Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25ca81cd-3050-3933-a6c1-c8bca72c2da0.roa
File:                     25ca81cd-3050-3933-a6c1-c8bca72c2da0.roa (raw, json)
Hash identifier:          d5sAbCwWP3h0Us1ofQTaEF27a4oY1XWI4ihNh6fFZLU=
Subject key identifier:   DB:5E:D1:54:42:59:6A:9D:E5:5D:B8:A2:D6:97:86:A7:AD:BA:40:E4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DC8305D9201BA60BC3969AF00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25ca81cd-3050-3933-a6c1-c8bca72c2da0.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        216.183.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:5d:92:01:ba:60:bc:39:69:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=b6e155ce-1558-401c-a929-c9dee8d13afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4b:d2:6f:8e:e9:77:fd:a7:20:6e:8a:c4:ec:
                    49:91:ed:51:36:3c:a2:66:a3:e0:34:35:0f:eb:8c:
                    3a:2d:1c:de:82:38:69:14:93:28:b3:3e:bb:33:f1:
                    b7:04:7b:21:80:2b:c3:9b:de:cf:96:36:2d:00:42:
                    f4:db:e7:50:47:6b:5f:80:00:c2:7f:67:66:1f:d5:
                    29:0e:30:54:fe:8d:c8:64:d5:59:2e:66:0a:91:61:
                    00:d5:23:dd:35:a4:fd:2f:91:2c:02:7a:98:a5:cf:
                    e0:7c:90:a8:df:e3:08:e9:e9:27:3e:65:b0:ca:aa:
                    4d:48:24:da:49:58:a2:4a:e7:00:3b:99:ff:91:49:
                    4b:2d:bb:4c:93:83:93:00:f8:b6:8e:88:a8:0c:be:
                    3e:db:55:91:50:81:3d:93:c7:10:d4:b7:10:f4:36:
                    3c:98:78:12:6b:c1:5e:f6:9b:83:9e:95:1a:0f:56:
                    79:b1:52:51:5d:52:f2:b6:48:2c:71:f1:04:85:7a:
                    7b:a8:48:bf:33:c4:e1:f5:54:a4:bd:75:26:56:8d:
                    c9:07:b3:c9:2a:dc:a8:ff:1e:0b:56:c0:37:85:c1:
                    de:f5:d1:e0:3c:6a:2a:cd:58:0c:1c:e1:20:7f:f2:
                    aa:ea:e8:1d:af:16:3b:bf:53:f9:76:d7:db:52:1c:
                    d1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5E:D1:54:42:59:6A:9D:E5:5D:B8:A2:D6:97:86:A7:AD:BA:40:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25ca81cd-3050-3933-a6c1-c8bca72c2da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:59:8a:2e:ef:f1:b3:1f:d5:8a:9a:1f:5c:19:d3:ca:6b:50:
         8c:40:ff:82:a5:82:30:2b:bf:11:c2:51:ab:ea:d3:6b:d1:3a:
         2e:d1:b4:39:13:11:f7:93:a5:bf:55:10:6d:98:61:70:44:9d:
         4b:0e:4c:7c:b3:ed:1b:96:90:3d:e9:8e:d9:e2:01:e7:e3:a3:
         3f:77:6a:28:1c:48:a1:9e:41:4e:0d:ff:1d:88:e0:37:91:35:
         f1:e6:67:9c:18:88:7c:9e:b6:a4:e0:8a:58:fb:4e:67:8b:81:
         06:b8:7d:c3:36:27:3b:06:0d:1a:3d:0d:97:31:7f:f5:96:71:
         77:1b:96:27:96:1e:72:7c:ea:d7:5d:b7:6b:ff:ca:62:96:25:
         55:4a:9e:2c:13:d4:96:6f:b4:38:74:f0:c4:1b:75:a2:e6:e1:
         2b:57:35:db:40:b7:a1:5f:b7:e6:04:20:a7:04:92:95:9a:84:
         7c:db:b4:2e:57:7b:c0:be:de:bb:26:e5:1c:de:da:4a:ff:bf:
         d4:5a:bb:58:32:2b:4a:4c:68:93:c9:5b:a5:4a:b9:6a:ae:fb:
         67:bd:0d:e5:8a:09:7c:0f:81:39:93:8b:8d:66:06:55:f8:91:
         c4:4c:a1:20:03:a3:e7:04:f0:79:4f:2b:a2:0b:50:72:2e:5b:
         63:47:5f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:50 2026 by rpki-client