Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f6ef2188-b7d6-3784-b343-cbd9651d10b7.roa
File:                     f6ef2188-b7d6-3784-b343-cbd9651d10b7.roa (raw, json)
Hash identifier:          BwnKv3ncJihAFZZ2G5O4GD6getlsXElbJFyK9jkm4Jw=
Subject key identifier:   CD:63:91:C6:6C:4C:33:52:6B:CD:69:AC:44:38:E2:F3:84:C2:2F:3B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC63C7B631185D598EBAC4200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f6ef2188-b7d6-3784-b343-cbd9651d10b7.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        216.107.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:7b:63:11:85:d5:98:eb:ac:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=3f6cdfef-990d-405d-94e7-c9b2f788c39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:b1:9c:53:e8:31:f2:bc:06:d4:83:91:f2:
                    45:bc:2e:27:10:a4:d7:60:97:45:c6:b5:15:1b:83:
                    5a:6b:da:54:5b:e6:ac:ea:df:44:bc:62:42:e4:ad:
                    63:de:69:64:53:34:00:96:ac:00:7f:e8:0c:73:5f:
                    9a:c7:2d:80:7f:9a:ca:e6:a6:3f:62:d5:3f:c9:2b:
                    b0:dc:ee:02:95:62:b7:1d:23:04:09:0f:2a:1e:bf:
                    1c:28:01:dd:ad:fc:2b:dd:d4:50:87:4b:d3:2e:85:
                    a6:e4:b3:cb:5f:dc:f2:e9:b7:a7:2c:6a:bd:ca:25:
                    3e:3a:cb:7f:77:c3:9a:a3:5b:9b:d5:1f:cd:df:63:
                    b2:9d:06:bf:79:76:60:ef:38:82:fc:6c:ba:ff:b0:
                    9e:ca:7b:83:16:b5:5d:00:e8:64:3f:fe:92:4e:17:
                    e4:8b:07:64:27:6b:64:d8:99:6f:74:7b:81:9f:09:
                    78:1e:b1:9a:c9:ce:25:6a:9a:5e:b2:f8:ba:6c:59:
                    80:f4:56:ba:08:5a:b4:45:d6:9f:d7:7e:2b:e2:f5:
                    6e:78:cc:3f:d9:b2:7d:71:7f:14:6f:de:94:d9:ff:
                    3b:df:ee:a4:4c:43:86:24:31:8d:71:68:71:89:e6:
                    16:3c:25:8c:29:d2:ce:5e:c0:56:7c:88:9e:2d:1a:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:63:91:C6:6C:4C:33:52:6B:CD:69:AC:44:38:E2:F3:84:C2:2F:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f6ef2188-b7d6-3784-b343-cbd9651d10b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:8d:48:ff:c3:b6:07:62:ac:8a:63:8b:a1:f1:a1:da:be:
         c7:a9:df:b3:67:8b:f4:35:dd:0b:e0:cd:20:42:78:1e:8a:d2:
         77:35:73:19:4e:ce:e0:80:ef:f5:47:fe:c3:10:7f:de:62:cd:
         1a:a3:32:a8:1e:c8:c3:34:e8:51:04:bb:96:ec:12:1d:e6:c1:
         3f:70:87:52:11:53:e9:a3:2b:67:41:3b:06:5e:45:63:d8:a5:
         64:f8:d6:cd:28:50:75:2a:83:4d:c8:aa:86:a6:f5:e6:72:ed:
         84:0b:b3:b4:c6:96:1a:5b:b5:43:0c:25:eb:71:f5:aa:59:b5:
         06:44:63:02:43:ec:07:0d:ca:fb:3d:83:d6:ea:5e:c9:54:7f:
         e2:1e:3b:b6:68:bf:46:73:ab:9d:a8:91:42:91:1e:14:2d:bc:
         fa:1f:bd:5d:1a:39:48:83:da:c5:84:bc:c3:76:eb:9b:17:50:
         6c:e3:bd:22:8d:e2:60:9f:ba:2f:c9:fd:ee:bc:89:ea:99:56:
         7f:78:8e:f7:7e:6f:dd:37:03:a1:ac:ad:33:59:2f:68:ed:c4:
         a7:f9:3a:80:ed:89:e7:97:f0:f4:22:c3:07:29:d7:ec:38:7c:
         8e:e0:d2:2c:de:64:f5:2a:12:c9:59:a7:17:92:50:c3:1a:51:
         0d:c0:3a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:32:10 2026 by rpki-client