Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff69b189-af84-3daa-9801-e90bc0dd46e3.roa
File:                     ff69b189-af84-3daa-9801-e90bc0dd46e3.roa (raw, json)
Hash identifier:          667dsxL0zxdIYsViMMNZwwZQyrxSVSIeazmvjVQ+OZI=
Subject key identifier:   C2:95:22:37:23:88:3F:7C:EA:E7:3B:57:B6:F7:FD:52:63:D1:11:0A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EF71765E7AA981E756C1155C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff69b189-af84-3daa-9801-e90bc0dd46e3.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     834
IP address blocks:        173.211.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:65:e7:aa:98:1e:75:6c:11:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=a4ba8e3a-f411-499a-994e-b06828755cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:07:c6:2c:ac:91:6b:f4:1c:38:b3:c0:78:
                    a1:d3:05:4d:19:f1:52:96:e3:81:35:c5:28:84:93:
                    01:e2:25:b2:83:c3:a8:1f:16:e5:11:97:7b:d6:cf:
                    80:b5:bc:af:e3:36:65:8f:f0:fe:c4:8c:df:04:69:
                    b5:ac:67:6d:d6:e3:f3:7f:69:51:4e:6b:cc:f9:3e:
                    1c:cb:b5:00:7e:2c:46:20:9f:ad:df:a6:7f:10:50:
                    39:15:09:9d:17:f6:a6:dd:15:52:c6:8a:01:bb:b5:
                    01:39:24:50:73:11:13:87:e6:1d:87:64:a8:89:af:
                    27:12:8c:90:ee:d9:52:1a:21:9d:b1:ff:0a:3c:e5:
                    b5:05:25:c0:34:4d:d1:e7:9f:05:d1:73:db:43:af:
                    ea:e4:8f:3e:53:fc:79:a1:95:a6:39:79:cd:f4:03:
                    58:c2:6c:ff:fc:7e:92:be:a4:ec:3e:ac:ce:31:b4:
                    3f:0e:82:d2:ac:fe:89:69:9b:99:58:5f:34:59:21:
                    e8:3f:3a:f2:e1:c3:34:5f:ca:2f:be:6d:97:29:a6:
                    d5:30:c5:08:31:7f:d6:80:15:91:08:92:ec:67:32:
                    6f:87:2e:7a:d1:c4:9f:56:27:ef:de:d7:44:93:2a:
                    4e:4e:dc:91:8e:84:ed:cd:a4:96:7b:66:c8:42:88:
                    e1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:95:22:37:23:88:3F:7C:EA:E7:3B:57:B6:F7:FD:52:63:D1:11:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff69b189-af84-3daa-9801-e90bc0dd46e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:a1:7b:fe:23:e7:f0:2d:ad:ba:5b:9f:6b:b7:71:17:0a:
         3f:9a:56:f6:af:84:12:77:41:39:92:67:45:28:39:de:36:cd:
         91:1d:2e:f5:5d:cb:d9:8e:fc:49:26:45:b4:ee:05:75:46:c2:
         47:f6:4d:42:d4:03:e2:66:0b:c5:33:eb:01:7b:17:1c:3b:48:
         7b:3f:13:4a:67:c7:84:82:94:3c:6d:74:90:29:b5:d6:81:1c:
         7c:e2:b7:3e:02:5a:a8:c9:21:cf:e1:f6:18:1b:f7:99:77:1c:
         c1:76:af:c6:60:23:f5:a3:3f:dd:a5:8d:04:ac:20:84:ac:35:
         94:8c:8c:71:9c:7f:87:d9:8d:70:39:6c:80:d1:9d:20:3b:aa:
         bf:b0:af:60:ad:03:fc:72:ab:b6:18:26:62:f5:68:81:99:08:
         85:00:e3:c8:12:af:9a:99:69:00:34:58:b4:54:eb:29:8f:91:
         ef:94:d6:28:9d:2c:6b:94:8e:ae:0c:73:bf:ea:68:78:b2:56:
         29:51:13:ab:d7:d5:6d:58:d5:29:7c:df:3c:7e:6e:f4:4c:5e:
         8f:24:20:af:ce:22:90:0a:5f:87:54:11:43:50:a2:b9:31:d6:
         6f:0e:cc:04:b0:5a:9c:29:b7:99:ea:e8:f8:21:83:7d:0b:8d:
         25:eb:dc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:48:07 2026 by rpki-client