Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9e53e7e9-569a-35f9-ba3d-95d9be8dca2f.roa
File:                     9e53e7e9-569a-35f9-ba3d-95d9be8dca2f.roa (raw, json)
Hash identifier:          T/tnxuHtCsQLuAtqynCdyQemaHDJK6d1+F1m2v8F1bU=
Subject key identifier:   56:32:B8:46:1D:EF:27:4F:7E:1D:2C:D6:F9:DD:87:2A:BB:6D:CA:10
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA5AA791B7135BA005E2FE1C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9e53e7e9-569a-35f9-ba3d-95d9be8dca2f.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     8987
IP address blocks:        184.174.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:79:1b:71:35:ba:00:5e:2f:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=3c70bae3-314a-4cab-ad38-8e1ada8c407d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:7c:6d:90:1d:2e:5b:de:2e:1f:f4:98:eb:
                    2f:b6:2f:46:61:0d:73:84:d0:05:78:d2:7b:b4:0e:
                    d0:27:f3:d7:4a:a9:d5:aa:33:a4:85:9e:f5:61:c8:
                    09:9b:66:9e:68:ac:92:63:f4:7c:df:25:ab:f7:ad:
                    dd:d5:03:29:a8:f4:e7:b2:c8:09:a2:c2:7d:96:77:
                    62:aa:58:de:e7:16:68:6e:0d:09:34:f8:36:c5:af:
                    47:2a:4f:4e:fe:c1:47:81:3b:3e:e9:96:72:52:f8:
                    04:b1:a0:dc:67:42:72:47:e0:99:92:c5:d7:e5:d2:
                    16:ef:85:cf:fc:4c:7a:db:d7:bd:a6:5a:4f:20:a8:
                    85:84:ae:0f:75:ae:26:e0:2e:b5:a4:b4:5d:73:95:
                    c7:e2:54:12:f8:c3:8a:d2:65:4b:9e:a8:5d:39:b4:
                    f3:fb:42:48:aa:af:e6:de:f0:47:96:ee:6b:b4:82:
                    23:7b:f2:c0:73:6a:c8:34:8e:69:23:23:8c:18:7a:
                    ce:53:26:be:94:ce:fb:8c:2d:29:50:d5:4a:8e:04:
                    0f:e2:2c:74:7d:d6:fb:ce:cd:bf:c6:9f:6e:46:1d:
                    5a:fa:44:d8:ab:78:aa:52:ba:70:d3:03:54:af:3c:
                    2d:19:35:42:2e:57:e7:ec:65:fb:59:69:f1:1e:71:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:B8:46:1D:EF:27:4F:7E:1D:2C:D6:F9:DD:87:2A:BB:6D:CA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9e53e7e9-569a-35f9-ba3d-95d9be8dca2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:d1:b1:af:12:5b:9e:2a:0f:5b:34:be:7b:bb:b0:a8:4c:
         7b:61:b0:ff:6d:94:3d:2c:3d:59:06:b4:33:48:09:1b:b5:35:
         18:14:54:dc:1d:63:75:08:af:63:c0:d5:28:62:c0:0b:0f:a2:
         25:11:03:25:3f:60:52:64:1b:07:f5:3a:0b:5b:3a:a5:6c:c1:
         31:6f:50:8b:f5:01:d6:d4:12:1d:a5:e5:3d:c4:c5:c7:5a:cf:
         57:d5:b8:c2:a8:c4:f3:96:65:c5:85:93:8e:f8:64:58:ae:d0:
         92:07:61:c4:f6:d2:5f:39:17:da:b9:22:5f:d7:dd:5f:61:f1:
         4d:10:99:04:3e:89:cc:28:1e:a0:11:15:1b:07:53:b4:27:bf:
         70:f0:9a:fc:7a:be:3c:c1:7d:2a:b8:3e:a6:34:23:12:f0:61:
         b5:5b:73:cd:46:3d:d4:83:2c:35:31:9d:2d:eb:fc:e7:e0:46:
         01:b5:42:53:5a:bb:84:a4:27:77:56:5d:40:32:d7:53:5c:4e:
         c7:45:71:7b:98:34:61:7a:e7:92:e3:61:c5:95:0c:94:f8:b6:
         1f:50:22:a9:4b:c2:aa:ea:cc:54:23:ea:3b:c5:91:f5:a2:b0:
         ec:72:14:19:e7:c6:ff:2b:fb:c9:fe:0d:54:5e:9d:9e:1f:b1:
         5d:db:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:27 2026 by rpki-client