Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d8bb2063-60f9-3b7b-ac27-d64148138e4e.roa
File:                     d8bb2063-60f9-3b7b-ac27-d64148138e4e.roa (raw, json)
Hash identifier:          khR1uLpbKHjEFQITX+SD1qtgE/LzxNXAVYHSPt8ZvdI=
Subject key identifier:   EC:E2:C1:DF:41:8E:1E:64:2A:10:9A:ED:49:0C:69:1B:8A:7C:52:03
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4989D8742C6B941592E1EC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d8bb2063-60f9-3b7b-ac27-d64148138e4e.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        216.183.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d8:74:2c:6b:94:15:92:e1:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e58c720e-d1b5-49ea-b674-614de882a8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9d:e4:3f:a0:aa:b4:f5:65:8a:a9:b6:bb:f7:
                    b2:d0:0c:26:a2:58:eb:fa:a8:b6:fa:c4:de:cb:24:
                    08:c9:43:26:95:65:a2:f7:d6:0b:f5:a9:88:ce:96:
                    3f:80:a6:32:d9:7c:72:41:82:96:e1:48:26:e0:70:
                    c0:cf:57:38:f9:95:22:c2:ff:56:da:fa:ab:5e:26:
                    a3:88:e9:93:e6:0a:14:4d:aa:6e:40:ed:b8:58:c5:
                    14:eb:b2:2a:ea:b5:d3:6b:1a:9e:ea:d5:71:ca:51:
                    08:62:81:67:0f:6a:86:d3:9f:0c:f7:59:ab:39:67:
                    e8:6f:60:07:14:4b:6b:83:75:81:9f:57:bb:0e:ab:
                    49:a4:63:eb:a7:d7:e7:cc:44:12:de:fa:66:b4:f7:
                    01:4a:7e:3e:86:cf:87:6c:75:91:ba:3e:34:a5:28:
                    f3:73:01:2e:80:6b:dc:ae:ea:79:1a:37:95:ad:6e:
                    ce:19:b8:b4:b5:db:7b:1e:c0:2f:2e:ea:b2:1e:37:
                    03:6a:13:f7:ff:e4:b1:db:1a:53:92:35:75:94:69:
                    13:f6:c2:eb:9a:22:58:14:53:24:36:7d:56:1a:cc:
                    e3:a8:5e:f4:f1:0a:b4:a0:28:cd:fe:93:96:02:fc:
                    fa:98:2b:8d:69:7a:05:fb:35:20:60:6d:43:c9:99:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:C1:DF:41:8E:1E:64:2A:10:9A:ED:49:0C:69:1B:8A:7C:52:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d8bb2063-60f9-3b7b-ac27-d64148138e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:0a:4e:8e:77:e6:28:3f:b6:e4:15:29:c5:0f:a1:c9:aa:
         9f:d8:e8:72:7c:66:2b:5a:66:fa:8b:3b:ea:9e:0d:4b:0e:e3:
         b7:17:0a:8e:cb:b5:1b:52:a2:84:82:50:03:da:a4:a6:65:92:
         71:95:84:0a:80:9c:79:f6:f0:06:fa:43:e7:ec:27:a5:5e:8d:
         aa:ca:8d:d8:01:99:15:4a:e6:2d:26:a3:82:82:ac:fe:24:7e:
         47:73:97:98:e6:09:80:0d:ee:7e:f8:3a:9f:84:31:e0:ce:2a:
         26:9a:b9:63:70:db:44:d2:55:8d:8d:2e:f8:c4:37:6b:20:4c:
         af:06:27:3e:58:9c:64:03:b4:1a:28:ae:69:ab:2a:bd:1f:12:
         94:87:af:12:56:bb:80:a1:e6:a0:b2:4d:6d:4b:89:f5:fc:78:
         80:29:63:91:a1:61:64:ea:5a:4d:29:47:a4:ce:35:63:09:96:
         d8:96:4b:3a:b3:0d:aa:a1:4c:54:7a:be:6d:05:b3:6d:8a:d9:
         9d:e2:3d:96:ae:21:24:52:08:b0:b8:af:d6:c4:21:87:4f:59:
         3c:f1:d3:28:1e:d7:b5:e4:da:7d:ca:f2:ef:66:e5:c1:32:32:
         b0:b0:57:1c:dc:46:5e:dd:c5:85:a7:46:7c:74:ad:a5:e5:19:
         e2:4a:b0:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jidh0LGuUFZLh7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTU4YzcyMGUtZDFiNS00OWVhLWI2NzQtNjE0ZGU4ODJhOGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp3kP6CqtPVliqm2u/ey0Awmoljr+qi2+sTe
yyQIyUMmlWWi99YL9amIzpY/gKYy2XxyQYKW4Ugm4HDAz1c4+ZUiwv9W2vqrXiaj
iOmT5goUTapuQO24WMUU67Iq6rXTaxqe6tVxylEIYoFnD2qG058M91mrOWfob2AH
FEtrg3WBn1e7DqtJpGPrp9fnzEQS3vpmtPcBSn4+hs+HbHWRuj40pSjzcwEugGvc
rup5GjeVrW7OGbi0tdt7HsAvLuqyHjcDahP3/+Sx2xpTkjV1lGkT9sLrmiJYFFMk
Nn1WGszjqF708Qq0oCjN/pOWAvz6mCuNaXoF+zUgYG1DyZmh8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOziwd9Bjh5kKhCa7UkMaRuKfFIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDhiYjIwNjMtNjBmOS0z
YjdiLWFjMjctZDY0MTQ4MTM4ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LfjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbYCk6Od+YoP7bkFSnFD6HJqp/Y6HJ8ZitaZvqLO+qeDUsO47cXCo7L
tRtSooSCUAPapKZlknGVhAqAnHn28Ab6Q+fsJ6VejarKjdgBmRVK5i0mo4KCrP4k
fkdzl5jmCYAN7n74Op+EMeDOKiaauWNw20TSVY2NLvjEN2sgTK8GJz5YnGQDtBoo
rmmrKr0fEpSHrxJWu4Ch5qCyTW1LifX8eIApY5GhYWTqWk0pR6TONWMJltiWSzqz
DaqhTFR6vm0Fs22K2Z3iPZauISRSCLC4r9bEIYdPWTzx0yge17Xk2n3K8u9m5cEy
MrCwVxzcRl7dxYWnRnx0raXlGeJKsL0=
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:44:04 2026 by rpki-client