Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/00c6dc1a-d0ad-325c-a1e9-02c4361e184a.roa
File:                     00c6dc1a-d0ad-325c-a1e9-02c4361e184a.roa (raw, json)
Hash identifier:          4t0Caau28Wsa0xmj7S1QM2dG6tNg7Ts8DpBI21BNA8U=
Subject key identifier:   33:76:6D:10:FB:53:63:F7:8E:32:72:E9:EF:04:89:05:8C:7F:5C:A4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F0C077CBE141E7DB60C83A880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/00c6dc1a-d0ad-325c-a1e9-02c4361e184a.roa
Signing time:             Thu 03 Sep 2026 01:00:12 +0000
ROA not before:           Thu 03 Sep 2026 01:00:12 +0000
ROA not after:            Wed 02 Dec 2026 02:00:12 +0000
asID:                     204765
IP address blocks:        64.69.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:07:7c:be:14:1e:7d:b6:0c:83:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  3 01:00:12 2026 GMT
            Not After : Dec  2 02:00:12 2026 GMT
        Subject: CN=bb81e5e1-a770-4401-809d-125de0283f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:ee:f9:3f:08:41:37:99:1e:a2:a6:ac:1c:
                    7d:94:f3:c8:ca:90:ce:73:8a:70:1d:48:ec:69:d6:
                    46:7c:1c:d6:bf:d3:00:08:0f:44:5d:eb:70:69:ed:
                    16:b0:0e:4f:4d:7a:03:4f:12:b0:47:03:0f:5d:91:
                    9f:79:b1:b4:8f:96:c1:dd:43:dc:39:7d:31:09:c5:
                    1a:ca:65:71:32:4b:e9:0e:61:b9:19:e5:16:da:b1:
                    9e:03:63:1b:58:f5:95:f8:fa:20:11:ff:02:8b:2d:
                    f1:8f:bc:c6:53:1d:64:b1:45:d9:d6:96:bb:ce:cf:
                    47:88:a8:ce:ce:6b:d1:54:f2:1e:f1:db:13:70:f5:
                    e9:1b:6f:0f:0e:38:41:2a:66:1c:2d:df:62:f7:82:
                    d1:02:79:fa:cd:11:5e:0b:b4:bc:ef:0b:89:76:95:
                    b4:47:33:8c:ac:89:13:2b:eb:e6:a0:3a:a3:e1:37:
                    51:13:c6:46:dd:49:9b:98:a9:de:98:c6:ed:32:46:
                    a5:f9:91:9b:00:66:a3:62:52:a5:35:71:b4:16:62:
                    22:f0:1b:cc:7f:38:41:ca:36:51:94:cb:b6:5d:fd:
                    2f:12:af:96:1d:b1:dd:10:19:0a:83:5b:6d:6a:1f:
                    bd:ee:7a:c5:06:20:85:fc:36:83:b3:bf:8b:19:c5:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:76:6D:10:FB:53:63:F7:8E:32:72:E9:EF:04:89:05:8C:7F:5C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/00c6dc1a-d0ad-325c-a1e9-02c4361e184a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:64:71:1a:e4:cd:87:d8:9c:4f:45:21:39:23:3e:2f:39:c0:
         27:7f:db:65:e1:06:41:fa:1d:32:70:e9:b4:c9:61:c7:a9:ab:
         0c:a6:b0:b2:2b:b7:72:0c:8c:30:5a:4f:3e:e6:4a:91:73:03:
         e3:41:4d:ea:50:f2:05:f1:e4:c4:21:9d:a0:1b:f4:6d:15:54:
         58:85:d2:f8:95:bf:ea:d0:28:24:69:2a:89:02:ac:5f:70:b7:
         f2:2e:b7:d2:48:ad:61:a8:94:e9:74:68:b1:e6:9d:44:a9:a0:
         97:fa:62:6d:f5:8a:b1:68:50:7f:07:ce:86:ff:d3:58:f6:4a:
         51:38:c2:c9:78:bb:bf:59:ea:6d:2a:01:1c:c3:43:f9:b9:f5:
         e7:8a:b9:66:3c:ef:8d:83:ae:b0:03:ef:46:ad:45:fc:65:eb:
         7b:90:b6:9a:d1:00:cf:2a:86:71:96:21:ce:31:b8:36:64:74:
         c0:1d:c0:c4:9d:c4:5f:b4:3d:80:be:6b:68:f4:ed:81:e7:d4:
         3e:1f:f0:49:7b:5e:88:ba:34:ff:4f:c9:cb:ef:80:d2:a6:b6:
         f3:d9:78:f2:c9:88:f2:97:d5:20:db:f7:56:65:49:c8:36:49:
         0d:ac:af:7d:68:be:e0:89:27:11:e1:c9:bc:80:d0:5f:11:24:
         be:79:92:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:06:57 2026 by rpki-client