Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dc82c954-0d21-36f7-b265-b1ca750801b7.roa
File:                     dc82c954-0d21-36f7-b265-b1ca750801b7.roa (raw, json)
Hash identifier:          1sXUhsBYeqz/C9lB4VAB4F3v/k2b3sqlMT0mG70RFzM=
Subject key identifier:   5F:8A:E4:CD:BD:70:DA:33:B6:96:A1:B1:5D:8D:44:56:7D:22:C9:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E1DCF518A4AF305B1FF4464A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dc82c954-0d21-36f7-b265-b1ca750801b7.roa
Signing time:             Tue 09 Jun 2026 17:04:41 +0000
ROA not before:           Tue 09 Jun 2026 17:04:41 +0000
ROA not after:            Mon 07 Sep 2026 17:04:41 +0000
asID:                     47007
IP address blocks:        173.211.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:cf:51:8a:4a:f3:05:b1:ff:44:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  9 17:04:41 2026 GMT
            Not After : Sep  7 17:04:41 2026 GMT
        Subject: CN=23af2143-94c3-4029-83ed-b4ddf57f5ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:4f:49:3b:52:5b:38:ad:53:37:29:6a:dd:
                    57:f7:90:24:92:30:c8:41:dc:c4:3f:41:d0:93:52:
                    eb:b6:1f:b5:30:54:55:c1:1f:bf:be:33:1d:e8:d1:
                    31:a1:53:4c:d4:42:9d:10:4c:47:14:cc:d4:08:ca:
                    c3:36:5f:ce:57:f3:98:f5:f8:8b:2d:84:a9:66:55:
                    a2:73:c7:14:a6:1b:6e:ef:83:e3:d7:83:9f:6b:9c:
                    87:d2:36:e5:cc:56:7b:d4:6b:87:f2:03:ea:88:0c:
                    9b:f2:b9:9d:0c:71:b3:39:a3:cf:46:a8:e9:ec:1a:
                    e6:5a:42:63:3e:0b:48:70:fa:1f:6c:95:60:5a:7b:
                    c6:06:9d:28:f4:09:db:0b:36:46:62:eb:36:42:7b:
                    8c:18:c4:7e:72:89:70:f2:c0:6c:fc:fe:2a:f3:af:
                    5c:58:1f:fd:4e:4b:b7:15:8e:fb:e1:56:c5:cc:49:
                    d3:83:b1:ca:77:5b:de:95:96:dc:4a:8d:49:85:9f:
                    84:af:85:3c:0c:f9:69:fa:19:61:c6:20:71:45:95:
                    d0:a9:be:3d:ed:b9:a1:a1:d5:e4:98:6d:4d:9f:c4:
                    a3:d6:7a:a4:8d:e1:1f:c1:c7:dd:4f:e2:0d:09:0f:
                    38:f4:38:78:0e:56:47:a3:78:0e:49:d7:ed:83:25:
                    3f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:E4:CD:BD:70:DA:33:B6:96:A1:B1:5D:8D:44:56:7D:22:C9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dc82c954-0d21-36f7-b265-b1ca750801b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:23:da:2c:41:7c:83:2e:0b:c9:95:68:5b:b7:b8:d9:ea:
         0b:06:d7:ad:20:64:c7:77:26:1f:ee:6e:5c:d6:59:cb:b4:04:
         8d:d1:88:01:a1:9c:76:a6:22:1c:bf:42:c9:d1:fa:d7:9c:df:
         3d:6c:fd:8c:49:a0:ff:10:64:81:ac:3b:71:84:9a:38:69:a1:
         ce:76:e6:7a:83:72:d9:f6:4a:38:33:14:69:77:b9:a9:5d:91:
         c6:51:89:bf:76:c6:d3:c5:95:84:c8:97:62:2e:d2:2a:2b:e4:
         0d:2d:4e:8a:d1:2e:44:e9:02:7a:c1:24:c0:29:bf:e6:1f:0d:
         9f:1e:47:3b:45:a5:1a:55:67:8d:51:cc:56:63:30:4c:de:3d:
         34:0c:86:6b:87:5b:cd:52:c0:58:2c:a4:1d:25:5e:c3:09:b9:
         34:03:41:5c:8f:cb:5b:30:6c:4c:b1:6e:81:ca:f4:b6:4a:3f:
         a7:00:ff:24:da:3e:97:1b:a7:5d:cb:b9:d7:f1:68:e6:bf:c8:
         28:92:a1:34:50:f5:99:b7:e3:23:61:79:f5:90:15:d2:2d:6d:
         41:17:79:31:4d:e2:33:06:c9:79:fb:ea:76:ed:58:5f:c5:fd:
         cd:7f:fa:61:da:6f:5d:af:db:92:8a:12:f6:aa:90:d7:12:b2:
         49:91:19:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 13:54:26 2026 by rpki-client