Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5e904ad9-9a17-340c-9a2c-078e3d5ae721.roa
File:                     5e904ad9-9a17-340c-9a2c-078e3d5ae721.roa (raw, json)
Hash identifier:          Rvs6R1pBq7V2DODAzSoUx9aFtGMAgKpPzgiwjhXSSQw=
Subject key identifier:   CB:B3:37:5D:E6:94:FD:F1:9B:FC:FA:A7:51:AB:FA:A9:5E:65:EC:26
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F49895AB1D6D7AB2D37C37A20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5e904ad9-9a17-340c-9a2c-078e3d5ae721.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        174.140.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:5a:b1:d6:d7:ab:2d:37:c3:7a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bcab0061-4b5e-410d-912c-392b33f2713d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:a0:06:f1:c2:3f:93:1c:b1:a6:ba:4c:f3:
                    1e:10:1e:e6:92:54:35:66:f5:7c:a2:44:92:6f:31:
                    af:db:33:43:67:c7:8c:a5:60:de:13:d0:f0:2a:e4:
                    f9:ae:69:ea:a7:11:11:0e:66:4c:b0:0b:65:6b:5d:
                    5d:e5:12:73:97:a6:e2:71:95:7f:cf:7b:b8:e7:07:
                    d9:6b:a1:34:b0:e4:e6:68:18:4b:2a:2f:dc:b1:53:
                    e4:e3:08:9d:d4:8e:40:97:01:cb:b1:47:3c:72:e4:
                    10:a4:04:96:26:b1:f5:76:e3:80:58:f6:df:2f:c7:
                    85:50:ab:87:68:b9:1b:ad:e9:c7:8d:a5:00:a3:fa:
                    7b:83:8d:79:f6:5e:9a:b2:9e:ee:dd:87:e4:c0:5e:
                    6b:82:4b:45:35:91:58:4f:91:20:17:b3:dd:ca:05:
                    4b:48:7e:ea:82:22:4f:0e:db:de:25:d3:b9:ec:48:
                    4d:2a:67:02:56:a1:7e:c8:57:af:c1:c4:b9:69:be:
                    5d:8a:b5:94:58:1c:9f:1d:7b:3d:f6:ab:a9:bc:28:
                    44:7d:61:d1:47:3b:4e:3e:56:6c:4e:19:98:e1:ac:
                    95:7b:41:92:76:6c:8e:c4:5c:50:2e:ec:89:46:78:
                    08:87:48:0b:63:78:dd:d6:cc:94:f2:86:e6:a2:58:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B3:37:5D:E6:94:FD:F1:9B:FC:FA:A7:51:AB:FA:A9:5E:65:EC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5e904ad9-9a17-340c-9a2c-078e3d5ae721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:66:0f:72:6c:03:50:35:e8:fb:cf:2c:61:85:f4:d5:e5:f3:
         11:64:2b:2a:02:ce:df:9c:76:89:90:47:23:b6:c0:e5:cf:f6:
         2a:f4:21:86:0e:1c:b4:7a:18:3d:fe:07:4f:3e:0e:48:6f:15:
         1f:a5:4a:88:77:e8:6d:cf:3a:2c:3d:da:1a:e3:75:79:3f:7f:
         2c:a0:2b:20:88:9a:84:67:f3:09:be:db:25:fd:c5:f4:e4:83:
         55:a2:c5:69:b1:a0:c6:a7:97:d0:2f:8a:66:0b:72:88:01:8a:
         04:91:65:14:dc:57:9a:ec:d5:5c:76:b0:34:3d:de:88:42:f7:
         c6:e5:8a:39:e0:69:80:07:be:22:10:ce:5b:7e:e7:a2:86:af:
         c4:b4:7c:e9:49:e3:dc:04:53:e9:10:da:e4:f0:b3:ab:08:2b:
         1d:12:2f:0b:2c:e7:73:b1:ae:90:6c:75:0c:ed:1f:05:d2:08:
         c0:db:5b:63:7a:a4:f1:cf:f2:d9:bb:23:75:1c:3f:6c:35:be:
         07:9d:85:f3:d2:59:65:18:83:8f:c5:7c:95:80:1a:8f:1a:dd:
         95:d8:43:77:80:a2:e3:75:94:ff:17:ed:fd:20:7b:51:97:2f:
         ca:16:67:a8:a1:ce:ba:a5:bc:ed:ea:51:05:2a:c7:0e:03:fe:
         74:fb:3d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:49:10 2026 by rpki-client