Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5397b65f-81b8-33e4-ad76-28ff48019d8b.roa
File:                     5397b65f-81b8-33e4-ad76-28ff48019d8b.roa (raw, json)
Hash identifier:          Xo5Pjm+3+jmGxnmU3y1jFpJg34LsQ+sZIuiga9VfYZo=
Subject key identifier:   86:F6:10:99:B6:40:40:5D:69:49:AC:04:FA:35:24:CA:1A:76:B2:07
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E9A7FCF30DCA2DEB027433F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5397b65f-81b8-33e4-ad76-28ff48019d8b.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        216.107.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cf:30:dc:a2:de:b0:27:43:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=ba2f18e8-f20e-4612-ab2e-e26a31c837f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:b6:9c:a5:06:ed:08:c0:52:2b:eb:69:ce:
                    6d:9c:20:8e:b7:73:4a:cf:00:25:6d:c6:d8:75:52:
                    61:48:97:ec:da:2a:84:91:f3:d7:83:04:73:df:10:
                    56:62:94:2b:5a:36:28:2c:8d:b6:d5:22:19:14:20:
                    1b:1b:d2:b0:7d:58:98:dd:00:dd:a9:a9:b7:9a:a1:
                    46:31:25:94:3b:7a:73:8d:a0:3e:3f:d2:bc:70:a3:
                    cb:e3:fe:63:76:60:90:9c:a5:89:d5:80:e8:86:3d:
                    cd:89:41:28:95:e1:ab:b0:22:58:ce:1b:7f:37:27:
                    fe:d3:01:cf:31:72:db:2b:8c:b8:a0:33:70:da:28:
                    26:02:dc:95:4e:b5:18:8f:82:00:28:54:b9:0b:92:
                    d5:52:dd:d2:23:2d:1d:5e:65:ce:27:45:e6:4c:b8:
                    fb:e7:f8:42:9d:e8:bf:9f:53:00:52:ae:db:50:45:
                    20:55:45:d3:7f:8c:94:c4:2d:90:3a:94:1f:d0:0f:
                    33:f8:77:07:3b:b7:1a:fb:01:c3:d7:3a:35:bf:bc:
                    1f:21:81:56:0e:84:36:74:1f:ba:d9:7e:78:74:a3:
                    e5:75:9b:29:02:00:bf:fc:9b:cf:5a:de:62:be:94:
                    82:ec:d0:10:cc:67:7a:66:e2:69:90:c0:aa:be:62:
                    6d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F6:10:99:B6:40:40:5D:69:49:AC:04:FA:35:24:CA:1A:76:B2:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5397b65f-81b8-33e4-ad76-28ff48019d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:01:23:3f:19:cf:2e:45:19:0d:83:87:ca:c7:52:3f:8a:71:
         b0:e8:ed:38:85:76:24:bc:dd:fa:7e:d6:92:57:99:81:27:d4:
         0b:3b:f6:1e:31:9f:df:71:ba:f2:b4:d8:97:98:e7:ac:c6:14:
         2c:67:bf:bf:83:e8:4f:e8:58:6e:40:2f:99:88:4b:83:3a:29:
         3f:f1:9c:63:b3:93:39:ae:55:49:0f:b7:a1:2c:2b:ca:de:0b:
         51:fe:ac:d3:4a:ed:7c:cb:dd:f1:12:77:51:b5:d4:50:1a:e4:
         4c:33:be:ca:b0:77:1a:b4:9a:b0:55:e9:9f:f8:90:ec:f0:e9:
         76:cd:b0:29:bb:47:88:13:64:26:2d:e5:a4:06:68:f8:69:65:
         a7:80:7d:e5:f2:9c:55:c9:23:ad:63:da:d6:b7:d3:d1:ad:a4:
         87:7b:cd:9a:3d:73:c3:84:ac:8b:e3:a0:d6:64:7d:4b:a7:98:
         d8:e1:53:fc:ea:7d:e4:a1:62:78:09:2c:ed:7c:57:ec:43:8b:
         4b:ed:b4:33:4e:45:a2:88:0b:8a:1c:39:01:9f:2a:d0:de:09:
         2a:c1:4c:6a:db:b5:51:6f:38:0d:a1:db:bd:af:80:6d:62:3e:
         d3:15:fa:bd:c8:72:0a:b6:77:8b:af:44:3c:69:bf:39:fe:72:
         c4:66:06:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:52:55 2026 by rpki-client