Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa
File:                     0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa (raw, json)
Hash identifier:          PxuRMJQZgKUqS6bP/VpqHL8ynNKA9xH4eKHPJGsdZPc=
Subject key identifier:   73:02:7E:5A:48:92:C6:CE:03:E9:26:A1:2A:3C:70:49:85:41:75:29
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D6C0FB8F7667C4053A1F0C580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     212384
IP address blocks:        173.211.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b8:f7:66:7c:40:53:a1:f0:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=f99a42c1-8cf0-4c25-9d78-bf4ee5279de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:83:4c:06:c0:e8:6f:cb:8b:58:00:00:39:
                    e5:7c:52:76:1c:e4:f4:a2:b7:3d:ea:da:39:35:29:
                    43:28:3d:66:16:1d:e1:ca:f2:27:43:6e:b2:65:63:
                    ee:33:83:b7:bf:8d:91:ac:99:bb:c3:13:b2:3d:40:
                    c6:c6:27:d7:7d:b9:50:73:62:52:27:42:ed:2c:b6:
                    d0:e7:30:7a:2e:d0:93:6d:81:4c:94:61:0e:9b:97:
                    a1:9f:86:4a:fa:97:f2:e4:df:13:c4:a5:38:fe:c2:
                    c3:e0:54:dc:b1:b7:02:8d:7e:a3:0a:bf:d6:80:1c:
                    b5:45:b7:ca:d0:b3:d3:13:97:dc:f0:d7:96:e7:cd:
                    92:38:73:1e:14:ef:f1:c9:23:3e:53:0b:04:45:e6:
                    65:9f:7e:3e:e4:f3:ba:1c:fa:59:3e:4c:55:43:d2:
                    99:1a:6e:e5:85:91:03:b2:65:c6:8c:5f:c8:e0:74:
                    b7:11:ec:54:bf:e6:48:da:7b:f4:d1:ad:b6:19:d1:
                    fe:67:6a:f8:de:e5:51:f0:70:40:63:49:93:d4:e8:
                    8c:e6:0c:80:e0:e7:fc:8c:d5:33:31:b2:bb:61:e0:
                    49:99:60:be:3c:3f:14:4d:a3:7e:86:eb:75:3a:1d:
                    03:a3:42:ef:e8:f2:65:3a:61:40:9f:eb:f6:65:43:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:02:7E:5A:48:92:C6:CE:03:E9:26:A1:2A:3C:70:49:85:41:75:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0ff2c6f1-43b5-3f2a-8ae3-a21732a892f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0a:57:d3:bd:fc:81:fb:7f:64:64:dd:cd:fd:77:a0:ae:8a:
         80:a1:25:b6:1f:8c:6d:09:98:cb:69:8e:10:65:86:90:ef:00:
         51:a2:40:be:13:c7:3b:0a:f1:55:8e:d1:25:8c:53:f5:b9:69:
         76:5e:da:d2:3a:18:8c:c9:af:79:ad:96:af:48:a9:85:e1:ad:
         1a:44:da:96:88:09:aa:3c:64:9e:82:c0:63:fd:d5:7b:c2:b9:
         aa:d3:ac:07:71:8f:bd:f6:1c:b6:65:48:d8:1d:da:f5:42:87:
         4a:e4:f1:23:02:89:69:f6:79:cc:ae:47:da:7e:c4:7e:d1:89:
         27:d8:63:30:ba:bf:fa:4c:cf:6c:f7:0e:d1:d0:67:dd:79:5c:
         25:9d:f7:d3:54:cd:a1:86:de:3b:18:0d:07:9f:8a:a9:c6:0d:
         00:ea:01:f4:35:8d:f4:61:0c:ff:fe:8a:22:1e:e7:d5:af:7e:
         37:6b:c5:59:5b:22:a4:57:9e:88:75:ce:b3:2b:a1:92:9c:bc:
         a9:4f:4c:58:2c:94:8a:df:53:94:4e:07:89:d7:17:d5:3c:de:
         c3:36:1b:7d:45:23:f7:6b:4e:96:e0:68:c3:0e:43:6a:26:44:
         6e:53:81:90:74:ae:e6:e0:84:ac:cc:1f:04:ee:a8:56:d1:70:
         e1:66:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:36:27 2026 by rpki-client