Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa
File:                     e3185cc6-59be-3e0e-b876-18f70e4af35c.roa (raw, json)
Hash identifier:          M/SsqDmvy7RHsVyh6OrQ4jv2KSlTNu7hxCsgXFn4yyI=
Subject key identifier:   14:80:1F:C8:76:3B:14:FC:9B:B0:DE:BD:C9:9D:D5:6F:F0:02:90:87
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EF9E210E012CE58BC5EF859E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     45671
IP address blocks:        173.211.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:10:e0:12:ce:58:bc:5e:f8:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=0a777bb4-070f-4fa0-bb33-c50daee444b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:68:d2:02:c9:f7:8e:61:1f:aa:b2:f6:c9:8d:
                    2d:57:e5:40:04:04:68:68:66:35:9b:33:c5:6f:76:
                    b3:69:ed:83:d7:ac:c0:59:14:69:3e:de:56:c3:65:
                    3a:5b:85:49:e5:f4:e0:90:9f:49:d8:f0:9c:46:79:
                    96:6c:7d:85:a1:32:72:8b:42:00:6f:89:b6:a0:5a:
                    0c:42:46:da:e2:6a:71:c4:db:df:96:29:81:44:8f:
                    2c:ba:9f:5a:0b:7a:1a:6a:e6:46:33:bb:37:6b:4f:
                    1d:4f:8e:1d:3a:3a:25:b9:6a:48:d4:29:80:5f:b8:
                    ff:0a:04:5f:ac:5f:ee:0c:8f:dc:af:02:2b:a7:d9:
                    7d:33:77:86:b7:55:d6:67:84:10:7a:3f:2b:88:ff:
                    46:13:86:bc:d3:7d:bf:28:3d:2d:5e:f2:e6:ef:22:
                    e3:b8:ef:14:3a:58:59:0d:7c:96:13:7c:d1:38:bf:
                    ed:26:e3:1b:64:e0:0f:e3:59:c6:18:83:e8:bf:e9:
                    9e:9a:1f:1e:1d:a7:30:3c:43:e1:4b:45:6d:3d:45:
                    79:76:eb:34:6a:5f:d8:4c:68:56:68:d0:32:fa:60:
                    0d:38:91:e5:6c:ca:ae:5a:10:8e:d4:15:eb:57:12:
                    bc:3b:82:99:25:c9:d5:b8:ce:48:ee:7e:95:5c:35:
                    6c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:80:1F:C8:76:3B:14:FC:9B:B0:DE:BD:C9:9D:D5:6F:F0:02:90:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:e8:48:60:aa:b5:a6:80:4e:91:69:60:91:5c:6f:04:0c:
         c3:46:ce:3b:71:95:43:55:ac:6f:e7:79:d8:46:10:b9:04:b3:
         75:20:60:74:e1:b9:55:8e:80:ad:8d:43:3f:b4:8e:5f:a1:04:
         ff:63:e7:e6:48:fa:ad:38:bc:3e:a7:8c:d7:48:6c:7f:68:01:
         96:17:d0:00:a1:f9:df:3b:80:3b:c2:bf:6a:b8:20:a2:9a:97:
         33:77:57:1a:62:91:11:9f:c2:65:97:94:83:80:40:6b:6d:9f:
         72:d3:d1:ac:f1:1d:d8:3a:79:17:45:4e:f3:86:14:91:c6:23:
         0e:51:3c:fa:c0:f1:96:2c:b0:00:f9:b4:d3:ab:7e:60:5e:3a:
         47:fa:13:4d:f9:0c:be:86:68:a6:f0:cc:66:86:57:ed:93:97:
         ea:57:b4:cf:81:99:bd:2f:1f:9a:06:f2:77:48:01:3d:dc:39:
         6b:1f:70:d7:38:ad:b8:03:08:99:bf:cb:2d:2d:fc:c7:ea:46:
         ad:84:88:b4:ac:30:94:8f:1b:7b:23:76:1d:25:2f:71:02:5f:
         3f:93:ee:5a:fc:fd:2d:59:e6:dd:ad:5d:c3:e5:3e:23:5e:7f:
         4c:11:aa:fc:cf:26:5c:c4:f2:bb:cd:16:85:5a:32:a0:1c:6f:
         04:da:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:46 2026 by rpki-client