Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/de2ee7dc-3aa3-3807-b21c-6a96f9aed856.roa
File:                     de2ee7dc-3aa3-3807-b21c-6a96f9aed856.roa (raw, json)
Hash identifier:          bvFw+8csCKRecJkMRMjZlTOzShPsY++E/AMUauAOXg4=
Subject key identifier:   78:EB:6A:31:C9:85:81:A0:25:4A:04:D5:09:D7:65:EF:82:B5:E5:8F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E1AE0E58A5567A4A153995600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/de2ee7dc-3aa3-3807-b21c-6a96f9aed856.roa
Signing time:             Mon 08 Jun 2026 15:52:40 +0000
ROA not before:           Mon 08 Jun 2026 15:52:40 +0000
ROA not after:            Sun 06 Sep 2026 15:52:40 +0000
asID:                     7979
IP address blocks:        216.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:e0:e5:8a:55:67:a4:a1:53:99:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  8 15:52:40 2026 GMT
            Not After : Sep  6 15:52:40 2026 GMT
        Subject: CN=ec0523bd-508a-41b1-ab65-f35b7ab27f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:13:f9:45:89:e7:2d:b9:65:57:6f:ff:8f:
                    8f:03:a5:c9:81:e6:f6:a9:d1:91:5d:7c:3d:82:bf:
                    91:10:3d:b7:42:fc:b8:b6:bd:93:e9:c3:a6:2a:d9:
                    f5:30:87:80:e0:4a:ee:fd:d8:fe:3d:46:66:a9:e6:
                    34:3c:29:a2:cc:6e:4a:f9:2c:bc:52:de:ea:8a:bc:
                    e4:c1:cc:ed:f6:d1:06:ad:b6:ab:dd:ba:ab:6e:25:
                    9a:bf:aa:1e:ab:54:1f:65:11:52:a6:47:14:51:21:
                    16:8a:4b:14:67:af:9a:95:1c:82:ca:af:91:0f:0f:
                    b5:98:d7:1b:7b:68:00:d0:b7:7a:59:56:9f:38:69:
                    cd:80:f1:df:da:43:fd:6a:64:7e:5b:0a:28:c7:16:
                    c1:c0:27:2b:00:14:13:93:fd:44:46:63:23:23:1a:
                    fa:1a:06:e5:c4:79:d5:0f:00:a0:71:72:8a:e2:91:
                    1a:b5:c6:3c:46:f0:2d:b6:d2:9b:4d:a2:c2:9c:c2:
                    8d:38:ba:4b:ad:cf:d6:9b:ba:28:52:94:be:76:2c:
                    80:50:d3:05:b1:6f:96:1d:7d:d6:95:96:68:af:84:
                    14:4c:86:66:d0:a7:b3:a5:d0:b6:31:bb:4c:81:cf:
                    7b:5d:f6:db:88:2d:85:00:ba:fb:97:b2:38:cc:b7:
                    2f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EB:6A:31:C9:85:81:A0:25:4A:04:D5:09:D7:65:EF:82:B5:E5:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/de2ee7dc-3aa3-3807-b21c-6a96f9aed856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:45:46:9f:3e:24:8c:ef:b0:38:fc:ac:c5:35:69:5c:e8:d6:
         09:1a:3d:f2:dc:a4:cf:2e:b2:73:e4:3c:78:91:69:8c:db:82:
         53:5a:f7:10:3b:79:27:e4:e6:b4:f8:55:03:d6:1e:ad:5e:59:
         1c:63:b4:ca:98:76:67:3f:88:dd:a9:2b:67:97:75:d7:15:9c:
         a9:d1:c8:23:81:b0:9f:33:32:c1:c0:00:b8:ab:58:0e:d2:7a:
         d3:49:7c:7a:28:42:7e:1e:bc:e1:0a:d6:8f:c5:3a:ca:47:bb:
         a4:db:02:fb:b1:9f:85:3f:7f:4a:84:cc:39:4d:c1:3d:31:23:
         2b:56:c5:96:9c:ab:41:d5:d8:7e:14:99:98:af:b3:03:71:88:
         2a:60:46:2c:e2:00:21:5f:fc:e9:01:76:be:04:1e:d6:51:ea:
         67:37:50:72:c7:ba:59:c5:fb:f0:43:0b:bf:ce:2c:c4:a1:03:
         b2:ec:24:75:5b:8f:19:a6:de:1d:bd:f4:c1:99:c4:10:ed:2d:
         94:6f:16:cb:5e:44:68:99:1f:94:93:e7:fe:30:95:db:49:4f:
         6a:33:ff:ac:f1:dd:9e:09:70:16:95:9b:1e:88:cd:08:bd:98:
         af:cb:52:71:b3:a8:f9:75:eb:d7:39:6e:2b:dd:8b:0a:d8:7b:
         ce:4a:bb:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4a4OWKVWekoVOZVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDYwODE1NTI0MFoXDTI2MDkwNjE1NTI0MFowLzEtMCsGA1UEAxMk
ZWMwNTIzYmQtNTA4YS00MWIxLWFiNjUtZjM1YjdhYjI3ZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEET+UWJ5y25ZVdv/4+PA6XJgeb2qdGRXXw9
gr+RED23Qvy4tr2T6cOmKtn1MIeA4Eru/dj+PUZmqeY0PCmizG5K+Sy8Ut7qirzk
wczt9tEGrbar3bqrbiWav6oeq1QfZRFSpkcUUSEWiksUZ6+alRyCyq+RDw+1mNcb
e2gA0Ld6WVafOGnNgPHf2kP9amR+WwooxxbBwCcrABQTk/1ERmMjIxr6GgblxHnV
DwCgcXKK4pEatcY8RvAtttKbTaLCnMKNOLpLrc/Wm7ooUpS+diyAUNMFsW+WHX3W
lZZor4QUTIZm0KezpdC2MbtMgc97XfbbiC2FALr7l7I4zLcvgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjrajHJhYGgJUoE1QnXZe+CteWPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZGUyZWU3ZGMtM2FhMy0z
ODA3LWIyMWMtNmE5NmY5YWVkODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EptMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVFRp8+JIzvsDj8rMU1aVzo1gkaPfLcpM8usnPkPHiRaYzbglNa9xA7
eSfk5rT4VQPWHq1eWRxjtMqYdmc/iN2pK2eXddcVnKnRyCOBsJ8zMsHAALirWA7S
etNJfHooQn4evOEK1o/FOspHu6TbAvuxn4U/f0qEzDlNwT0xIytWxZacq0HV2H4U
mZivswNxiCpgRiziACFf/OkBdr4EHtZR6mc3UHLHulnF+/BDC7/OLMShA7LsJHVb
jxmm3h299MGZxBDtLZRvFsteRGiZH5ST5/4wldtJT2oz/6zx3Z4JcBaVmx6IzQi9
mK/LUnGzqPl169c5bivdiwrYe85Ku60=
-----END CERTIFICATE-----
Generated at Tue Jun 9 13:50:18 2026 by rpki-client