Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa
File:                     341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa (raw, json)
Hash identifier:          Pd98Ahr5z+8aTvbkEkckgkzPsq8jwHo6rDoapRtkm0c=
Subject key identifier:   39:BA:A3:27:14:3A:76:CC:30:06:A5:2D:0C:8A:52:5F:35:F6:58:B5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CE8F76C0675F4D456BDB32C60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     21769
IP address blocks:        173.211.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6c:06:75:f4:d4:56:bd:b3:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=dba919a2-21ee-43ef-bc1b-74717cc3aab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:23:e8:6b:83:ac:4b:95:1f:23:38:c2:19:
                    88:5a:ff:cf:4b:ab:f8:f1:fa:d6:33:81:55:c4:c1:
                    c1:83:92:2b:13:e5:0a:1a:cb:fe:c3:c3:c0:77:20:
                    e9:cb:60:56:72:f9:48:b1:01:e3:b6:15:2a:84:8f:
                    cb:98:54:f2:e4:aa:86:04:b2:de:6e:7c:2f:cf:22:
                    5c:68:8b:55:7a:cd:7e:d0:4f:dd:5d:5e:14:68:5b:
                    c4:81:2c:48:e8:07:0c:65:a3:68:40:cc:55:e2:86:
                    c0:32:f2:71:4d:3f:8a:67:94:0f:32:29:82:00:08:
                    bc:aa:dc:44:7b:15:ca:37:3c:c0:b9:e3:7c:45:c7:
                    87:a5:45:45:86:40:69:aa:48:90:c1:93:c8:79:a0:
                    1e:27:4f:94:8d:49:c2:ae:00:cd:73:61:82:92:27:
                    cf:98:54:91:62:74:07:64:9c:0c:a0:7a:b0:70:7c:
                    2d:7f:21:64:f6:24:1f:48:cc:00:1a:9c:18:f9:af:
                    09:a9:3b:6e:32:37:48:52:93:d2:60:eb:91:e6:0c:
                    3d:62:c2:e7:1a:fc:be:a7:ee:d0:8c:27:e9:18:a2:
                    c7:42:b4:e1:9b:d0:d8:1a:2c:88:56:b3:06:3f:dc:
                    2e:b9:a2:9f:a2:e7:cd:dd:89:24:89:28:ec:0f:6e:
                    51:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BA:A3:27:14:3A:76:CC:30:06:A5:2D:0C:8A:52:5F:35:F6:58:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d8:1e:36:ea:6c:64:15:c2:f2:d3:e1:24:ed:23:0c:34:e2:
         17:8f:53:72:c2:b6:3a:60:bd:3f:83:80:4c:70:ff:cf:17:b9:
         a4:60:da:2d:e4:00:0d:7a:3a:d7:03:0e:12:a5:b5:6f:4d:95:
         03:31:ab:13:40:12:c9:5c:0c:9f:2f:84:58:4c:4c:df:ea:6d:
         b3:22:6f:0a:39:c0:65:9d:87:ca:16:54:e5:24:66:69:69:de:
         e9:9e:7b:4d:e5:90:dd:d4:d9:f5:93:d3:2e:f7:b4:e0:5a:53:
         04:98:b5:c7:41:bb:52:86:54:2f:06:42:59:5b:8e:86:6a:65:
         37:b9:81:99:1e:96:0b:d0:48:1c:d9:4b:ae:44:ce:00:ce:2d:
         9b:bc:b1:3f:4b:26:27:ae:cc:38:3c:ed:61:05:fa:c9:46:f4:
         25:35:f9:13:7a:59:2e:ac:a2:8d:c1:ff:09:ea:c8:fa:3c:8e:
         77:9f:6e:a1:e3:fe:2a:93:46:0b:5c:00:77:e6:4f:d5:41:58:
         a3:1b:72:80:10:91:90:39:4b:bb:41:06:1c:6f:e2:e9:ae:54:
         b0:f7:52:08:93:43:e8:f8:82:c4:6b:c7:83:4f:c3:e4:84:5a:
         52:e8:50:3b:11:40:4b:8b:4b:fb:bc:80:87:cb:5c:ab:d1:86:
         93:b3:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:57 2026 by rpki-client