Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bd302ad-eca4-392a-a53a-cbff7c96a108.roa
File:                     3bd302ad-eca4-392a-a53a-cbff7c96a108.roa (raw, json)
Hash identifier:          wfvYRFSAdGf14CtuhF/5eaYzjtn4Lr3feEJEN3E6hAQ=
Subject key identifier:   B1:AC:0A:B2:9F:2F:F3:8A:4F:21:01:ED:DA:FC:13:09:1D:8A:50:65
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DB07584DB3FB3885E2541AC1D
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bd302ad-eca4-392a-a53a-cbff7c96a108.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     25653
IP address blocks:        173.211.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:84:db:3f:b3:88:5e:25:41:ac:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=8b6f7a8e-c2d5-4bbf-90d5-a64cb4eea3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:13:5b:b5:f8:1f:e0:2f:6c:04:67:c1:43:
                    c2:7b:d5:4e:42:1e:2f:c0:7d:5d:ed:c7:cc:78:1a:
                    c2:0a:65:2d:98:47:17:c2:74:ad:69:c7:80:ec:eb:
                    8e:87:82:08:a3:e8:b9:fd:f7:a5:dc:90:5b:b7:85:
                    3c:d6:16:72:fc:4f:0c:e9:ce:9f:96:67:0f:1b:d7:
                    9b:bf:c1:22:04:1f:49:b3:e8:c0:b9:70:e2:26:08:
                    c2:fc:90:42:bd:b1:69:41:9e:01:e3:3f:8b:3f:44:
                    79:22:c6:37:3d:fe:a8:71:d9:9b:59:89:1a:4f:c0:
                    4d:dd:f8:86:73:d7:4b:b3:fd:60:57:6f:96:83:34:
                    e8:cd:68:2e:5a:61:f0:9c:15:ae:a9:3d:4c:87:29:
                    0c:e1:4f:93:2f:2b:f4:52:ee:cd:6f:b6:67:76:3c:
                    51:dc:4a:d7:0c:e3:fb:13:d4:0a:e8:e9:e9:36:ee:
                    28:24:77:db:40:c6:53:4c:21:e9:c2:42:32:f5:52:
                    5a:fe:e7:de:fb:e5:5e:d2:70:95:85:f1:38:d6:3b:
                    ac:3f:96:6b:26:d2:16:5d:b6:b7:a3:38:8d:99:25:
                    03:e6:88:61:e3:5a:03:2f:ef:11:e4:fb:6b:17:63:
                    95:5e:1a:2d:75:32:f2:22:d7:97:6f:67:59:24:c7:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AC:0A:B2:9F:2F:F3:8A:4F:21:01:ED:DA:FC:13:09:1D:8A:50:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bd302ad-eca4-392a-a53a-cbff7c96a108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f0:d7:9b:34:b4:a7:9b:21:d5:b7:2b:db:a0:08:7a:b6:ef:
         44:a7:40:a7:c1:d7:f6:f7:cb:de:ad:fd:fa:ef:3c:a9:3b:1f:
         f9:ad:85:ad:ab:70:4a:bc:46:07:86:59:99:86:de:b7:55:fa:
         a8:69:6c:ad:6f:a5:1c:67:0c:3c:32:8b:ca:36:d2:f7:f4:61:
         6f:cb:6a:72:63:71:48:3a:58:35:c8:f4:59:09:48:0b:8e:30:
         04:33:39:d2:8b:15:8b:0a:97:50:95:47:f8:20:db:7d:96:14:
         9f:f4:f9:36:11:80:2b:2b:8c:ba:62:85:66:26:03:9f:9a:9c:
         67:84:8d:0f:8e:84:9d:5e:ee:8a:74:71:a5:0f:a1:28:f6:f6:
         71:ab:05:ac:91:f4:6e:0e:4d:ef:dd:84:ce:78:da:ae:7f:0c:
         cb:ca:d2:49:8a:8a:7c:c9:af:9a:5a:15:2d:81:6d:94:2a:64:
         68:32:96:12:9b:c4:77:05:8b:52:0e:7c:8e:9c:5f:ca:9e:1f:
         c8:9f:7c:ff:7d:34:fe:9d:c4:b5:5c:76:a9:3d:95:70:ba:65:
         95:be:ba:6c:51:c3:ec:f2:50:47:3f:5a:ff:c7:b5:82:a8:e6:
         f8:ab:58:03:2a:b5:c0:f9:3d:72:7e:8d:21:57:0f:bd:0f:1f:
         4b:ff:2f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:43 2026 by rpki-client