Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b0e7b7ce-46ae-326e-b251-bdfabe389ded.roa
File:                     b0e7b7ce-46ae-326e-b251-bdfabe389ded.roa (raw, json)
Hash identifier:          mfwRvzqWK8oId6H47SmJ/Zht4Ik3yOg+ekJdNLZaDSY=
Subject key identifier:   88:9F:16:EC:7C:D5:ED:8C:1B:70:B4:79:5B:7D:03:30:FE:E6:EF:0D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F093CE2581D96F878D58FBF30
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b0e7b7ce-46ae-326e-b251-bdfabe389ded.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     397293
IP address blocks:        45.40.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e2:58:1d:96:f8:78:d5:8f:bf:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=93138744-dcbd-4963-8f1a-3537e2886d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:06:c8:b9:18:d6:ac:6d:02:de:f9:fe:9a:40:
                    e1:05:dd:66:d0:16:f9:81:42:7d:30:80:0b:50:de:
                    60:eb:7a:ae:32:56:88:c3:39:5c:13:44:46:d0:97:
                    e1:9d:ba:aa:5a:a5:27:93:c8:1f:78:22:45:e6:06:
                    04:ce:41:6d:ce:c3:7c:50:f8:1b:7d:22:c8:40:27:
                    b9:19:c7:5a:b0:31:3d:5a:fb:ea:da:75:69:d7:97:
                    8a:6c:0c:75:80:3e:69:77:ae:89:0b:ad:9c:7e:d0:
                    51:b1:e8:96:49:71:55:ab:8a:46:9a:b5:9f:58:aa:
                    17:2c:85:2c:2a:04:3c:80:88:35:e1:c1:8f:76:75:
                    7e:5a:fa:72:3f:d8:9b:62:a8:b3:bc:78:02:3b:86:
                    12:8f:4b:c3:49:82:3d:22:ed:88:fc:33:41:71:64:
                    96:de:4b:2f:21:2e:da:70:39:5c:c6:16:8f:68:90:
                    8c:7d:4c:25:d1:53:06:3f:3c:35:3c:9a:5d:d4:b9:
                    38:4b:b2:c3:22:45:21:1c:af:6f:75:3a:55:1d:38:
                    d7:97:a9:0c:a2:7a:15:f3:cc:1e:ce:33:88:05:b4:
                    e5:0e:49:70:c8:90:d9:92:03:71:d3:2d:1f:d8:2e:
                    5a:3f:1d:1b:dd:e1:82:73:39:78:25:17:87:8f:8d:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:16:EC:7C:D5:ED:8C:1B:70:B4:79:5B:7D:03:30:FE:E6:EF:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b0e7b7ce-46ae-326e-b251-bdfabe389ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ab:3b:dd:cb:50:b6:c4:71:e6:75:7f:0d:62:e3:00:ee:fd:
         4b:ad:c0:90:23:8f:25:09:2d:bb:19:89:37:5f:9b:d7:eb:a2:
         cb:7c:a3:4c:32:69:52:51:eb:ed:f8:f9:d4:cf:83:e5:43:75:
         7f:7a:eb:32:87:6d:e4:64:b6:a2:15:aa:02:60:0a:78:d7:e7:
         82:c6:7a:cb:ed:e7:c3:14:f7:de:d9:37:dd:74:a8:b7:b7:a6:
         e7:9b:65:c3:04:7f:40:92:f4:b9:f8:f5:86:6b:ba:0c:c2:25:
         24:08:e1:c7:95:33:53:9a:5f:82:95:94:e6:72:43:6b:c0:96:
         dc:9d:07:f8:20:18:f0:f0:83:36:53:e7:39:a2:3a:65:74:be:
         e4:a5:2f:ec:9d:08:08:d9:9b:09:6b:b5:79:cf:e2:e9:79:5e:
         60:2e:eb:92:55:8c:12:ba:8c:55:c4:58:6f:dd:51:68:15:a5:
         32:07:79:9f:28:a3:05:2f:4a:5f:8b:71:a7:dc:37:f7:01:aa:
         5a:f3:0d:35:74:8f:f4:0f:27:8d:29:1b:21:48:aa:3d:31:bc:
         29:46:fc:bc:07:54:07:f9:cc:86:da:9a:ef:c5:58:2d:f0:22:
         7e:91:14:30:b9:59:7a:3d:2b:5a:d1:cb:35:b9:66:13:81:08:
         5f:33:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:25:01 2026 by rpki-client