Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
File:                     d032a8d4-77d0-39c1-86bb-5584ef9af130.roa (raw, json)
Hash identifier:          bsnRcpEtXoJsmA5riA/y+c5pAQNdeQVcJNe7TQlU/mU=
Subject key identifier:   5B:3D:D5:3B:83:91:C3:8D:B1:EF:9B:D5:5D:AF:1A:00:67:C3:F1:88
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E7634E08199DC60A6A41D2000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     212238
IP address blocks:        216.107.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:e0:81:99:dc:60:a6:a4:1d:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=e8b3d641-2ee3-4d5f-a414-e23bf95a9891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cf:47:fd:67:91:4b:55:50:57:1a:bc:ba:d3:
                    dd:cc:01:02:92:e8:7f:d7:81:48:d8:6b:26:5b:3d:
                    45:8b:2e:3d:37:46:a2:af:94:2d:30:0b:07:9b:56:
                    9e:47:60:1b:8b:58:dc:ae:d5:80:c9:e4:e7:5d:90:
                    23:a8:4a:8b:04:fd:b3:ff:47:94:bc:ad:6f:cd:eb:
                    93:4f:3a:ad:0a:9d:60:20:88:b8:be:84:15:79:b1:
                    33:a9:39:f3:af:44:60:a4:f7:67:df:d7:a2:fb:df:
                    0b:db:92:9c:db:ee:b0:de:22:1d:46:9f:e8:09:d9:
                    8d:e9:eb:0d:c5:f4:de:e8:09:cd:25:6f:88:0b:a6:
                    8b:c5:90:45:fe:30:1b:f1:27:db:e1:bb:21:24:13:
                    25:d9:81:96:55:5b:ab:0c:3a:46:56:b6:2c:36:7a:
                    95:67:bb:5e:9d:e4:27:cf:b4:ab:cf:c0:cc:34:d2:
                    ee:25:ca:f9:09:82:88:a2:3d:c2:62:7c:54:e5:c6:
                    63:a0:69:5b:51:08:c3:be:18:19:18:fd:c2:ca:12:
                    6b:23:ca:14:6d:42:0a:68:2a:dc:96:a7:3e:75:06:
                    9a:31:ce:66:15:ee:15:60:34:d9:b5:21:e6:2e:7a:
                    12:23:ce:fe:af:6d:52:92:f6:22:91:ee:00:97:ee:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:D5:3B:83:91:C3:8D:B1:EF:9B:D5:5D:AF:1A:00:67:C3:F1:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:44:00:a8:6e:6b:b9:40:57:27:83:9c:29:fb:a0:21:3c:68:
         18:c7:4f:3f:84:d8:03:bb:28:36:0f:3e:58:61:e0:ed:c2:28:
         44:f5:72:48:ca:26:cc:80:12:4a:b7:5d:28:91:bb:a8:5f:ac:
         93:e5:a4:5e:e4:bc:6a:4b:ff:d8:62:2c:de:0d:69:69:20:9b:
         51:4a:9b:99:25:b8:76:f4:fb:37:99:8e:f2:b6:89:91:fd:cd:
         4e:10:71:d3:c2:c1:ef:4c:86:e3:92:c2:c0:53:39:52:d9:67:
         8c:a1:a7:b4:d9:fe:85:2e:da:ab:14:cd:f7:a5:16:a0:21:a8:
         5b:ba:ff:53:e1:91:51:2b:cd:12:ae:5e:7e:d7:c2:e9:8e:83:
         57:17:fd:7a:05:84:28:74:59:1a:4f:a4:7a:60:5f:f6:2a:09:
         ac:35:8b:3d:cf:47:55:cd:c5:05:c4:af:1c:d4:25:52:d6:1c:
         f9:4a:a5:44:51:f1:74:87:de:dd:37:d1:73:aa:b1:c9:ab:a3:
         6f:98:44:f4:92:df:bd:eb:a8:8f:8f:93:d7:88:05:9b:70:a6:
         1e:8e:c7:e4:ea:9f:bd:77:c8:8f:a3:b8:bf:1d:7e:2e:b0:d2:
         27:c1:b1:39:6a:4f:cf:7c:a9:44:ac:ff:bf:b2:4e:f6:1f:3f:
         a3:0b:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:34:40 2026 by rpki-client