Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa
File:                     65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa (raw, json)
Hash identifier:          mOVzXNAXDGLhjqen2ErOPdwm1SAq2Rxg62yiGWOBE2g=
Subject key identifier:   82:9B:EC:FF:94:87:E0:1A:A6:AA:19:FC:F6:8B:DF:76:0E:B1:D2:ED
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E97B4F9D8FF58D03D18EB9B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     214054
IP address blocks:        45.40.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b4:f9:d8:ff:58:d0:3d:18:eb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=230b9c00-de5f-49e8-b7ef-4523ab3c7312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:53:37:cb:00:07:c9:9a:99:dc:77:82:e4:e8:
                    1e:2b:ea:c1:ac:02:fa:19:56:88:9b:a5:b3:42:ef:
                    36:37:76:8f:60:8d:30:18:d8:7d:a1:44:43:7d:e0:
                    14:ed:cb:07:42:89:05:93:fa:a8:a4:dd:4b:2b:e1:
                    dd:a1:f2:dd:93:c4:f7:14:17:c9:c7:29:c7:c2:b9:
                    74:94:b0:64:62:44:bd:b3:88:5a:d2:20:58:64:2c:
                    6f:3a:19:d0:96:f1:61:d2:b3:11:c9:5f:5f:ea:39:
                    8d:1a:2e:78:bf:c6:e1:46:ff:3d:91:72:ca:06:e6:
                    a2:25:4d:a5:57:d7:ec:2d:76:ce:19:28:40:93:19:
                    d1:30:a7:7e:4f:88:eb:8d:c4:d4:1f:27:86:18:32:
                    59:d9:22:d0:c7:49:b1:71:7a:15:eb:e4:e7:e7:50:
                    e7:be:29:77:cb:6b:e6:8b:02:22:d0:90:49:dd:b1:
                    a1:f2:43:15:03:ac:df:e2:bc:85:ca:b1:47:f2:6c:
                    ce:09:7b:f8:06:58:5b:df:dd:56:13:5c:75:2d:98:
                    48:2e:22:db:28:c0:48:75:88:4a:1e:f0:21:08:50:
                    0d:0f:22:9b:fe:e4:e6:3a:95:8a:06:e5:f9:85:f0:
                    7f:51:46:03:02:5a:95:ff:31:94:2a:ec:2a:d7:40:
                    cc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:EC:FF:94:87:E0:1A:A6:AA:19:FC:F6:8B:DF:76:0E:B1:D2:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/65b15e82-f2b7-3973-b841-4e50b4a9a83e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:4c:25:86:c9:8c:8b:58:3d:0b:cf:ac:c4:06:59:c0:a5:
         9a:ed:d8:89:d1:c1:85:1f:70:b0:19:bf:ca:09:0d:5f:d2:6b:
         4a:f7:7a:a0:42:13:8c:59:25:78:27:ca:c5:10:83:d7:40:df:
         e1:df:11:b7:ba:a6:46:3b:47:ed:20:17:78:4e:c4:87:64:84:
         12:c0:dd:26:be:e1:c9:08:ca:0a:78:d1:d1:68:b8:9a:cd:30:
         d7:7c:0b:7f:03:01:58:13:1d:40:94:a8:c5:65:ac:21:5a:26:
         fa:89:cb:dd:71:4e:4e:87:64:53:35:4f:99:8d:4e:27:cb:32:
         a9:5a:ba:a1:4b:b5:d9:2d:bc:03:cd:6b:ac:f2:38:f7:6b:3a:
         98:90:07:11:63:0e:93:6b:7d:d1:98:48:39:9a:1d:56:96:4d:
         ba:b7:4c:af:81:e5:1a:be:36:e4:54:ad:ce:fd:02:ea:2c:6b:
         f6:cc:4a:de:05:78:f8:47:5e:a1:14:c7:74:e0:6b:c0:2e:e5:
         d0:00:da:7b:76:ef:79:12:a8:46:4a:c8:ab:69:05:12:dc:93:
         a5:88:1f:eb:be:7e:c7:88:40:ad:95:1e:e5:69:b7:1e:7a:e4:
         64:67:a3:a8:fe:4d:32:4e:95:f8:cd:81:8e:02:87:39:3f:3d:
         30:13:13:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtPnY/1jQPRjrm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
MjMwYjljMDAtZGU1Zi00OWU4LWI3ZWYtNDUyM2FiM2M3MzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1M3ywAHyZqZ3HeC5OgeK+rBrAL6GVaIm6Wz
Qu82N3aPYI0wGNh9oURDfeAU7csHQokFk/qopN1LK+HdofLdk8T3FBfJxynHwrl0
lLBkYkS9s4ha0iBYZCxvOhnQlvFh0rMRyV9f6jmNGi54v8bhRv89kXLKBuaiJU2l
V9fsLXbOGShAkxnRMKd+T4jrjcTUHyeGGDJZ2SLQx0mxcXoV6+Tn51Dnvil3y2vm
iwIi0JBJ3bGh8kMVA6zf4ryFyrFH8mzOCXv4Blhb391WE1x1LZhILiLbKMBIdYhK
HvAhCFANDyKb/uTmOpWKBuX5hfB/UUYDAlqV/zGUKuwq10DMYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIKb7P+Uh+AapqoZ/PaL33YOsdLtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjViMTVlODItZjJiNy0z
OTczLWI4NDEtNGU1MGI0YTlhODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALShhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH37TCWGyYyLWD0Lz6zEBlnApZrt2InRwYUfcLAZv8oJDV/Sa0r3eqBC
E4xZJXgnysUQg9dA3+HfEbe6pkY7R+0gF3hOxIdkhBLA3Sa+4ckIygp40dFouJrN
MNd8C38DAVgTHUCUqMVlrCFaJvqJy91xTk6HZFM1T5mNTifLMqlauqFLtdktvAPN
a6zyOPdrOpiQBxFjDpNrfdGYSDmaHVaWTbq3TK+B5Rq+NuRUrc79Auosa/bMSt4F
ePhHXqEUx3Tga8Au5dAA2nt273kSqEZKyKtpBRLck6WIH+u+fseIQK2VHuVptx56
5GRno6j+TTJOlfjNgY4Chzk/PTATE2k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:35 2026 by rpki-client