Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a9a255ee-9010-3b3b-95b2-e26766e3c048.roa
File:                     a9a255ee-9010-3b3b-95b2-e26766e3c048.roa (raw, json)
Hash identifier:          6x4NYKgS3/sC/QxmYgqt2YGfR7KckLuD1imE5Eqa8aA=
Subject key identifier:   73:92:66:92:F4:A6:F6:72:C8:00:97:28:31:95:4D:D5:B4:42:80:4C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F2957B7FE9093CF9C7AE39360
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a9a255ee-9010-3b3b-95b2-e26766e3c048.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     21840
IP address blocks:        198.102.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b7:fe:90:93:cf:9c:7a:e3:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=d598bf89-6739-4681-8649-17706219cd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:71:06:82:6b:ed:16:28:74:9d:26:eb:40:
                    17:3c:80:fd:b5:ec:ad:4c:12:2a:9f:7e:70:ac:27:
                    e9:cc:ed:b5:74:d1:d7:f0:3c:3e:6f:57:a6:b1:aa:
                    d0:d4:b4:24:3b:dc:bf:6b:eb:d5:3d:8c:e5:9e:17:
                    74:23:9d:d6:a4:19:a8:c9:c7:2e:63:19:e2:5b:a3:
                    dc:9c:97:e5:2f:99:a6:d0:1b:81:7d:81:df:7e:2f:
                    d4:29:e7:9e:64:f3:de:1a:aa:12:73:19:8c:d5:c4:
                    00:96:c7:f0:b8:f0:83:1d:df:84:62:23:bd:48:1c:
                    32:49:29:40:f6:ee:b0:4f:33:9c:b1:bb:13:2d:c9:
                    e9:e5:f6:76:07:3f:df:b4:b9:60:d3:32:ff:5c:00:
                    11:b9:5d:fa:2b:ad:6d:74:28:21:cf:16:9b:28:a3:
                    7a:f0:cc:1c:9d:b6:fc:2b:f9:f0:2f:af:29:fa:27:
                    b7:f8:cc:3e:2f:ad:94:0a:15:eb:f6:f1:27:4b:4e:
                    5c:ce:09:9e:aa:05:ba:c2:ff:05:54:3f:07:ee:11:
                    ff:ec:d8:a9:52:7f:99:cc:ef:88:2b:19:a1:ed:d1:
                    00:e8:fa:7b:c0:6e:1c:35:c4:4d:d8:d4:d7:d8:32:
                    a8:07:11:b8:fc:f7:c0:94:97:fa:d4:df:72:6f:2c:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:66:92:F4:A6:F6:72:C8:00:97:28:31:95:4D:D5:B4:42:80:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a9a255ee-9010-3b3b-95b2-e26766e3c048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:63:06:a3:d5:8b:4b:19:88:05:6d:c6:6e:ca:bf:6d:14:
         5f:f0:74:9b:3f:4c:2c:0d:55:15:a1:8e:d6:ee:2f:a7:67:78:
         7c:3f:fb:be:70:98:c0:3a:93:ec:87:4d:8c:91:12:30:49:19:
         2d:3b:8c:a5:b1:af:e1:ac:32:35:0f:7b:48:54:3e:86:86:d5:
         76:fb:c4:5f:f1:f2:c7:4c:56:2b:cc:e0:12:24:41:4e:41:7f:
         24:7a:05:96:67:d0:79:c5:5a:28:9d:d7:68:9b:f6:72:f3:43:
         73:4e:67:30:66:6f:7a:b5:ff:24:bc:e3:b8:ac:4e:71:3e:ff:
         1f:28:89:f9:4c:d9:b7:bc:e7:6a:51:80:ed:95:6a:2f:57:71:
         1d:1d:64:e3:b7:9f:8c:1f:ef:72:a1:6b:09:0e:21:3b:64:e8:
         a6:ab:94:e2:f0:7a:52:fb:53:29:9b:90:2f:51:92:c7:35:73:
         40:53:93:d9:0f:7b:81:18:c7:97:d0:53:d3:ef:ea:63:e6:62:
         41:69:52:40:ff:4a:7f:d1:f0:b2:aa:71:d6:1d:fe:8d:45:a7:
         06:92:c1:92:d8:26:f9:51:39:dc:58:3d:12:f6:96:f3:72:aa:
         bf:8b:8e:2f:43:3f:e0:12:e2:cb:79:fb:76:a6:c5:29:e4:e7:
         6c:60:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:59:03 2026 by rpki-client