Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa
File:                     fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa (raw, json)
Hash identifier:          6ILWt1eRLqLriIt16pdoLhIfkTkBpVmzv6SZDOpT9HY=
Subject key identifier:   18:30:88:AC:13:DD:12:F1:EE:7A:49:09:5B:E7:F6:A8:0A:0B:B2:B9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F093CDC6A460CADB64D36DA80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     33307
IP address blocks:        184.174.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:dc:6a:46:0c:ad:b6:4d:36:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=24ed7b26-bf39-41c7-86f8-0a0ffc0ecb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:13:34:cf:ff:14:9e:4c:76:fc:80:26:8f:
                    b9:79:c3:f5:f1:cd:3d:67:59:2c:f8:43:44:1a:12:
                    a0:f7:35:3f:86:f9:ec:02:3e:4f:d0:54:61:52:3e:
                    0e:0a:15:fb:08:d3:26:ce:76:bd:e4:2c:76:ef:af:
                    e9:4e:02:64:66:73:d0:e5:a1:17:b9:47:59:f9:88:
                    40:31:b4:e3:ad:04:0b:27:80:34:3f:9f:84:6f:8c:
                    e8:11:b4:e1:ef:37:5f:29:1b:cf:50:4c:f7:cb:b9:
                    d1:6b:6b:35:36:44:19:fb:2e:0f:df:95:46:b5:3d:
                    19:ef:94:69:49:55:d4:c3:26:fb:59:9e:ae:52:0e:
                    ad:e3:0f:dc:f8:27:91:40:2e:b2:01:20:ee:6a:73:
                    50:e1:ce:2e:65:34:f7:86:09:c7:d8:e1:48:b5:30:
                    ea:d0:b3:7d:da:9d:ac:80:7a:76:e9:9e:ff:1e:70:
                    31:0f:d3:fd:02:d9:0f:e5:fd:95:46:c1:91:26:1c:
                    50:36:62:0c:2c:bf:7b:65:02:a6:86:20:35:16:4c:
                    80:a5:e1:f6:79:e0:d1:f4:22:43:20:2c:8f:f9:2f:
                    2a:ed:45:60:84:37:0c:49:99:5c:46:4f:d1:5e:4c:
                    08:79:8c:76:c7:f7:6e:28:ae:26:6c:e8:eb:bd:02:
                    7a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:88:AC:13:DD:12:F1:EE:7A:49:09:5B:E7:F6:A8:0A:0B:B2:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fb3b4a52-e191-3b7d-ad3f-6cd2990b2932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:cb:0e:b6:3d:69:3a:fe:6b:42:73:13:6c:ba:b7:3f:7a:f7:
         0e:dc:69:41:66:df:8a:3e:cd:32:fd:f1:08:f0:97:af:b0:23:
         8f:ba:c0:0f:fd:02:fc:47:4d:0b:9f:d7:f2:6c:05:cc:da:61:
         1b:cd:f7:7e:b1:ed:2b:95:3c:1d:8c:13:9c:74:45:9c:d3:c5:
         cc:29:c5:bb:3b:18:aa:cc:59:35:52:a5:de:f1:3f:98:28:23:
         b5:e4:88:8b:14:1e:11:b9:d7:6f:77:17:52:8d:55:38:2c:a5:
         5b:7b:4a:07:b5:8e:c0:3b:ec:04:e6:6f:d5:bb:6f:a5:e1:fb:
         65:66:83:0d:bf:31:0c:71:25:07:43:ef:16:99:37:27:50:7d:
         7e:40:af:56:f5:21:0c:83:2b:6e:cf:41:fc:50:8f:5c:27:c5:
         fa:4f:4e:94:26:2f:95:68:fa:d3:7f:73:67:71:46:37:c4:50:
         a5:93:ef:2f:8d:af:90:dd:28:6a:2b:02:d6:88:2b:bb:2b:65:
         63:52:aa:4d:da:79:26:5f:5b:ec:db:fc:1b:7f:ab:86:77:9d:
         51:5a:3c:51:5d:bc:b6:49:a3:0e:06:ad:c7:e0:ef:aa:66:41:
         d3:85:4e:16:4f:2a:9f:a4:50:bf:19:41:49:f5:d3:e3:db:3b:
         86:d7:81:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:57:53 2026 by rpki-client