Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c2163188-6a33-3399-9aac-d805a6e41c24.roa
File:                     c2163188-6a33-3399-9aac-d805a6e41c24.roa (raw, json)
Hash identifier:          HlCS0bBb+yxTBs7T75BSSRxh8EzQiIQqrLkbfw0Q3hY=
Subject key identifier:   BC:50:0A:F1:B6:89:89:42:46:86:40:DB:C0:2A:B6:F7:9C:D0:FE:81
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F497635F94E808CC1B7829920
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c2163188-6a33-3399-9aac-d805a6e41c24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        173.214.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:35:f9:4e:80:8c:c1:b7:82:99:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b79bff4e-02ba-4809-a0a5-3bec804d5cdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:8e:a5:40:10:18:26:a4:e0:05:ba:04:d8:
                    1f:65:f4:2c:ae:b0:0f:67:66:8c:46:da:6f:59:0d:
                    66:b1:5a:8c:15:6c:45:37:30:84:05:d1:16:64:04:
                    e7:3b:c0:c5:eb:da:90:99:f1:cf:f8:93:c2:f1:30:
                    0f:bd:4a:b0:a2:c8:54:14:78:db:ae:0f:73:a8:55:
                    dd:25:e5:4b:f7:c1:6c:0e:f1:c8:ad:a2:75:55:d8:
                    85:b4:cf:ba:3b:4a:a3:67:6d:ac:a9:e6:86:1e:2f:
                    f2:e5:84:ca:7d:bb:c9:e2:12:1c:d6:24:f9:f8:54:
                    f9:25:4b:74:dd:8a:b2:44:44:ca:62:78:1f:fa:55:
                    f9:2a:7c:69:f1:7e:a3:4f:f7:0b:18:6d:2c:d8:4c:
                    23:f3:0f:b8:a4:d0:69:3b:2e:cb:95:7a:91:69:97:
                    ec:db:a3:c3:7d:7f:fd:c4:72:10:5f:24:1e:74:12:
                    48:c0:6d:b6:e0:5c:b9:7c:d6:6e:16:ea:d4:2d:1e:
                    9e:f0:31:22:a3:c8:cc:23:02:d3:06:94:73:55:a6:
                    a7:24:e4:8d:7f:a7:3b:f8:7a:0e:f7:34:4a:51:c9:
                    f7:04:0d:42:3c:27:ce:7c:2d:5d:f9:90:13:e6:a7:
                    ce:26:70:ac:5a:e3:ba:a6:46:66:a8:82:9f:c2:9f:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:50:0A:F1:B6:89:89:42:46:86:40:DB:C0:2A:B6:F7:9C:D0:FE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c2163188-6a33-3399-9aac-d805a6e41c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:a5:09:f1:42:57:f9:b9:32:a0:24:6d:03:50:7d:79:4a:88:
         5b:f9:33:1c:d1:21:2f:7e:61:bc:89:db:11:55:6f:30:b5:bf:
         f2:c5:b6:2f:23:30:4c:b5:12:2f:68:5d:4b:29:d0:a5:d4:6d:
         83:f2:f7:05:67:5d:fa:c0:2e:e9:e6:e9:fd:23:ca:27:4e:b4:
         a7:d1:03:5a:d6:b3:89:8a:49:58:e2:0a:13:38:df:7c:69:81:
         3a:82:14:d4:7f:c5:7f:d7:be:d5:a9:83:a0:96:e7:31:d0:73:
         45:55:c3:e2:c8:4f:4b:ad:e1:5c:a3:3a:a0:bf:d8:a4:df:54:
         fe:fd:7d:7c:84:6d:b0:0e:61:f1:31:73:04:47:cc:cb:09:00:
         ee:f5:44:95:bc:9d:23:87:6d:78:d6:25:ad:87:7d:d7:d9:5b:
         e2:52:27:0d:74:d4:17:57:8d:b2:46:4c:6b:10:3d:97:1d:ae:
         ca:42:4b:fd:0f:38:a7:7e:c8:fb:44:ac:a2:19:63:9e:53:91:
         b9:fc:11:54:b2:24:42:d0:3d:e5:0f:1c:3c:68:02:c4:16:bc:
         0b:0f:86:ec:e9:0a:c5:14:c7:15:aa:ed:27:1b:df:b8:44:87:
         9d:07:db:bd:c1:ed:7d:2b:a2:42:c9:f2:01:42:bf:c4:93:3c:
         c1:3c:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:35:12 2026 by rpki-client