Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/492e42e3-e281-3eaa-887b-8a92fdcd5430.roa
File:                     492e42e3-e281-3eaa-887b-8a92fdcd5430.roa (raw, json)
Hash identifier:          795VQMRA+A8+swTk5zel5D1YZVrYEI+Nk2bLKj3rkNw=
Subject key identifier:   6B:57:56:E8:A8:52:21:49:AE:4C:7B:BF:AD:3C:BA:71:3A:60:39:98
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F38B270698A0954151ED603E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/492e42e3-e281-3eaa-887b-8a92fdcd5430.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     17252
IP address blocks:        174.140.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:70:69:8a:09:54:15:1e:d6:03:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=00262899-47c5-4148-8b7c-bf23fde82e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:0e:6d:96:0e:90:dd:78:f5:59:ab:90:3b:
                    2e:da:87:cc:8e:eb:61:d2:72:0e:4b:e1:15:b1:0f:
                    f2:c3:99:21:b6:06:11:10:75:5d:d5:3d:dd:84:12:
                    3c:65:ba:c5:57:e1:a0:8d:28:db:c0:11:a6:e8:79:
                    42:d3:1c:99:cd:c4:46:37:b1:3b:c9:fe:16:bb:f3:
                    af:5b:e0:db:1d:b0:34:f9:36:8c:63:75:dc:42:e7:
                    e3:3c:6b:07:dc:aa:17:bf:fa:64:3c:0f:ce:ae:ae:
                    2f:91:08:29:45:ff:cc:1a:12:3e:56:5e:ba:4b:53:
                    72:8f:b3:71:57:20:1b:2a:49:35:c3:18:a9:dc:aa:
                    ec:0c:0a:7c:06:16:bd:55:a7:81:aa:86:18:38:9e:
                    8b:ab:4a:97:3f:3d:9b:dc:6f:95:c9:24:2b:a7:c5:
                    bf:8e:8d:c0:e5:95:1f:4d:b0:9f:83:d2:61:0b:02:
                    58:aa:67:68:2c:55:fb:8e:4e:84:1c:91:72:e7:93:
                    6f:56:f9:07:66:0d:02:c4:0f:7f:07:7f:c3:e3:54:
                    14:5b:15:99:49:bb:29:e2:89:af:82:2c:42:e1:32:
                    a1:4f:69:6b:1f:78:28:39:cc:29:7c:23:ad:6b:13:
                    46:fa:86:4d:1f:88:5c:15:dd:67:44:7e:82:39:c6:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:57:56:E8:A8:52:21:49:AE:4C:7B:BF:AD:3C:BA:71:3A:60:39:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/492e42e3-e281-3eaa-887b-8a92fdcd5430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d5:78:a8:c0:9a:2a:64:d8:89:ce:44:92:c4:85:f5:c7:83:
         58:e6:b7:18:95:42:c8:cb:62:41:2b:90:4b:f0:72:a9:0e:41:
         2d:97:47:71:c6:63:47:aa:db:97:0d:7c:fc:8b:70:d6:16:6d:
         be:bf:81:0c:f6:6c:17:4f:a6:31:6b:9e:5a:f4:4e:8b:89:da:
         53:6e:20:ef:64:b9:f5:1d:c2:4d:bf:ed:8d:40:72:fd:97:3e:
         bf:a8:35:4d:26:01:ff:f4:65:c7:4c:dd:5c:51:41:f0:0c:a9:
         f5:84:f4:70:bd:eb:96:8e:4e:d9:f4:9c:54:bc:4e:2c:0e:df:
         46:f6:a2:a5:f0:41:16:b5:6c:71:6b:a2:b0:2e:c8:73:23:7d:
         84:29:2b:15:fd:55:fc:a1:90:ef:08:c2:c4:95:17:34:cd:c3:
         4f:d9:6b:ce:bc:c5:91:50:1a:6a:7e:a1:4a:7e:6a:e3:30:d9:
         d6:94:c1:da:b6:e2:a2:2c:8b:61:d8:0d:87:8f:e8:2f:ef:fd:
         f8:fd:c6:b0:d2:e5:17:3e:ab:88:07:16:de:63:1c:4d:33:ad:
         14:8c:76:e5:18:ce:fc:5f:0b:30:03:ad:55:12:b8:76:ff:26:
         8d:a3:4b:1e:87:07:c2:0c:d1:e2:af:74:b2:37:e6:fb:35:e6:
         e4:1c:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:55:18 2026 by rpki-client