Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29a47a7a-d42e-3dec-9b26-194841d92350.roa
File:                     29a47a7a-d42e-3dec-9b26-194841d92350.roa (raw, json)
Hash identifier:          WrFw0CqBNrrAsjeDiWZec+RXCXFhHwPaAOw/i87tI7A=
Subject key identifier:   F6:D7:18:74:01:AB:41:EE:D6:7E:3B:AC:02:12:52:CF:A4:F4:A3:B0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F3CE28DCD7929F7D06ECE7480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29a47a7a-d42e-3dec-9b26-194841d92350.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     26042
IP address blocks:        216.183.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8d:cd:79:29:f7:d0:6e:ce:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=01a4078a-ebe4-46e3-8f65-44fa6c0c772d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:ae:02:7e:a8:a8:cf:f3:6f:b2:3a:0c:e0:
                    d2:5e:69:74:b9:15:08:26:69:43:95:1e:0c:26:be:
                    a1:ae:5d:0e:31:c9:f8:12:37:aa:17:f3:63:34:ef:
                    4b:e6:e8:43:fa:7e:46:91:06:45:e4:59:48:9d:fb:
                    2e:f3:72:39:ec:b9:6d:43:b8:02:a4:05:e4:47:7d:
                    77:9c:52:ab:15:3b:44:46:da:c5:d3:b8:66:7f:86:
                    7c:66:b1:d4:04:8d:c2:67:8b:9f:09:53:34:17:e2:
                    6b:28:44:0f:2f:24:9c:66:1c:d8:76:32:e7:4b:7a:
                    ce:d0:8a:9c:60:aa:fd:aa:ed:94:92:16:13:c6:c7:
                    3d:99:91:83:b2:b2:96:3b:1c:25:96:72:11:96:6d:
                    91:a2:13:28:af:0b:05:42:1b:ca:1a:9b:5a:84:00:
                    87:d9:6c:cc:6b:d3:af:61:b6:6d:94:62:9f:64:e4:
                    b2:05:d0:23:7b:b1:c9:6a:dd:14:ff:de:16:18:0a:
                    5e:56:a2:1d:f4:24:1f:e8:96:50:b1:28:bb:d8:3b:
                    6a:69:82:27:26:13:7e:c3:d9:58:8e:cc:8e:c7:0c:
                    0e:21:22:5b:d6:2f:3a:cc:30:b5:a3:95:9d:49:ab:
                    23:5e:a1:7e:5f:6e:4b:73:26:45:57:d0:23:99:42:
                    d4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D7:18:74:01:AB:41:EE:D6:7E:3B:AC:02:12:52:CF:A4:F4:A3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29a47a7a-d42e-3dec-9b26-194841d92350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:af:b3:69:a6:db:f9:4b:82:99:93:8c:bf:15:c9:7c:07:4b:
         5e:e9:a0:ef:ab:62:eb:96:a6:35:68:4f:bb:26:2c:46:c7:e4:
         68:fe:af:5b:d0:1d:44:a9:df:e0:81:03:89:ff:b1:5a:bb:f9:
         8f:88:f6:8a:a7:60:50:86:77:d7:05:24:fa:f1:88:d2:0a:97:
         e2:57:dd:b2:39:45:f3:98:53:5b:8b:b5:d2:09:b2:93:72:7d:
         29:8e:94:65:43:dd:41:5c:ba:58:89:42:a2:74:36:02:bd:51:
         51:c5:ed:c3:d2:2f:db:9a:62:45:06:c8:3d:2d:94:5d:4d:b1:
         0e:cd:38:ba:4c:5f:70:61:ff:33:f9:52:72:a7:3a:ce:81:e4:
         fc:29:b7:03:ea:67:6c:03:10:59:c1:24:b1:7a:4f:ff:89:43:
         79:44:6e:d6:24:c7:9f:8c:17:6c:fc:f3:06:03:54:3c:e8:9f:
         af:f8:c1:15:37:0a:2c:2f:ea:3c:69:05:01:50:fc:50:ec:73:
         1a:ed:18:c3:1d:08:b4:f3:2f:6d:30:74:f7:93:aa:42:b2:d2:
         61:72:8f:c0:9d:62:c6:61:d2:6d:dc:90:92:17:4d:a3:87:85:
         c3:00:e8:d5:93:47:d5:09:d5:ea:f4:ab:9c:4d:04:00:3f:34:
         42:be:61:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884o3NeSn30G7OdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk
MDFhNDA3OGEtZWJlNC00NmUzLThmNjUtNDRmYTZjMGM3NzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFquAn6oqM/zb7I6DODSXml0uRUIJmlDlR4M
Jr6hrl0OMcn4EjeqF/NjNO9L5uhD+n5GkQZF5FlInfsu83I57LltQ7gCpAXkR313
nFKrFTtERtrF07hmf4Z8ZrHUBI3CZ4ufCVM0F+JrKEQPLyScZhzYdjLnS3rO0Iqc
YKr9qu2UkhYTxsc9mZGDsrKWOxwllnIRlm2RohMorwsFQhvKGptahACH2WzMa9Ov
YbZtlGKfZOSyBdAje7HJat0U/94WGApeVqId9CQf6JZQsSi72DtqaYInJhN+w9lY
jsyOxwwOISJb1i86zDC1o5WdSasjXqF+X25LcyZFV9AjmULUDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbXGHQBq0Hu1n47rAISUs+k9KOwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjlhNDdhN2EtZDQyZS0z
ZGVjLTliMjYtMTk0ODQxZDkyMzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LfmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmvs2mm2/lLgpmTjL8VyXwHS17poO+rYuuWpjVoT7smLEbH5Gj+r1vQ
HUSp3+CBA4n/sVq7+Y+I9oqnYFCGd9cFJPrxiNIKl+JX3bI5RfOYU1uLtdIJspNy
fSmOlGVD3UFculiJQqJ0NgK9UVHF7cPSL9uaYkUGyD0tlF1NsQ7NOLpMX3Bh/zP5
UnKnOs6B5PwptwPqZ2wDEFnBJLF6T/+JQ3lEbtYkx5+MF2z88wYDVDzon6/4wRU3
Ciwv6jxpBQFQ/FDscxrtGMMdCLTzL20wdPeTqkKy0mFyj8CdYsZh0m3ckJIXTaOH
hcMA6NWTR9UJ1er0q5xNBAA/NEK+Ya8=
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:55:22 2026 by rpki-client