e1:c5:24:05:47:6e:6f:65:cd:97:78:5b:1b:1d:ba:d0:
         ab:54:65:c1:74:f8:f6:9c:19:cd:13:b6:79:d0:04:0b:3c:95:
         4b:b2:cb:ff:04:be:6f:54:1b:3e:bf:f8:7b:bf:e9:d1:27:8a:
         e5:e4:55:f5:4b:c9:80:53:98:aa:1e:0a:ae:ac:28:e8:74:80:
         75:3a:00:a7:db:d7:0a:05:4a:13:de:3f:c7:82:3d:b7:ab:a8:
         82:05:63:0a:ad:98:b9:13:94:c2:c2:7e:4d:9e:e5:1e:25:8d:
         5b:7b:ac:18:c3:b8:49:26:18:c2:b9:c4:aa:b2:be:75:20:2b:
         89:67:42:7d:b5:f9:0d:df:07:bb:ba:20:27:7f:dd:05:5b:37:
         86:14:64:79:af:ef:93:01:fc:fd:91:2c:9e:fa:d9:96:c2:01:
         c4:1a:d2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:44:34 2026 by rpki-client