Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f86d8073-7fd3-3479-a899-09ba4f1bf578.roa
File:                     f86d8073-7fd3-3479-a899-09ba4f1bf578.roa (raw, json)
Hash identifier:          8kApBSENvPgEoYhzBjGZ5wrnktp7cUAsl2vs+bL2ABY=
Subject key identifier:   E4:05:5E:1A:71:F8:6D:A8:A6:4B:92:28:0D:71:1B:BA:7A:6C:E5:3C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EE4F1F1810565F86320EFA000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f86d8073-7fd3-3479-a899-09ba4f1bf578.roa
Signing time:             Thu 20 Aug 2026 01:00:12 +0000
ROA not before:           Thu 20 Aug 2026 01:00:12 +0000
ROA not after:            Wed 18 Nov 2026 02:00:12 +0000
asID:                     402349
IP address blocks:        216.75.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f1:f1:81:05:65:f8:63:20:ef:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 20 01:00:12 2026 GMT
            Not After : Nov 18 02:00:12 2026 GMT
        Subject: CN=feae4937-027c-404d-b4a6-e706af994dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:4f:d6:2f:44:1a:90:55:ea:20:ca:d3:15:
                    e7:41:79:4a:6f:f6:7f:68:8a:d7:2c:f4:e3:7a:3b:
                    62:eb:ad:2b:15:a8:e7:68:52:a4:3e:bd:84:fd:1f:
                    62:e3:5c:92:16:df:0c:2a:93:55:98:9b:33:53:ec:
                    3c:33:63:19:4d:3c:ea:77:a2:3e:81:aa:f6:03:b3:
                    63:4c:5e:eb:d8:dd:de:cc:d7:90:0f:4a:3c:6a:13:
                    dd:8c:bf:d2:18:d2:66:c3:ca:b3:98:53:cf:5e:ad:
                    4a:72:fe:1c:6c:b2:ca:cf:b9:0d:aa:71:3a:f8:69:
                    57:3b:9b:12:76:29:0a:6f:15:80:84:85:6b:6a:5b:
                    c8:6d:ce:d8:51:3d:fe:91:14:8f:34:37:9e:13:73:
                    b5:20:7f:f5:f6:3d:a2:ba:29:33:b0:8a:12:5d:40:
                    bf:ac:38:fc:c0:13:cc:b3:1b:61:78:a0:5f:b6:e8:
                    43:2a:cc:7a:24:2e:ef:6d:f9:05:fd:67:92:61:25:
                    24:3e:49:9a:81:8e:1c:ee:12:0e:c7:5b:fe:9c:49:
                    e0:26:03:97:55:23:2e:f3:0f:79:db:c0:cd:89:66:
                    ad:58:62:d7:10:99:6f:93:e0:2c:cc:f3:1d:bd:77:
                    16:54:77:c8:9e:5c:e4:ab:55:d3:03:f6:25:f2:d2:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:5E:1A:71:F8:6D:A8:A6:4B:92:28:0D:71:1B:BA:7A:6C:E5:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f86d8073-7fd3-3479-a899-09ba4f1bf578.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:27:b9:d2:44:3e:53:25:ee:a8:a1:f2:09:b4:f6:7a:50:b0:
         71:0b:71:59:d2:43:10:f4:72:4a:9f:c0:fe:dd:6b:90:88:dc:
         5e:37:de:18:34:20:7b:ac:ef:f2:05:c8:bd:41:f4:eb:e6:af:
         e9:0f:d9:27:ae:28:e3:87:cf:b6:48:a0:f1:0f:5c:32:af:ac:
         e0:b2:53:11:01:5f:5a:66:fe:0a:54:28:be:71:e3:dc:b0:25:
         bb:5a:03:be:cb:bc:d6:b6:92:ca:98:31:2d:47:a3:a1:c8:bd:
         4f:6f:7a:90:fa:c0:b7:4a:d2:12:1b:20:19:c6:c6:20:06:ed:
         69:dd:a1:e6:13:9e:b7:41:89:ef:2b:82:ca:b9:2a:2d:7f:35:
         cc:a5:8b:ee:d0:af:6d:1b:2f:06:78:3f:9b:1d:7b:bf:0f:b2:
         ef:8b:3f:c1:e9:2b:9e:ea:31:a5:66:14:bc:27:78:aa:dd:fe:
         ba:90:c6:b7:29:c8:ae:75:3e:48:7e:8f:4c:69:b2:31:0e:2c:
         e7:e6:ce:db:a1:65:e5:cc:22:53:c0:45:1f:3f:d6:3a:25:2c:
         9c:4d:fd:a2:f0:78:50:ac:64:37:e0:2f:d7:48:64:8a:c9:29:
         50:d9:42:8f:1a:b8:f3:69:59:b6:8d:42:60:42:31:8a:f0:a8:
         89:c6:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:05:56 2026 by rpki-client