Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89f66484-c420-393b-8ff3-72ec15d2a01c.roa
File:                     89f66484-c420-393b-8ff3-72ec15d2a01c.roa (raw, json)
Hash identifier:          dj9l3NZMX5f5XXdD1GZr1uHRCJ9i8ELGDDZK2Zf2/Ms=
Subject key identifier:   84:A0:1C:92:8F:0C:BC:D0:20:EE:DE:6F:AB:63:99:71:D2:A1:BC:14
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D5E1A59FEDF5C91690212F8C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89f66484-c420-393b-8ff3-72ec15d2a01c.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     20001
IP address blocks:        104.224.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:59:fe:df:5c:91:69:02:12:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=2393274e-8602-4efe-bb0a-d59d07a93abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:7c:24:8d:d9:ce:16:07:63:fe:a8:dc:3d:
                    98:e6:77:4e:72:ba:26:64:c1:cd:5b:55:96:8c:69:
                    5d:e1:2d:40:4d:4a:6a:5a:6b:c3:f4:4b:79:50:f1:
                    53:95:4c:c7:e6:f2:4a:4f:b5:4b:1b:e8:4a:f4:f7:
                    ef:5f:19:7c:2e:c7:01:5e:01:e9:90:64:15:f9:63:
                    55:50:71:3a:af:bb:2d:b2:24:09:93:b1:91:1e:6a:
                    e4:6c:ce:ef:e8:9f:cb:bd:6f:34:fd:55:04:f3:69:
                    46:77:5d:87:28:79:35:22:a5:e9:6a:3a:67:5a:00:
                    46:6a:8d:84:f8:f2:35:5a:0e:19:f3:73:10:89:75:
                    8d:48:12:dd:73:29:f3:11:07:33:65:77:73:0f:61:
                    d2:a1:be:3f:cc:24:55:74:75:4b:76:92:a2:3e:a6:
                    78:9c:b3:89:80:c2:bc:cf:49:32:cf:1d:3e:54:8c:
                    ce:39:1c:43:57:74:de:75:d9:86:0a:7f:6b:74:41:
                    52:5c:4e:20:3a:8e:12:ff:9c:cc:2b:d9:95:a9:cf:
                    e0:1e:a6:80:08:1f:ce:72:96:48:39:c2:f2:5a:43:
                    46:fb:57:43:cd:61:28:6d:23:5d:c8:8e:f7:c8:98:
                    24:4c:d2:c3:5d:44:68:da:c4:96:12:c3:bc:fd:0a:
                    82:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A0:1C:92:8F:0C:BC:D0:20:EE:DE:6F:AB:63:99:71:D2:A1:BC:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/89f66484-c420-393b-8ff3-72ec15d2a01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:98:f7:72:97:6d:ce:1c:04:af:ca:8a:ce:1f:30:bd:b8:
         57:91:57:65:7d:d0:5e:55:5f:96:5f:7a:e4:c2:7d:f9:f6:0c:
         ff:e6:63:56:9b:34:4d:70:b8:ce:3b:13:7e:7c:44:3d:02:b9:
         7a:43:7e:71:d6:b1:6a:5d:1c:ef:52:f5:c2:e2:d7:e6:48:a4:
         41:5c:1b:6c:84:11:8b:a8:8e:50:e5:be:95:5e:2f:d0:ec:7e:
         f2:b4:61:63:b5:cb:50:dd:43:a9:4c:4d:61:44:e1:2a:32:d6:
         2f:42:88:fd:42:8d:c2:6c:35:a6:53:a4:6a:cc:1a:11:a9:28:
         51:7b:cd:ae:ee:58:76:d6:41:86:c4:4e:e6:2c:db:90:05:23:
         45:ab:ca:34:9f:0b:b3:43:03:c9:ca:57:0a:40:77:0e:fb:64:
         a6:37:ea:44:ac:dd:10:a3:a6:61:8c:bf:e3:05:c9:62:f2:92:
         49:17:da:83:19:b1:55:64:9f:fa:5a:9d:7a:0f:60:80:1d:b2:
         b1:07:3e:4e:99:f5:85:48:1b:6a:98:0d:2e:e0:d8:d5:9c:de:
         39:69:b5:bf:20:de:b1:a4:77:f1:42:35:48:61:61:73:eb:35:
         40:f1:23:81:36:45:9a:5f:cf:ab:b3:28:ce:ce:10:28:03:de:
         e6:48:41:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:40 2026 by rpki-client