Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e1127a1a-9930-3595-9653-2fa98ca9dae8.roa
File:                     e1127a1a-9930-3595-9653-2fa98ca9dae8.roa (raw, json)
Hash identifier:          QrT1cfM4gb90+BkXozpeOXjKCVASYBjnG50gn76A848=
Subject key identifier:   CA:BD:4F:A2:F8:1E:63:64:15:4B:9C:3E:C4:6B:C3:0B:29:DE:10:5B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CCBA74FE168971D9E70B4F1D0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e1127a1a-9930-3595-9653-2fa98ca9dae8.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     19437
IP address blocks:        173.211.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:4f:e1:68:97:1d:9e:70:b4:f1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=df9f935f-0afb-4909-a37d-ae994501d816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9c:19:20:6d:37:8d:29:4a:3b:71:09:0c:b1:
                    b9:df:64:c0:10:da:9f:41:b4:56:cf:f4:58:40:7f:
                    fa:94:82:01:e7:18:ec:99:4c:6a:3e:ae:66:ce:e1:
                    dc:66:f7:47:bf:e7:f4:46:3f:b8:39:b0:19:99:fe:
                    af:2e:fe:03:03:a9:a5:12:c6:16:4c:d7:8a:83:08:
                    24:a9:8a:fb:5d:69:4d:0a:57:4c:c6:bb:32:e8:2f:
                    07:a7:1b:c5:28:c4:ef:75:89:05:80:e7:d0:b4:0e:
                    ad:6a:b4:1b:9a:85:a8:0a:1c:c1:f6:d0:68:95:16:
                    a6:83:f1:2c:be:80:50:ee:02:04:63:60:58:6e:1a:
                    db:17:a2:4f:e7:72:46:1e:56:5a:75:56:ce:f9:84:
                    d3:d8:dd:4d:00:ed:5b:46:f0:e4:95:4c:89:29:7e:
                    86:9a:97:f0:91:23:bf:bc:38:e5:38:a1:5b:2d:3c:
                    1a:8f:b6:65:30:d6:a3:33:38:e3:5e:df:b4:ba:a9:
                    83:e5:0c:8d:4c:bb:c8:cb:51:28:be:31:f7:f9:22:
                    34:5f:fc:85:61:77:96:cb:52:5e:13:cf:0f:5f:fe:
                    42:ed:e8:8d:9b:73:3a:a1:93:8d:3b:e1:df:f7:b9:
                    c1:0d:42:7e:f3:26:db:05:0f:00:7b:83:81:42:f2:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:BD:4F:A2:F8:1E:63:64:15:4B:9C:3E:C4:6B:C3:0B:29:DE:10:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e1127a1a-9930-3595-9653-2fa98ca9dae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d4:e5:a9:fe:73:8a:f8:4b:15:bc:16:80:aa:04:39:90:11:
         66:b4:0b:51:14:89:60:ab:b7:6f:75:75:2f:85:0e:2b:23:93:
         78:53:ac:e8:25:67:52:2b:f8:4b:a3:e6:5c:c5:0e:5b:bd:6f:
         2c:0a:db:23:ab:df:91:f4:4e:4d:05:55:72:41:ac:49:90:f5:
         27:f5:23:56:90:54:e1:de:d2:11:1a:2e:3e:44:93:c6:a7:b2:
         27:bf:0e:49:36:e0:b2:c7:9a:9e:9f:a0:3c:ad:6a:3c:ae:d0:
         9b:78:03:86:e0:70:3c:67:e4:10:1a:d7:35:c9:9e:49:ae:38:
         fa:40:97:0c:23:fe:3a:73:f1:f2:9e:d9:41:1a:1f:f5:1d:1d:
         9d:e3:a8:d8:3d:32:d8:cc:1b:29:ec:ab:e8:99:d0:74:0e:b6:
         af:5e:ee:9a:f1:c5:2e:c3:8c:05:45:a5:5f:b9:02:c1:91:9c:
         0c:5e:49:81:7b:74:f6:08:ce:26:d7:1f:6b:bc:ac:d4:0f:bb:
         67:34:61:df:18:0a:24:c3:47:79:51:af:35:42:37:52:31:f4:
         ed:a2:50:de:4f:59:e9:f4:ae:37:13:c3:24:99:6d:cf:94:3b:
         68:d2:63:04:f6:eb:ed:70:e5:d8:bf:0e:a6:6d:ca:ce:0e:a5:
         65:8d:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:07 2026 by rpki-client