Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d450575c-8da5-3334-b000-4aba440a4042.roa
File:                     d450575c-8da5-3334-b000-4aba440a4042.roa (raw, json)
Hash identifier:          2ByhMi2US6KGBojch0DfJaDuB5kTCdmFHAoXIPVX9Yg=
Subject key identifier:   4B:99:A6:63:16:2C:43:3E:00:D1:0D:A8:F7:92:5E:A5:C9:4D:E5:03
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F0C0786D0D460D1DAB4EF4120
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d450575c-8da5-3334-b000-4aba440a4042.roa
Signing time:             Thu 03 Sep 2026 01:00:12 +0000
ROA not before:           Thu 03 Sep 2026 01:00:12 +0000
ROA not after:            Wed 02 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        205.196.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0c:07:86:d0:d4:60:d1:da:b4:ef:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  3 01:00:12 2026 GMT
            Not After : Dec  2 02:00:12 2026 GMT
        Subject: CN=f098fcfa-1da7-4e7a-a826-9885297c2f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:16:d8:e6:b3:a1:47:9b:cf:d6:0d:79:ad:83:
                    99:cb:2c:f5:af:bb:1d:6d:8c:42:ae:6a:90:32:06:
                    d6:90:04:81:c2:dd:9b:71:8c:13:8c:3f:10:3e:5d:
                    19:fc:2e:51:ce:ab:08:ab:c0:23:d9:d9:41:40:ca:
                    fc:7a:a0:02:49:32:54:19:0f:a0:e7:fc:ba:01:d4:
                    ba:34:38:b1:4a:4d:4e:65:4c:3c:b8:c6:db:87:fa:
                    76:4e:83:b3:0a:5f:c8:88:37:10:2d:6c:47:e0:99:
                    e6:85:e1:39:ee:14:bf:d6:e3:1a:74:1b:33:4a:96:
                    09:f1:5d:e3:1f:5a:76:b8:3a:94:8a:c0:06:83:8e:
                    81:21:ba:5f:2f:1f:bb:0d:a4:99:a7:13:9f:91:f2:
                    3b:6d:a1:7c:d8:2d:24:74:98:9f:85:d4:87:b4:de:
                    6e:db:bd:21:13:43:bb:bd:f6:f7:36:bc:13:d6:29:
                    60:63:6d:e1:19:22:ff:05:db:84:e8:25:c7:b1:df:
                    5e:a3:6f:73:6f:6b:ab:ca:fd:dd:08:ff:73:1a:e1:
                    d3:89:74:11:2d:d6:ca:36:33:1f:36:7e:00:b9:81:
                    33:94:36:0b:3a:0c:e1:c6:41:ae:40:28:d5:70:f3:
                    aa:af:f0:42:2d:3e:cb:02:0e:93:30:64:19:a8:c0:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:99:A6:63:16:2C:43:3E:00:D1:0D:A8:F7:92:5E:A5:C9:4D:E5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d450575c-8da5-3334-b000-4aba440a4042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:dd:93:8a:8d:43:92:47:4c:df:38:ea:22:1c:f8:74:aa:46:
         e8:73:d3:32:c3:79:d4:3f:94:46:38:71:7a:1e:bf:7f:79:70:
         76:bd:50:1c:c4:01:1f:08:0a:f1:12:6b:b2:4f:09:98:26:dc:
         a3:16:07:86:d5:49:29:f4:f5:e4:bf:b5:ce:d9:4d:e7:86:a2:
         6a:4d:66:d2:bd:b5:5f:72:9b:91:62:e2:55:36:ad:63:cf:fb:
         fd:ad:d6:70:8f:2d:62:5f:2f:a1:02:20:16:fb:0b:ce:77:8d:
         1b:ba:a4:92:5e:9d:8c:b9:b5:a5:3b:d0:7d:50:99:c1:ce:65:
         d4:47:a8:d2:ff:cd:3b:f0:2a:65:83:ff:75:d2:44:de:be:2f:
         86:db:e9:39:a0:8d:d3:e6:ab:2f:e8:9c:c3:e4:af:26:89:55:
         c1:9d:88:89:66:6f:eb:e8:ec:36:26:a3:63:bb:22:17:7f:b4:
         fb:2c:eb:bb:c5:ad:4a:25:83:e5:a1:5f:71:48:6b:76:8a:c3:
         ba:c5:d4:d0:0b:10:d7:02:16:9d:80:21:91:64:09:48:e4:22:
         cb:1c:07:cd:89:6e:17:a4:f4:e2:79:d4:1b:07:c5:ae:6d:e9:
         5e:0d:ec:04:b0:ea:90:e9:25:0f:3a:24:5f:3c:b1:d2:37:20:
         a5:e1:25:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 18:13:36 2026 by rpki-client