Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa657315-3ab6-3b91-97ea-92fa06949a5e.roa
File:                     fa657315-3ab6-3b91-97ea-92fa06949a5e.roa (raw, json)
Hash identifier:          kROlVi5Svuq88Mb2pNWIWuYrS195xPgwKyqkhZRwqLQ=
Subject key identifier:   54:09:84:5D:32:A7:74:67:66:1C:82:3F:E5:C6:C2:F1:FE:A8:E6:47
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA788CF4348FC937BDF9F9180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa657315-3ab6-3b91-97ea-92fa06949a5e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19437
IP address blocks:        216.122.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:cf:43:48:fc:93:7b:df:9f:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=782d55d8-fc7a-4d46-af1b-91f41ab50dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:45:06:7f:1a:89:ea:1c:f9:cd:8f:f6:f7:
                    41:b4:b1:f1:cf:07:a4:93:1c:94:5c:5d:99:92:96:
                    1c:a9:d6:2d:2a:cf:13:8e:fb:2b:f0:42:91:b0:b1:
                    e3:ea:b3:bf:23:5a:e0:e3:3c:cd:af:3b:8a:c4:78:
                    91:32:c6:ce:7c:5d:85:34:45:03:62:32:f5:b2:99:
                    ca:98:0a:38:51:87:f7:d4:18:8f:a2:13:26:04:0e:
                    16:1e:e7:59:45:e4:f0:2e:54:8b:d6:07:4a:14:57:
                    91:00:00:94:cd:be:39:cb:61:9d:72:ef:a7:58:33:
                    c8:7a:9e:69:a2:d7:be:b8:6e:53:e4:cc:75:65:4a:
                    0a:44:90:69:03:30:e4:e8:eb:05:46:a2:ca:a4:a9:
                    b8:be:4f:f7:06:99:f2:5e:60:4f:1e:86:d1:7b:41:
                    e8:60:cc:74:73:58:da:93:a1:94:f9:54:c3:14:a5:
                    d1:43:ef:46:3f:62:2b:4f:a9:d4:68:dc:fe:d0:e1:
                    61:ac:ff:5c:ed:28:35:3b:d1:bc:ce:2d:a5:02:18:
                    2e:e0:35:3d:87:91:94:f8:b0:23:4b:e5:cd:4f:02:
                    da:fc:8d:e6:c8:fe:1e:ab:e5:ff:84:7a:d5:8e:4b:
                    25:2f:84:51:c0:02:8f:5b:e9:6a:d1:55:c5:46:89:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:09:84:5D:32:A7:74:67:66:1C:82:3F:E5:C6:C2:F1:FE:A8:E6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa657315-3ab6-3b91-97ea-92fa06949a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:91:c2:3f:e6:f6:bd:4f:8d:a4:bc:c7:1f:78:0e:59:10:
         19:fd:ef:0e:eb:62:46:bc:11:a6:c1:32:48:04:4e:3d:22:9c:
         1e:fd:d6:37:2a:31:d1:3e:8b:cf:5d:a2:6a:6f:cd:c9:15:9d:
         18:34:c8:ba:49:9b:b6:dd:c9:da:db:97:8e:9a:28:e3:8c:91:
         ef:cd:54:ae:ee:76:f3:44:32:bd:69:66:f2:69:fb:05:46:4a:
         50:58:60:15:21:83:bd:57:88:69:76:5c:66:97:7f:1e:7d:9a:
         a5:09:82:2e:22:96:27:d7:8d:6f:80:44:41:6c:59:93:64:c5:
         d0:d5:ef:6e:88:c7:c2:b0:38:46:9c:c0:f9:5e:d7:f0:6e:92:
         b4:17:5d:29:dc:80:67:b8:ba:22:b0:6b:75:2b:41:41:e8:7c:
         de:bb:43:4a:aa:2b:2f:5d:f3:af:12:20:9b:17:33:73:0a:fc:
         85:7e:80:42:83:b8:d3:0d:a8:97:0f:b5:b6:83:ba:52:d2:0c:
         73:0a:77:f9:3b:66:d3:9d:4c:27:4b:ab:eb:79:f2:2c:4e:4c:
         d7:e8:c1:6e:8a:d5:39:20:f3:e1:e4:ee:11:88:44:a6:08:39:
         dd:ad:6e:d5:49:c1:30:70:34:c3:52:81:22:2d:8d:3f:e7:8f:
         ec:68:3c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:32:54 2026 by rpki-client