Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa
File:                     35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa (raw, json)
Hash identifier:          5EViw0HaKBIyPsW1lI2j8QhYdj40j5VMP4PhhhWDCCQ=
Subject key identifier:   0F:3E:F2:F8:8E:AC:EC:25:1F:80:34:E6:9B:35:91:2C:0A:B3:FE:48
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CE8F76C15AE11F268D4D30780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     21769
IP address blocks:        173.211.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6c:15:ae:11:f2:68:d4:d3:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=fb9b1755-c2e4-47b9-b00d-4d4b4493ff75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:87:29:8e:8c:b6:ec:e5:6b:44:36:b4:a5:
                    76:ef:1c:d1:5f:b6:d4:e9:34:28:50:e2:b9:60:00:
                    b6:7b:82:14:48:cb:e9:63:e9:7e:8c:b7:46:a9:4a:
                    a4:29:8c:7d:ee:41:e5:b4:f5:7c:37:19:94:5f:9a:
                    1f:63:bd:d4:30:06:77:ff:eb:1b:c8:3c:01:2e:78:
                    b6:c6:4d:c6:1f:6b:97:98:a1:ad:ad:f4:f5:b0:e3:
                    e0:51:31:fe:8c:b1:ab:78:96:09:24:09:8c:6b:a4:
                    57:3c:94:bc:50:8c:31:c5:34:07:1f:8e:c2:1a:d4:
                    76:ff:6d:cd:63:d4:55:5f:b3:57:63:f4:76:ef:c9:
                    fa:74:a8:a4:b2:36:d2:70:4d:0d:19:fc:a8:f4:67:
                    b6:0d:fa:6b:aa:9a:20:3e:ec:d3:cf:f7:ec:bd:5a:
                    44:92:14:5c:ce:ee:dd:32:67:4c:e5:6a:4d:bb:17:
                    87:0e:24:8a:de:0b:d4:21:02:3b:32:72:79:9c:3f:
                    87:f7:9b:90:45:bf:f8:7f:8d:8c:fb:31:1d:d2:45:
                    8b:2c:ec:cd:4d:67:0d:90:e3:5c:1c:95:93:c5:f2:
                    ac:10:8d:27:55:e7:cd:de:d9:b7:d7:f8:86:28:a4:
                    ae:b9:9b:3e:75:fa:f3:cf:21:a7:82:3d:76:c7:17:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:F2:F8:8E:AC:EC:25:1F:80:34:E6:9B:35:91:2C:0A:B3:FE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/35c7acbb-4c5b-3f8e-9ded-4b471d733b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:2a:07:08:ed:f7:c0:bb:04:01:a1:b5:34:1c:93:78:0d:94:
         e1:71:bd:cf:53:4a:07:da:b3:bf:59:e2:32:07:c4:5b:29:63:
         3c:b7:be:78:2e:94:fc:39:13:4f:22:fc:2d:2a:b3:81:21:c0:
         55:fb:f6:95:4c:5f:dd:31:2d:eb:d1:63:90:0f:19:9a:1f:ae:
         71:ec:af:4a:02:ae:c4:b4:60:83:28:be:c2:74:cb:3a:9a:ec:
         c1:6c:d3:4f:c0:d9:92:74:83:f5:9f:2d:bc:10:7f:1e:b7:4a:
         ca:18:83:e9:18:e2:94:2e:f6:c4:91:8e:79:1d:e6:1c:d8:58:
         bd:37:bf:05:ab:c1:b5:62:5c:5b:a4:2a:26:a7:51:a6:6e:7b:
         cf:b7:36:7e:f8:d5:e9:d4:dc:0e:29:e5:f0:f6:a8:fc:8c:b8:
         4b:69:95:7e:1a:41:a4:0d:c3:6a:b7:3d:39:c0:f4:8e:e6:b6:
         c7:a6:30:c9:04:f4:3a:26:43:1d:07:74:1a:f4:01:a7:d5:34:
         83:5a:e0:5f:97:ad:2b:ef:f6:e7:88:3d:88:6a:64:b4:0b:d5:
         61:c0:08:ef:1c:da:22:ab:3c:3d:84:99:8b:00:80:bc:9a:21:
         99:3b:44:b1:45:52:c9:d6:73:fa:db:28:cc:66:18:82:f7:94:
         8b:08:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:17:28 2026 by rpki-client