Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa
File:                     3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa (raw, json)
Hash identifier:          LxzfnM/hgJkWyIPBkARxBTn429U7DdooYDpeeWmdzro=
Subject key identifier:   E1:3B:6C:12:BA:99:06:D4:4F:B8:F6:64:53:4F:7A:E4:C3:0E:81:CA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E08665F3E1344BF1524A8B300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     57043
IP address blocks:        173.211.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:66:5f:3e:13:44:bf:15:24:a8:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=96d4cc68-c5b7-4c00-a4d4-8b8100bc3c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:13:aa:f4:c4:17:50:f2:9c:0a:dc:51:57:7b:
                    c4:7f:48:ce:af:88:02:8f:1e:3e:40:34:da:91:04:
                    d3:f5:70:dc:92:16:1a:22:54:77:5f:2f:18:20:2e:
                    aa:74:da:5c:82:2a:39:23:13:a2:fd:5a:ba:46:f1:
                    54:21:58:64:a7:96:bd:fd:a5:09:72:ae:f7:0d:c0:
                    44:34:93:65:22:08:2c:e1:20:42:0f:62:d9:61:1a:
                    0a:98:e9:54:c8:8b:fc:c4:56:76:3d:49:77:91:3a:
                    d9:37:ea:85:da:35:40:68:0c:29:69:5e:b5:3a:a8:
                    18:04:a8:3b:97:96:f1:33:fb:bd:86:0b:a8:90:37:
                    d8:93:3e:38:c6:84:fb:da:1b:01:0a:11:ac:a6:db:
                    30:c7:6a:7e:ac:92:a0:4f:3f:01:44:19:1f:8a:c2:
                    79:7a:9d:2e:11:b9:f0:45:9e:fd:f4:f8:3f:91:c6:
                    86:e6:62:a3:e7:2b:08:5d:97:4e:05:ab:e4:5b:f6:
                    4d:67:21:c0:b4:4c:5d:0d:73:0e:80:37:8a:3c:e3:
                    d2:9f:81:69:54:4a:14:51:57:68:8d:27:95:7d:b2:
                    4c:09:13:c2:05:c0:62:cc:0c:e2:63:c6:d1:d3:f4:
                    ed:da:4a:e2:f0:3b:4d:15:5e:3e:b2:20:9e:90:94:
                    e1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:6C:12:BA:99:06:D4:4F:B8:F6:64:53:4F:7A:E4:C3:0E:81:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d8:1b:63:3f:9e:00:ae:2a:a5:1b:81:00:21:01:b8:0e:c8:
         24:27:c7:ab:a5:cf:1c:e0:fb:d3:93:a5:0c:9e:e8:04:9f:96:
         63:3e:4b:97:de:4f:fa:66:21:0b:47:22:86:85:c1:44:ea:35:
         a1:f3:ca:6a:59:03:0b:0a:6c:d4:61:85:1c:e3:d4:19:ec:06:
         f2:85:01:eb:5a:67:5f:71:c5:e6:86:8e:68:59:c9:23:0f:63:
         86:5b:a2:4d:d8:9b:98:d1:bd:69:7b:d5:0e:06:23:91:d2:62:
         60:39:a6:9a:25:42:e0:57:88:30:5c:d7:fc:08:04:ec:bd:90:
         f4:6d:32:06:50:e1:8d:c7:c5:d3:58:da:16:99:6c:76:5a:cf:
         63:6a:6a:eb:a4:1c:3e:0e:5a:ec:3c:74:9f:e5:6b:ee:d6:94:
         ec:da:9b:43:3f:2d:81:f2:76:f7:fa:df:ad:9d:7e:b9:af:25:
         f5:c4:2b:1e:ac:68:48:4e:9c:81:b4:aa:2a:53:49:20:6d:c4:
         94:01:52:ca:29:1a:fe:e3:82:d4:58:e3:db:6b:d1:b2:f1:de:
         65:83:78:ba:81:17:f5:96:6d:d4:0c:3b:70:6d:8c:0b:35:5d:
         1a:a4:58:61:f9:94:d1:95:c2:0f:d7:f6:4b:59:47:fe:98:1a:
         32:cc:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:42 2026 by rpki-client