Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caad86ba-637b-3393-a993-2b5e2684e9ab.roa
File:                     caad86ba-637b-3393-a993-2b5e2684e9ab.roa (raw, json)
Hash identifier:          wt/wvLO/EyrDqYDH4LXsMRxwM/BQP9/L3miolljRhLs=
Subject key identifier:   7F:1F:F9:E8:0C:CE:A6:44:CF:21:37:DF:D2:F9:CC:76:B8:F7:C3:FB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4972C3345FBDF0A281749140
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caad86ba-637b-3393-a993-2b5e2684e9ab.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        173.211.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c3:34:5f:bd:f0:a2:81:74:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bf547b71-d492-418b-a196-fe3fa65b94fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3f:2d:cd:9f:56:5b:17:cc:47:7f:67:74:cc:
                    76:f3:2f:9a:64:18:8e:cd:ac:cc:aa:4a:24:ac:1b:
                    97:43:58:b5:72:6a:57:f1:91:6c:6e:de:18:bf:8e:
                    aa:22:2f:3c:c6:bb:33:e7:9d:7f:3d:01:7b:31:b2:
                    49:23:b1:dd:12:72:8b:ca:9b:0a:8a:a9:51:4d:36:
                    e0:78:88:5d:60:00:8b:68:65:ee:79:d9:b0:fe:74:
                    c1:53:9c:b2:18:32:63:a9:7b:6b:86:c5:e5:61:d7:
                    b7:53:5e:0e:59:9e:35:00:95:7d:13:42:b6:a6:7c:
                    15:4f:da:3a:97:02:77:ec:27:ae:b6:12:6b:e2:8f:
                    79:50:dd:79:f1:99:67:0a:2e:22:32:58:75:8d:32:
                    b1:0f:2e:31:43:ea:b9:33:06:7c:71:be:9b:e5:82:
                    f4:18:61:9d:27:96:57:46:09:e3:d8:76:69:ab:1c:
                    47:55:98:98:d2:a1:30:40:d3:1b:d4:3a:41:53:ae:
                    bf:c6:2c:59:dd:61:51:07:b6:ba:44:0b:9f:e2:1a:
                    7b:f0:18:6d:ee:4a:13:bf:1e:d5:11:21:1d:89:0f:
                    63:ea:37:71:f6:7d:d9:a5:2f:4f:c1:b1:d4:67:e2:
                    3e:a3:f8:cb:49:ed:69:2d:2e:57:b6:6f:f3:1b:95:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:F9:E8:0C:CE:A6:44:CF:21:37:DF:D2:F9:CC:76:B8:F7:C3:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/caad86ba-637b-3393-a993-2b5e2684e9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:1d:7f:4b:d6:77:4f:a8:9d:86:af:72:e2:af:07:3a:d1:8c:
         5c:aa:92:e0:52:0c:ef:f3:d3:cf:a9:bc:49:d4:8a:ba:19:2e:
         5d:c8:fe:e7:ff:aa:fa:ce:c9:0c:ff:bb:fd:dc:20:80:46:97:
         9c:8c:2d:27:11:7b:26:4a:1a:81:91:3f:9e:2f:65:9e:08:47:
         f4:a4:f0:79:ac:11:d7:b3:f3:32:6f:7f:91:fe:91:9d:71:76:
         1c:fa:67:bf:04:d8:86:32:3e:74:dd:72:ce:af:d0:e9:e4:c0:
         21:a6:fa:4b:c0:60:1b:63:4d:9d:33:ea:87:11:eb:72:db:79:
         22:5c:1e:a6:7c:82:df:88:90:a0:87:e4:80:08:38:14:2d:9f:
         1b:a8:71:1c:e8:86:5b:2a:b7:9a:ce:cc:8c:f1:36:a7:6d:19:
         bb:71:da:5f:37:90:47:f7:b5:d0:45:4a:cb:91:38:1a:4d:0d:
         44:fc:c1:de:42:ee:2d:ab:20:0b:2b:85:6d:a0:6c:06:4e:b8:
         17:d0:a3:95:81:92:4a:9c:31:d6:44:11:0b:60:73:05:19:c1:
         98:99:c7:f6:bd:28:74:82:ab:08:bd:08:e6:51:de:88:ea:cc:
         e2:fb:05:81:4f:81:84:b4:7c:83:39:8c:8f:b3:45:8b:5a:3d:
         33:99:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:20 2026 by rpki-client