Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14dd3380-98a8-30f5-abcc-337ee639b50a.roa
File:                     14dd3380-98a8-30f5-abcc-337ee639b50a.roa (raw, json)
Hash identifier:          Uj2ZoSsD0XZtYPayM6at0I0iJ4pMBwwFaF5aG6VXjIA=
Subject key identifier:   F2:77:0A:7B:1F:27:07:29:83:82:1B:76:AC:C5:CF:CB:C1:92:F4:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E059C849173C52C68E106AC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14dd3380-98a8-30f5-abcc-337ee639b50a.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     153383
IP address blocks:        64.69.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:84:91:73:c5:2c:68:e1:06:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=1acca8eb-f78d-4ebf-886b-dec0183e65f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f7:ac:9b:9f:f6:92:87:4f:9a:45:c1:1d:47:
                    6f:21:80:ee:bd:76:2f:9a:51:cb:6b:04:92:8f:66:
                    0e:bf:4f:f6:62:69:4a:11:a3:c2:0a:86:e8:aa:33:
                    64:f0:c1:d1:33:e9:ac:a4:c7:50:86:93:07:fa:0d:
                    9e:b1:fb:7a:75:0a:89:32:2a:69:ce:23:93:a0:c1:
                    57:0b:1b:4c:a0:db:8c:47:db:26:64:db:27:3e:77:
                    2f:39:61:61:f1:3a:80:2c:15:c7:92:3e:d1:10:95:
                    37:d3:cb:05:c7:0d:88:8f:80:70:fb:bd:49:a3:8a:
                    5e:2c:e6:3f:92:79:a8:6a:95:25:a0:73:21:e4:5d:
                    68:b6:fa:a9:be:9b:ec:21:f2:db:b8:36:c7:3c:7d:
                    3c:f3:2a:d8:e7:d9:9b:9b:03:d2:22:f2:15:e8:2c:
                    dd:12:ef:73:bd:68:df:99:bf:03:4a:80:ee:d4:26:
                    49:dd:ce:da:cc:ca:49:a9:e2:f1:90:3a:85:48:e7:
                    3b:c0:9f:b4:57:5a:19:13:ce:b7:31:b1:e2:42:e3:
                    1f:c0:ca:46:da:20:02:ee:62:c5:c4:3f:db:98:13:
                    56:74:35:c2:74:c2:b2:24:8f:66:bc:ec:d6:d1:cd:
                    42:b5:ef:ef:be:74:61:55:4c:99:74:3b:4d:bb:f1:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:0A:7B:1F:27:07:29:83:82:1B:76:AC:C5:CF:CB:C1:92:F4:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/14dd3380-98a8-30f5-abcc-337ee639b50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:11:7d:4d:76:f3:71:92:84:ab:a0:3e:8e:82:b4:54:43:81:
         ec:2d:ee:ff:fa:9d:db:13:0a:be:2f:c0:6a:04:45:bd:13:86:
         34:f3:b9:99:7f:c9:c6:a5:2d:30:27:e6:8a:9a:45:63:96:ac:
         00:be:fe:88:38:96:40:5f:d4:cd:25:2b:55:3d:60:ff:eb:b9:
         41:b5:75:79:66:7d:e9:e6:5d:f9:13:43:a0:39:fe:3f:7d:0d:
         29:e0:8a:8e:ac:d7:ee:3f:7d:9e:78:58:a1:cc:f2:83:f5:f3:
         da:ed:54:a1:ca:67:2a:2d:15:bf:d9:a8:90:e3:17:95:16:de:
         ea:e1:9a:19:31:ae:52:f6:d0:05:c8:99:f0:ba:35:83:b1:6c:
         37:15:9e:22:5e:dd:1b:3e:82:e5:72:8d:ea:d2:0a:db:a9:bf:
         48:6e:50:f2:f2:5d:00:0b:a3:ad:75:75:fb:34:23:f7:ac:21:
         ee:bb:56:15:2a:cb:d5:29:0b:f8:95:3b:08:55:4f:98:54:23:
         7e:88:c7:52:b9:90:c8:1e:e9:1b:ce:1b:c5:86:45:8d:67:2d:
         bf:83:84:1a:9b:b8:2f:57:9e:7f:2a:82:4e:b3:2f:8a:0b:4c:
         e7:dc:75:29:10:51:c3:41:7f:b3:32:14:fb:bb:ab:3a:e2:f2:
         ef:b0:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:09:46 2026 by rpki-client