Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/219011a7-f41c-3706-b572-410ff7d6d7f1.roa
File:                     219011a7-f41c-3706-b572-410ff7d6d7f1.roa (raw, json)
Hash identifier:          dTl/FHter2TorI7nbiWdifeaxDQizWAYfpjinwTPP6Y=
Subject key identifier:   D9:FD:51:25:B0:BC:A5:15:60:FE:6A:A6:6B:47:28:9F:07:2F:7F:76
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F6293114F2AAC82929D92CE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/219011a7-f41c-3706-b572-410ff7d6d7f1.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     47007
IP address blocks:        174.140.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:93:11:4f:2a:ac:82:92:9d:92:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d4256747-b1e9-4eab-9299-4263f599b2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:ae:fb:7b:30:9a:34:3f:9e:52:9e:c5:f0:
                    fe:50:a7:6f:eb:0b:67:2f:26:f4:4c:c2:ac:62:7c:
                    24:4a:f2:bb:48:01:2a:bc:d2:99:82:7a:f4:ee:a8:
                    41:06:3c:11:ee:db:8e:5a:da:52:5b:c5:3c:1a:4d:
                    3f:e1:e6:24:85:64:ab:5b:af:29:aa:4b:67:d2:1f:
                    ed:6c:39:16:b0:11:1c:54:21:75:ec:b0:3e:df:0a:
                    6a:f4:d7:5e:39:d3:3d:bf:19:60:f3:3c:f7:df:c0:
                    c9:d9:9b:77:a9:4c:75:61:8a:7a:53:a6:ee:2e:b9:
                    a9:06:46:88:42:c3:93:1b:84:1b:42:a9:8e:27:53:
                    ca:47:c3:ae:c3:08:34:b8:78:16:45:1d:b5:4d:8d:
                    f0:d9:3a:b2:7e:9c:f7:d7:ff:51:54:00:0a:81:ab:
                    1f:19:78:fb:cf:68:9a:2d:c7:e8:31:a9:7c:7f:af:
                    67:02:b9:76:37:a5:95:fe:57:67:ce:f9:ec:cf:b3:
                    74:f7:15:11:0c:23:66:bf:8c:29:2a:68:b4:94:00:
                    e3:30:d1:29:c2:ba:e1:28:f2:8b:be:b2:c1:cf:60:
                    44:9b:5e:e1:82:17:1c:ff:45:36:f4:94:05:af:74:
                    19:c2:2e:55:22:c6:fa:66:95:b1:50:da:59:29:a6:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FD:51:25:B0:BC:A5:15:60:FE:6A:A6:6B:47:28:9F:07:2F:7F:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/219011a7-f41c-3706-b572-410ff7d6d7f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:93:ca:aa:4e:af:71:51:36:0f:84:60:06:ef:74:5e:b8:1a:
         c5:73:79:8c:c0:ff:47:8d:43:62:9d:34:1d:8a:98:87:42:08:
         66:13:62:5e:ed:44:fb:70:8d:fb:f2:0f:5f:5b:34:83:83:ac:
         70:9b:59:1a:f5:6e:1e:ac:f1:f8:34:4d:53:41:1e:96:be:aa:
         8f:c7:7c:98:69:4d:83:6e:7a:fc:41:35:d8:31:6c:9e:4c:90:
         92:9d:33:b7:34:60:7e:86:df:f2:0e:2c:07:a3:1e:40:6f:bc:
         a0:f4:28:d4:a8:73:76:78:e5:e2:69:fa:36:f6:91:de:42:6f:
         9c:c7:aa:f6:fb:60:b5:26:92:7e:8a:86:83:61:79:9b:02:fb:
         15:59:d1:66:90:ff:90:d0:19:eb:62:17:b9:21:d2:a8:6a:3d:
         42:49:5c:f2:4a:71:0c:ca:16:dc:d9:0c:e3:ee:29:a1:c1:e4:
         1e:07:b8:64:fd:34:01:d7:75:70:47:fd:62:8b:1a:56:19:cb:
         60:54:55:e9:45:97:94:31:ef:64:1d:d1:62:e7:08:4e:45:0d:
         01:ba:34:52:66:71:00:06:be:8e:13:8d:38:c1:55:d3:7a:e1:
         25:b1:11:e5:3a:08:57:9b:d0:af:ac:cf:1c:f2:2f:2f:84:54:
         45:d0:e5:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikxFPKqyCkp2SzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZDQyNTY3NDctYjFlOS00ZWFiLTkyOTktNDI2M2Y1OTliMmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMKu+3swmjQ/nlKexfD+UKdv6wtnLyb0TMKs
YnwkSvK7SAEqvNKZgnr07qhBBjwR7tuOWtpSW8U8Gk0/4eYkhWSrW68pqktn0h/t
bDkWsBEcVCF17LA+3wpq9NdeOdM9vxlg8zz338DJ2Zt3qUx1YYp6U6buLrmpBkaI
QsOTG4QbQqmOJ1PKR8Ouwwg0uHgWRR21TY3w2Tqyfpz31/9RVAAKgasfGXj7z2ia
LcfoMal8f69nArl2N6WV/ldnzvnsz7N09xURDCNmv4wpKmi0lADjMNEpwrrhKPKL
vrLBz2BEm17hghcc/0U29JQFr3QZwi5VIsb6ZpWxUNpZKabVYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNn9USWwvKUVYP5qpmtHKJ8HL392MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjE5MDExYTctZjQxYy0z
NzA2LWI1NzItNDEwZmY3ZDZkN2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroz4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMiTyqpOr3FRNg+EYAbvdF64GsVzeYzA/0eNQ2KdNB2KmIdCCGYTYl7t
RPtwjfvyD19bNIODrHCbWRr1bh6s8fg0TVNBHpa+qo/HfJhpTYNuevxBNdgxbJ5M
kJKdM7c0YH6G3/IOLAejHkBvvKD0KNSoc3Z45eJp+jb2kd5Cb5zHqvb7YLUmkn6K
hoNheZsC+xVZ0WaQ/5DQGetiF7kh0qhqPUJJXPJKcQzKFtzZDOPuKaHB5B4HuGT9
NAHXdXBH/WKLGlYZy2BUVelFl5Qx72Qd0WLnCE5FDQG6NFJmcQAGvo4TjTjBVdN6
4SWxEeU6CFeb0K+szxzyLy+EVEXQ5RA=
-----END CERTIFICATE-----
Generated at Mon Oct 12 23:15:55 2026 by rpki-client