Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dc82c954-0d21-36f7-b265-b1ca750801b7.roa
File:                     dc82c954-0d21-36f7-b265-b1ca750801b7.roa (raw, json)
Hash identifier:          nWJivNjR7+8G/qI+MLJ154vDGTHtIpnWEO/Yt/QN8ik=
Subject key identifier:   4F:0C:16:F3:CD:AA:27:8E:0A:D2:6C:C1:E5:58:AD:51:9A:C8:2B:41
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC0A70DA2D563983A7E2D7A40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dc82c954-0d21-36f7-b265-b1ca750801b7.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        173.211.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:0d:a2:d5:63:98:3a:7e:2d:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=f49c3cf3-1ea9-4be5-9f71-e747e04895a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:49:2c:f1:11:7a:59:c0:e7:d7:34:2e:97:6d:
                    62:4b:25:42:c7:0b:ec:d9:a3:6d:9a:91:75:70:55:
                    af:65:a3:bc:d2:b0:28:9a:7e:34:fc:05:bc:c5:1e:
                    7f:b7:45:62:27:6d:71:79:b5:34:81:f7:25:4a:d6:
                    86:15:57:95:09:d2:82:ca:07:df:66:42:1f:9b:7b:
                    51:e6:77:24:49:31:c0:a7:ea:1e:e5:cc:9e:ca:b4:
                    9b:eb:7b:f0:f3:7e:0a:2f:36:99:c3:b0:ee:97:6f:
                    d7:d4:a2:2b:36:59:5c:2c:42:f7:65:84:70:62:09:
                    dd:e8:d9:5a:a8:5b:79:0d:f8:e0:b4:f6:3e:d3:13:
                    55:22:9b:1b:7f:9e:08:f8:2f:07:05:47:78:11:10:
                    a6:82:8a:2b:42:4e:a0:05:01:ef:96:ae:be:75:46:
                    95:33:67:f8:5c:cf:0e:fa:77:67:cd:3b:37:a1:28:
                    25:16:f4:36:e4:5b:f3:07:f1:5a:f2:63:96:da:47:
                    e1:dc:66:bf:b4:83:90:cb:d6:34:38:11:db:cc:c6:
                    93:f0:44:ce:88:ec:b3:1a:bb:5c:f1:93:c5:eb:03:
                    e8:33:da:f4:f8:62:ab:fd:a3:ab:28:f1:19:e8:68:
                    95:c9:83:e7:4f:bf:98:f8:a2:a5:12:5d:64:42:f4:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0C:16:F3:CD:AA:27:8E:0A:D2:6C:C1:E5:58:AD:51:9A:C8:2B:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dc82c954-0d21-36f7-b265-b1ca750801b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:f9:96:d4:a2:0b:df:7f:64:1b:1d:a3:c4:58:40:43:d3:
         7e:54:69:16:70:df:cc:74:2e:66:5b:a7:8d:9b:e8:1c:2d:fc:
         36:8f:8c:89:1a:ef:07:6e:65:93:65:dc:ec:02:7a:94:20:5e:
         45:f1:ef:51:28:a5:06:7c:7d:df:06:99:8d:82:4c:f9:ad:34:
         60:e6:ee:4d:a0:df:70:01:de:42:66:f7:7a:c0:70:c0:e8:70:
         ed:ca:24:37:91:38:38:c1:06:ae:37:be:81:50:a7:14:ae:b6:
         b0:ef:32:33:65:1f:cf:3c:c2:cf:22:d6:fc:39:f0:f1:2f:a0:
         5e:de:d4:8a:19:15:ce:50:71:64:e4:78:21:34:bc:08:9b:90:
         87:84:9a:6b:53:82:d7:31:cf:9e:34:71:54:73:69:ea:23:8b:
         f2:64:cd:89:e7:a6:f2:28:47:90:a3:5a:ae:83:96:4e:61:8f:
         b1:5c:9c:24:04:70:53:47:42:51:b5:85:e0:23:dc:25:9b:ea:
         ca:4b:78:a9:57:0d:c4:b6:fb:80:e5:10:2f:a6:7f:5d:d0:05:
         37:bc:13:03:24:44:97:fb:38:7d:32:5f:1d:9b:c5:b5:a2:07:
         67:bd:28:b7:e4:6c:98:b6:52:34:19:68:76:cc:12:86:fe:f9:
         37:e2:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:08:19 2026 by rpki-client