Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b32969c8-4048-3603-a579-5a790f4c0f6b.roa
File:                     b32969c8-4048-3603-a579-5a790f4c0f6b.roa (raw, json)
Hash identifier:          nucXRLXsQc3cA3H7yIWRpSiBtrYO2JpAonhM/DLAIKo=
Subject key identifier:   CA:0A:03:F5:D7:41:56:F1:E2:9A:C3:AF:FA:8C:C0:27:A1:01:8D:47
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F38B270A3980FF25CD0A9C500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b32969c8-4048-3603-a579-5a790f4c0f6b.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     17252
IP address blocks:        67.203.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:70:a3:98:0f:f2:5c:d0:a9:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=dd0272b1-cd23-42e6-992a-0c411a2a9f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:15:74:61:aa:02:90:21:19:ac:10:45:c4:
                    3d:9a:05:88:a9:ae:ac:47:cd:9f:f4:95:50:e1:6c:
                    a8:41:3e:b9:f6:9e:fe:98:27:67:32:0f:0f:e6:6e:
                    2c:10:4a:0c:b1:ea:ac:20:c7:3c:6a:bd:63:ae:17:
                    c9:c9:dc:ed:57:a3:2e:c7:6d:39:0f:60:c3:9a:60:
                    78:84:32:a8:5d:a3:43:8f:41:b8:86:05:32:d5:d8:
                    a0:a0:9b:37:69:83:f3:93:77:b7:4a:89:8d:eb:85:
                    28:7d:fd:11:4a:7a:99:38:f8:90:f8:f0:df:5d:66:
                    67:6c:6a:60:f3:7e:e9:41:53:06:76:22:04:c2:99:
                    0c:79:c2:3d:17:80:bd:36:79:8c:ea:70:89:2d:65:
                    84:e6:01:0a:ac:60:74:29:d2:14:7a:f9:e1:b3:55:
                    98:95:f2:1c:65:fa:e0:22:dc:73:c1:73:b4:69:97:
                    11:61:48:c8:03:a5:f6:c9:22:9f:27:b0:aa:75:5e:
                    fd:b3:77:30:9f:20:e6:cb:27:dc:c6:be:18:24:e0:
                    7e:c2:fd:0b:93:b9:35:2a:3e:c9:58:dc:33:36:85:
                    82:15:58:1e:91:c9:de:1f:98:d7:02:69:f1:67:be:
                    a1:d4:6a:15:fd:45:a0:c1:45:de:a1:ad:d0:11:54:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0A:03:F5:D7:41:56:F1:E2:9A:C3:AF:FA:8C:C0:27:A1:01:8D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b32969c8-4048-3603-a579-5a790f4c0f6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cb:b1:f7:61:df:29:ae:cc:1c:96:ca:2e:83:6e:4e:4b:a8:
         a5:b7:28:5e:af:2b:f6:53:ad:2d:e4:cd:86:24:f9:84:77:e1:
         2a:0d:6c:88:c1:d1:95:38:a3:f1:f0:df:06:cf:8b:77:ee:50:
         38:21:dd:1f:20:da:00:d3:21:e9:0f:1e:62:40:28:af:3d:37:
         fb:00:21:32:23:d8:2b:f2:bd:c5:f4:03:e3:d8:fb:4b:8f:54:
         e8:52:63:f6:17:d2:2d:0d:c4:ca:a4:10:d0:b1:1d:34:ae:10:
         db:41:d0:4f:54:47:0f:59:55:b6:b6:7e:56:c5:c9:fe:64:26:
         52:ab:23:10:2b:a2:6c:47:a6:8a:43:7d:da:c3:1f:d6:54:9b:
         b3:b6:33:85:ae:4c:6c:f7:cf:6f:b5:94:a4:e1:d3:f5:cf:6f:
         2e:d9:af:dc:3c:f2:3f:30:31:2f:6c:1e:a9:a9:73:e4:4f:4b:
         19:9e:81:1c:1f:64:2d:97:e5:24:14:9e:ca:c5:fc:fb:4f:c2:
         a2:1b:7b:b1:cf:e7:18:d2:be:4f:97:36:2e:88:82:e0:ad:6f:
         a1:e3:21:df:20:11:8f:2d:b3:79:71:92:f1:68:67:97:2d:c1:
         73:99:57:80:e9:5e:11:73:04:51:af:a6:0a:6a:ad:77:44:cb:
         50:3e:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:06:55 2026 by rpki-client