Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70ffdb46-f300-315c-975f-5785419fb74d.roa
File:                     70ffdb46-f300-315c-975f-5785419fb74d.roa (raw, json)
Hash identifier:          47hW/1MBvswfL/aaUDd5/SQyL3wQCv2s5K3m2Zc2qg4=
Subject key identifier:   A7:B6:D6:D0:0A:8E:A9:43:B5:D4:85:98:31:B3:37:48:B2:E3:CF:88
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E86F4E2E33418D0CEC824ECF0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70ffdb46-f300-315c-975f-5785419fb74d.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     174
IP address blocks:        216.75.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e2:e3:34:18:d0:ce:c8:24:ec:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c09213e0-e46c-490f-948a-b06b7c0a5ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d4:1e:90:9a:a7:2b:62:07:fc:24:3f:18:76:
                    b4:83:ee:7c:7b:4e:23:1a:3d:21:c0:d3:66:81:62:
                    c0:5e:65:f3:67:97:29:f5:a8:20:bc:df:5d:be:1f:
                    fe:20:82:3c:79:b8:6f:36:52:21:6c:94:cb:5c:67:
                    70:5f:46:50:d4:4d:97:4e:84:7d:af:54:91:26:c5:
                    9a:a0:8e:07:41:ae:88:e2:36:3d:bc:f0:83:16:cc:
                    b3:8a:74:ac:fd:5c:4a:0f:86:a3:dc:f4:cc:bd:0c:
                    c3:80:6c:68:ed:1f:ef:ba:fe:82:2e:8a:e3:c2:e2:
                    d9:09:08:0b:49:c6:11:5e:ab:8c:be:3c:94:6c:2a:
                    35:c2:86:40:32:db:5c:b9:cd:77:98:61:42:01:fc:
                    32:05:47:d8:ea:f3:3b:2b:a1:ee:ff:97:c3:10:86:
                    80:00:e7:e8:3e:52:9a:68:b8:ba:90:4a:8f:d7:2c:
                    62:47:d6:0c:60:d9:e7:a6:37:09:0c:fa:5c:99:b9:
                    75:b2:7f:67:fc:fc:79:8c:9e:b0:80:b5:cd:88:57:
                    89:91:35:f4:a3:53:bf:9c:2f:ed:2d:48:a6:70:64:
                    b0:e4:7c:84:a6:40:5f:b9:5c:c6:5a:40:1d:b8:b7:
                    72:29:0a:ad:f4:b1:e1:70:f5:34:63:42:44:00:fa:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:B6:D6:D0:0A:8E:A9:43:B5:D4:85:98:31:B3:37:48:B2:E3:CF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/70ffdb46-f300-315c-975f-5785419fb74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:1b:ee:7a:1b:e8:c6:95:b7:f1:40:a6:a5:9a:77:7b:21:
         1a:79:6e:10:52:b6:95:0b:97:f8:85:8d:73:37:47:d7:e5:c9:
         84:c3:dc:ee:b0:11:5b:67:a9:2e:7e:c2:c3:0d:ce:8b:0e:3e:
         db:95:ef:64:c5:f2:b3:4f:cc:08:60:1a:2f:13:d4:f5:f9:78:
         3e:6c:46:36:55:61:3e:8a:ca:b8:a3:fe:be:3e:5f:d5:06:44:
         81:8d:8c:dd:99:76:a1:f7:d7:54:b6:3b:de:79:78:b2:a9:fa:
         e6:c4:aa:ae:47:6f:40:74:46:32:dc:b3:d1:1e:e6:c8:b1:2e:
         2f:0b:cf:ff:f3:f0:f2:96:1b:1b:ec:6c:f9:de:ea:78:47:01:
         d9:46:49:f7:03:43:9d:27:c5:44:55:59:37:1d:71:a9:15:cd:
         aa:16:28:c1:50:c0:56:b4:e2:78:c0:b9:84:af:63:6a:e9:4f:
         88:8f:62:e9:4a:14:38:18:1c:3d:e1:84:5f:26:78:51:f5:b2:
         cb:aa:e4:65:7c:cf:74:a7:06:b1:a8:d7:e0:07:ef:45:85:0a:
         87:0e:41:4f:c4:41:28:a5:f5:29:a1:ed:00:31:88:b8:ce:80:
         78:47:2b:e2:2d:6b:fd:df:92:8b:3b:99:4f:cd:de:49:ba:d3:
         e3:97:7a:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OLjNBjQzsgk7PAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
YzA5MjEzZTAtZTQ2Yy00OTBmLTk0OGEtYjA2YjdjMGE1YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNQekJqnK2IH/CQ/GHa0g+58e04jGj0hwNNm
gWLAXmXzZ5cp9aggvN9dvh/+III8ebhvNlIhbJTLXGdwX0ZQ1E2XToR9r1SRJsWa
oI4HQa6I4jY9vPCDFsyzinSs/VxKD4aj3PTMvQzDgGxo7R/vuv6CLorjwuLZCQgL
ScYRXquMvjyUbCo1woZAMttcuc13mGFCAfwyBUfY6vM7K6Hu/5fDEIaAAOfoPlKa
aLi6kEqP1yxiR9YMYNnnpjcJDPpcmbl1sn9n/Px5jJ6wgLXNiFeJkTX0o1O/nC/t
LUimcGSw5HyEpkBfuVzGWkAduLdyKQqt9LHhcPU0Y0JEAPqJHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKe21tAKjqlDtdSFmDGzN0iy48+IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNzBmZmRiNDYtZjMwMC0z
MTVjLTk3NWYtNTc4NTQxOWZiNzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EteMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAK0G+56G+jGlbfxQKalmnd7IRp5bhBStpULl/iFjXM3R9flyYTD3O6w
EVtnqS5+wsMNzosOPtuV72TF8rNPzAhgGi8T1PX5eD5sRjZVYT6Kyrij/r4+X9UG
RIGNjN2ZdqH311S2O955eLKp+ubEqq5Hb0B0RjLcs9Ee5sixLi8Lz//z8PKWGxvs
bPne6nhHAdlGSfcDQ50nxURVWTcdcakVzaoWKMFQwFa04njAuYSvY2rpT4iPYulK
FDgYHD3hhF8meFH1ssuq5GV8z3SnBrGo1+AH70WFCocOQU/EQSil9Smh7QAxiLjO
gHhHK+Ita/3fkos7mU/N3km60+OXeks=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:55:28 2026 by rpki-client