Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dcd545a7-50d2-39de-8730-9ae39e791f60.roa
File:                     dcd545a7-50d2-39de-8730-9ae39e791f60.roa (raw, json)
Hash identifier:          vfMVayd4KIH3ajIE4jXBp51/KnaOdMbM2skbjN5izS4=
Subject key identifier:   8C:C3:15:45:50:2A:64:3C:47:B4:04:DE:D2:F9:B3:F0:3B:3E:C1:B1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D9D435F69318CB3BDBBA28A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dcd545a7-50d2-39de-8730-9ae39e791f60.roa
Signing time:             Fri 24 Apr 2026 15:59:14 +0000
ROA not before:           Fri 24 Apr 2026 15:59:14 +0000
ROA not after:            Thu 23 Jul 2026 15:59:14 +0000
asID:                     402309
IP address blocks:        216.75.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9d:43:5f:69:31:8c:b3:bd:bb:a2:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 24 15:59:14 2026 GMT
            Not After : Jul 23 15:59:14 2026 GMT
        Subject: CN=0b74c3e3-9d33-491c-ad79-4a55a10780aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:3d:61:ba:7f:e1:e1:0a:cd:46:af:6f:ad:
                    24:42:75:e4:5e:bf:d2:16:e9:49:0d:dd:f5:07:92:
                    c9:70:52:e9:96:f2:92:90:1a:ab:41:45:05:56:85:
                    48:be:ae:8b:ba:d9:b0:73:d6:40:fa:01:19:6b:a9:
                    6c:2c:d4:df:42:72:31:f5:5f:c6:60:28:03:c2:86:
                    11:b7:06:e0:18:d5:35:00:4c:5f:ce:61:29:8c:30:
                    07:76:5b:59:bc:cf:5d:5a:aa:94:60:46:a2:aa:fc:
                    97:d9:75:23:7b:51:d4:ed:c6:a6:19:cd:3b:4e:d6:
                    0d:cd:4a:8d:71:e9:58:6f:d2:fd:c5:69:a8:ee:03:
                    98:ac:7e:f6:e5:13:c4:2d:cf:7d:9e:06:dc:91:ec:
                    ad:62:05:7a:cc:1a:5d:0d:e0:bc:d9:f2:2b:73:fc:
                    bd:0e:0e:4e:83:fd:b8:3c:f1:6e:1c:56:ea:22:e5:
                    05:0c:32:bb:32:cb:a7:af:f1:16:6d:6f:9c:05:e0:
                    ee:8f:f4:0d:80:a0:f6:f0:1f:a5:f9:2e:a2:d0:80:
                    af:c8:d5:1c:49:0a:8d:33:62:7a:95:c8:68:b1:7b:
                    34:2c:89:41:38:79:37:37:f9:47:a3:c6:b8:5b:1f:
                    de:5d:90:ae:f2:a2:39:ce:b1:17:15:1d:de:6a:8e:
                    ed:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:15:45:50:2A:64:3C:47:B4:04:DE:D2:F9:B3:F0:3B:3E:C1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dcd545a7-50d2-39de-8730-9ae39e791f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ef:58:d0:5a:2d:7d:01:5c:7b:86:95:99:59:6b:1f:13:72:
         2c:76:be:6b:f9:72:49:48:dd:63:e9:d1:98:4c:bf:9f:0a:a3:
         4f:a8:6f:f8:1d:1b:aa:9e:29:1d:ae:c0:bb:8b:fe:41:db:1d:
         f2:ab:db:ac:63:ee:3b:81:b9:ba:11:0c:99:c9:18:db:9d:f6:
         25:7a:97:03:40:bb:9d:40:07:b5:ef:fe:52:2f:85:f8:0f:8e:
         4a:8e:c9:c5:5b:4e:e4:81:6c:5e:0a:a7:d3:17:51:9b:98:fe:
         45:5c:13:1b:7a:66:b5:80:86:7f:41:24:70:e5:ad:fd:9b:41:
         dc:3f:97:a2:15:04:a4:19:2f:fc:20:0e:80:2e:19:85:a2:07:
         d2:ea:ce:73:f9:df:ed:68:04:d7:12:c8:0f:ba:75:34:27:23:
         65:f8:9f:98:ac:a4:52:9b:27:45:a6:ca:6a:c5:e4:a2:4f:3e:
         3f:06:25:f8:98:63:0a:89:3f:b5:b3:cc:d5:11:ad:69:14:6c:
         e5:32:95:6b:95:03:a4:06:cc:42:45:40:83:aa:b5:79:20:3c:
         16:25:5b:6e:34:38:74:85:92:be:ee:6b:33:dc:88:d7:cc:f3:
         0d:81:8e:98:7d:9e:4c:3e:0f:86:93:ab:9a:7f:2c:94:92:ce:
         08:27:14:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2dQ19pMYyzvbuiioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDQyNDE1NTkxNFoXDTI2MDcyMzE1NTkxNFowLzEtMCsGA1UEAxMk
MGI3NGMzZTMtOWQzMy00OTFjLWFkNzktNGE1NWExMDc4MGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dM9Ybp/4eEKzUavb60kQnXkXr/SFulJDd31
B5LJcFLplvKSkBqrQUUFVoVIvq6Lutmwc9ZA+gEZa6lsLNTfQnIx9V/GYCgDwoYR
twbgGNU1AExfzmEpjDAHdltZvM9dWqqUYEaiqvyX2XUje1HU7camGc07TtYNzUqN
celYb9L9xWmo7gOYrH725RPELc99ngbckeytYgV6zBpdDeC82fIrc/y9Dg5Og/24
PPFuHFbqIuUFDDK7Msunr/EWbW+cBeDuj/QNgKD28B+l+S6i0ICvyNUcSQqNM2J6
lchosXs0LIlBOHk3N/lHo8a4Wx/eXZCu8qI5zrEXFR3eao7tewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIzDFUVQKmQ8R7QE3tL5s/A7PsGxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGNkNTQ1YTctNTBkMi0z
OWRlLTg3MzAtOWFlMzllNzkxZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EtKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDvWNBaLX0BXHuGlZlZax8Tcix2vmv5cklI3WPp0ZhMv58Ko0+ob/gd
G6qeKR2uwLuL/kHbHfKr26xj7juBuboRDJnJGNud9iV6lwNAu51AB7Xv/lIvhfgP
jkqOycVbTuSBbF4Kp9MXUZuY/kVcExt6ZrWAhn9BJHDlrf2bQdw/l6IVBKQZL/wg
DoAuGYWiB9LqznP53+1oBNcSyA+6dTQnI2X4n5ispFKbJ0WmymrF5KJPPj8GJfiY
YwqJP7WzzNURrWkUbOUylWuVA6QGzEJFQIOqtXkgPBYlW240OHSFkr7uazPciNfM
8w2Bjph9nkw+D4aTq5p/LJSSzggnFIU=
-----END CERTIFICATE-----
Generated at Sat Apr 25 00:12:26 2026 by rpki-client