Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d321bac4-d4cc-39ea-b908-b394af5a1713.roa
File:                     d321bac4-d4cc-39ea-b908-b394af5a1713.roa (raw, json)
Hash identifier:          yjyRAM1I9+7OJzWnBqadkv0aEBncQxl4Xivgm5Wi0/w=
Subject key identifier:   0E:13:7B:AF:37:68:31:4D:8E:49:BB:DB:0D:78:BB:4F:46:58:2F:57
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D04E2403CC85E14980031EA80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d321bac4-d4cc-39ea-b908-b394af5a1713.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     214054
IP address blocks:        173.211.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:40:3c:c8:5e:14:98:00:31:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=6fb2c42f-5137-4257-b92c-1ea836fb933c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:46:36:1f:ea:3c:a7:3d:b9:e5:60:91:85:
                    5f:48:07:b8:0f:c8:fc:67:90:6b:bc:a3:4e:aa:26:
                    d9:f2:3d:8c:bc:2a:6a:64:07:86:dc:76:a1:e2:65:
                    4a:24:a0:d2:1d:01:8e:97:99:16:e7:04:92:14:96:
                    3d:c4:ac:0d:8a:b9:0f:fb:07:41:e7:c8:bf:e8:bf:
                    1b:0c:40:22:c1:48:72:5a:7c:c0:74:71:db:f8:77:
                    ca:f4:51:c5:73:cc:45:cd:60:d7:85:7d:ed:92:dc:
                    ac:82:c1:88:58:a8:71:2b:5c:c7:ed:5c:1b:65:a9:
                    33:0b:5b:3e:0a:be:60:28:66:fc:9b:74:34:f9:b2:
                    d1:7f:b3:60:56:9d:93:66:d5:bf:dd:94:c0:c6:ec:
                    f0:21:f3:86:ca:36:d8:65:8f:b3:37:5f:62:9e:0a:
                    87:aa:7e:b4:58:08:d0:08:f0:7c:82:a2:ae:c4:6a:
                    1a:fb:a7:ee:3b:39:ec:c3:c2:0d:98:6f:6d:78:ff:
                    7b:38:48:8a:b5:04:3f:89:09:66:36:e8:f3:bf:2e:
                    b0:61:9a:ec:b3:b8:db:3e:58:a5:1e:9a:6d:21:e4:
                    de:c2:82:13:97:a4:f4:8f:61:39:b3:8d:c8:45:7b:
                    8b:ba:5f:cd:92:4b:76:d7:52:ba:91:89:f1:f8:30:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:13:7B:AF:37:68:31:4D:8E:49:BB:DB:0D:78:BB:4F:46:58:2F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d321bac4-d4cc-39ea-b908-b394af5a1713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3d:c0:bf:74:32:10:80:cf:be:a2:db:4a:29:b1:94:89:e0:
         46:6f:4a:bb:d7:b2:85:cb:7b:47:5b:aa:10:17:32:65:22:29:
         7b:c8:2a:10:3c:32:64:cd:fe:a5:65:9b:2f:30:b0:44:86:25:
         75:c4:7c:27:3f:51:a8:b8:7e:0c:fb:1c:29:c7:3b:4f:b5:63:
         d5:49:c4:81:c2:fa:6a:8c:15:15:8d:f3:86:cb:18:a2:17:26:
         09:69:aa:b8:8b:16:30:4d:e7:07:34:7a:8f:ab:9f:08:18:25:
         c9:9a:28:6e:41:47:ba:c4:cf:c5:8d:ea:28:92:b8:15:a9:a0:
         db:7f:e7:bc:02:fb:5e:22:d9:6f:70:23:cc:88:a2:d7:06:2b:
         3d:f4:f4:f1:46:32:df:57:4f:00:34:26:07:bb:06:a6:bb:2f:
         10:a8:2b:38:f6:0f:8a:74:de:7b:48:22:78:59:84:7a:ce:62:
         a0:fa:e9:35:aa:69:46:e2:99:4f:af:5d:a6:92:3c:88:27:34:
         46:d8:1c:d9:fc:5e:52:00:93:bd:5f:7a:c7:ca:fa:a0:8e:ea:
         ad:58:84:d2:8b:dc:bf:29:e1:3c:82:80:4e:85:53:42:f4:fe:
         64:87:82:cf:cf:79:23:21:4e:9c:39:b1:f7:76:ae:4e:b8:51:
         9a:d0:86:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:03 2026 by rpki-client