Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
File:                     280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa (raw, json)
Hash identifier:          a29ayDpgtkayEoJHt9YbBkfL2cAf4uI0Q9mawMNhhSY=
Subject key identifier:   7C:9E:5A:6D:1E:98:44:61:EB:66:4D:33:6F:2B:D3:9E:DC:91:B2:D7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DBBA057672B29DDA6D1566F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     9009
IP address blocks:        174.140.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:57:67:2b:29:dd:a6:d1:56:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=df9c691f-f452-4f35-b94f-f54147e81b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:4c:89:0c:db:b5:21:c3:da:99:f2:04:d1:63:
                    6b:da:c7:d4:71:d7:2e:29:3e:90:6b:c1:34:03:33:
                    82:bb:25:33:01:3d:cd:54:44:3b:25:cd:d4:7d:cc:
                    2d:70:1f:4e:68:09:9a:4b:4b:6e:a4:f3:88:06:71:
                    f8:d1:08:8f:91:45:2f:d9:d8:ce:ea:e4:d4:95:6b:
                    ec:98:47:80:dd:e0:3b:eb:00:a9:d5:d1:ff:d3:e5:
                    2c:01:2f:e2:bf:b0:a6:e8:39:f1:24:26:e5:93:83:
                    8a:ec:27:ad:af:b2:34:a5:f8:6d:e0:58:06:7f:18:
                    68:4c:84:b9:87:bc:e9:76:51:ce:90:8d:28:cd:93:
                    c2:d8:b4:52:c1:a1:57:ba:06:72:2b:df:02:2b:80:
                    df:4f:72:c4:87:78:a6:96:fc:d3:86:9e:5d:ef:e9:
                    fe:8a:74:47:ba:ec:e4:a9:73:73:be:bd:9c:c4:02:
                    51:6d:36:ee:56:47:33:7c:4c:d8:9b:20:4a:b3:07:
                    2d:4a:dd:63:53:8f:6b:79:8e:90:8e:4c:78:92:39:
                    c0:d2:4f:33:f3:97:42:53:66:61:2f:c2:ff:03:8d:
                    4e:7a:a8:82:c6:69:b3:ca:d7:dd:91:6d:da:9b:e4:
                    cb:a5:9f:67:64:64:45:09:52:62:35:04:a4:8b:99:
                    ea:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9E:5A:6D:1E:98:44:61:EB:66:4D:33:6F:2B:D3:9E:DC:91:B2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:d9:80:1e:8e:77:9b:d4:e6:40:82:c5:06:3f:77:b4:94:
         6e:87:53:97:7f:65:53:00:ee:bd:94:07:c5:8a:0b:ac:f7:fd:
         a9:c9:d2:96:cc:14:e4:e3:43:91:4e:dc:86:e3:fa:10:8d:e6:
         cb:af:36:8a:03:e1:e0:d9:41:6b:94:f3:d0:7c:f1:7f:e0:b5:
         29:07:21:4f:4b:47:e0:b6:e4:da:34:87:e4:a2:00:85:5b:51:
         2b:43:75:3e:bf:e1:c3:8d:be:a4:73:00:f9:d5:9c:34:87:e6:
         44:fb:0d:dd:2f:50:86:c2:0e:52:d5:9b:db:da:83:60:7b:71:
         3d:18:01:45:73:8b:ab:5e:f0:15:e5:50:4b:73:e9:e4:d3:8e:
         bb:3d:69:94:da:d9:10:50:19:f7:c1:65:1f:50:11:cc:f5:89:
         10:85:07:7e:69:40:c0:7f:a4:40:4a:ff:1d:74:62:4f:c7:17:
         7a:59:82:d4:9e:cb:58:1c:4d:86:5d:9c:02:da:a4:e8:5e:ef:
         33:9c:b2:12:d4:74:e0:40:38:2e:f0:00:ae:60:9a:77:ce:fd:
         b9:9f:e2:a0:a9:ea:99:4d:69:e0:ad:f9:09:d8:25:82:21:7d:
         32:71:e7:67:48:fa:be:0e:51:01:26:7f:81:97:77:b2:87:0e:
         72:89:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:23:42 2026 by rpki-client