Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa
File:                     3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa (raw, json)
Hash identifier:          qeufwKpoNwtTIf0m11dJwtfotjoxVNPDuqWpn/toZOo=
Subject key identifier:   3D:0B:14:FA:E3:ED:0A:0E:48:85:96:CF:D9:17:7B:A7:2F:60:41:76
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4C3D6DF47043D707A4C4E800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     57043
IP address blocks:        173.211.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:6d:f4:70:43:d7:07:a4:c4:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=d2dacb42-e297-48de-a010-b0de47475e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c5:1e:5c:e7:80:2c:78:d5:1a:6a:cf:03:6d:
                    64:07:ef:ec:a3:8f:85:91:72:d0:9b:b5:75:2f:53:
                    e3:f6:ed:38:94:46:0f:52:b6:18:ca:9c:48:85:0b:
                    f0:5e:ec:4b:f2:84:db:6f:7d:82:1e:c7:04:b7:e3:
                    80:29:7d:72:2b:91:b6:52:3c:ac:a3:df:12:33:d9:
                    44:8e:cb:db:82:1a:cb:1b:b5:5a:60:59:21:c1:f3:
                    5a:c7:97:62:79:9c:dd:f4:f4:af:16:bf:19:e7:3a:
                    2b:2d:e8:f7:83:c3:01:ae:6e:ab:cd:29:a8:e0:a9:
                    9b:1e:02:68:cb:04:ab:8b:2f:b2:c8:23:70:c1:75:
                    36:7d:0d:16:b4:05:99:9e:9f:10:44:10:d9:32:7f:
                    72:38:16:70:84:4f:22:cf:45:83:cc:55:4d:cd:cd:
                    20:5c:14:a2:61:6f:bd:6f:e1:c9:9b:d6:17:bc:a2:
                    0f:86:50:9d:70:60:1d:89:fd:40:47:48:00:92:65:
                    76:26:49:3c:8b:3f:1f:b3:3e:9b:3a:46:ab:24:4e:
                    2c:3d:29:23:02:40:26:14:6c:eb:2a:3c:49:a1:7c:
                    18:90:03:fb:27:e9:c1:e7:6d:4b:63:bd:cd:61:b8:
                    93:b3:38:9e:d5:30:54:5d:28:6c:64:fa:1d:d4:a8:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0B:14:FA:E3:ED:0A:0E:48:85:96:CF:D9:17:7B:A7:2F:60:41:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3acd01d2-7743-3951-b7ed-5eac1bb1e9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:3c:ba:31:00:72:d2:69:b6:5f:69:a4:b4:39:db:56:de:
         fd:18:18:1e:88:5e:05:da:8e:3c:04:cd:0b:a4:17:19:46:ec:
         e3:62:b4:a7:cf:e0:23:c0:1d:63:ac:e2:ab:75:f4:4f:67:14:
         d1:99:67:7c:d1:e4:50:04:8a:33:ab:00:89:63:f5:5b:a5:df:
         c3:fa:c6:1d:c1:4a:83:2f:ca:c4:e7:e9:af:8f:fd:d8:6e:ef:
         e8:c4:9c:53:70:7b:47:bf:22:d8:8b:18:5a:d0:83:be:ae:40:
         16:3b:fa:b7:f1:3b:c1:78:6a:ac:da:c9:27:b4:b9:79:70:24:
         db:0e:f0:55:55:89:7e:8b:ce:28:ba:dc:30:df:65:8b:9b:8c:
         5a:49:54:e8:fb:85:b7:91:be:4a:53:66:08:77:a5:ab:f4:f2:
         0f:5c:53:78:79:9c:94:09:17:14:26:ef:18:f7:34:ce:2a:ba:
         c3:27:6e:13:ad:1f:ad:97:f9:c9:e8:8c:83:5b:ef:dc:78:cb:
         e9:59:08:3c:a3:4c:e0:a6:de:e1:95:8c:b3:39:c3:03:1f:ae:
         e2:b7:09:2f:af:41:2c:a2:34:bf:14:28:40:14:3e:98:fa:6b:
         c0:07:4c:ea:f9:13:9e:83:44:4c:f3:25:72:d7:d9:d3:d7:79:
         ee:1e:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:05:51 2026 by rpki-client