Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
File:                     eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa (raw, json)
Hash identifier:          VeBTEgvQI/54FM66VPk7E2OZp2Pqb3mBLY3+LqYOIsk=
Subject key identifier:   A2:92:A3:8B:71:58:89:A7:73:25:D7:52:22:6A:1C:09:DF:DC:4F:47
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D3F64D57A1B09DB1094BC0080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     834
IP address blocks:        173.214.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:d5:7a:1b:09:db:10:94:bc:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=0c3f963e-c53c-430e-a52f-fabd7a82bfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:e2:31:b5:73:37:7d:9a:a7:95:d6:1c:b9:
                    55:ce:47:f2:f5:58:83:a9:55:1f:58:ce:aa:e5:72:
                    a0:7c:e6:84:ef:fb:1f:57:fd:a0:5c:6b:0e:ac:87:
                    aa:49:d9:e2:29:a3:62:64:bc:e1:9e:18:96:04:66:
                    31:95:10:b8:e9:91:a8:34:ae:0a:47:f4:0e:ea:ed:
                    2d:1a:3a:f6:cd:da:e1:3a:a9:b1:0b:ee:7a:11:74:
                    e4:08:27:7f:f0:ee:43:3a:b5:9f:bc:fe:45:ee:cb:
                    42:1f:80:6c:ad:ee:c0:d3:b7:82:f2:ac:d4:04:86:
                    24:6f:d7:5c:d9:47:fb:0c:e4:08:16:42:94:1e:e1:
                    10:68:e4:61:5c:d8:1d:d8:fa:26:39:06:10:23:91:
                    61:4d:c8:29:cd:32:6b:66:b7:19:2a:dd:49:5e:9b:
                    c5:a9:20:84:ef:d8:6b:72:b6:c0:89:81:ef:09:c9:
                    4d:b7:20:fb:ba:13:6e:d6:2c:59:6f:be:80:3a:09:
                    a0:40:de:19:84:1d:a5:bf:72:e8:64:b5:55:64:e1:
                    ca:a5:24:c0:87:1e:14:82:db:49:08:a1:4f:a6:85:
                    c1:14:f0:28:b0:be:0e:fe:f8:35:38:b9:ff:4f:0e:
                    e5:c8:ec:4a:6f:e0:85:b5:ce:0f:2a:78:56:4c:4a:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:92:A3:8B:71:58:89:A7:73:25:D7:52:22:6A:1C:09:DF:DC:4F:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e7:01:98:b8:22:75:23:3b:80:c1:75:84:57:f9:3f:33:3d:
         e6:57:19:82:d7:0a:7c:47:a2:2a:6b:7e:72:3e:c0:f2:e3:a3:
         43:9f:ff:c4:83:9d:aa:37:0b:b3:22:42:50:a9:30:99:d0:09:
         e3:d5:d2:6c:b0:d5:14:c5:a0:6f:21:49:f0:88:48:4a:64:82:
         7e:e2:6f:ad:9d:a2:92:1b:09:3c:5c:c4:83:33:25:d0:e3:f9:
         36:41:f4:f1:f1:45:41:62:e6:71:d4:89:09:12:ce:fb:c6:2b:
         6c:64:30:6f:e5:3d:25:b3:fc:47:8c:3a:20:94:b6:08:08:b4:
         55:f9:d2:1e:ba:2b:72:21:d0:d6:75:5a:a3:ae:11:bd:65:53:
         5a:d2:61:b5:07:7a:9b:f0:ce:7c:89:db:b3:b9:78:b7:d7:9e:
         dd:3c:a9:19:72:6d:1f:67:e9:6a:9f:d6:1b:cf:c4:20:e4:57:
         89:f5:b4:48:ea:7e:20:57:b8:bb:51:17:39:a4:15:11:4d:6b:
         9f:18:8f:59:9d:01:ac:4e:55:1e:61:c0:80:dc:28:ec:90:f9:
         02:7b:92:01:f4:87:29:87:eb:2c:01:3b:6b:86:e0:cd:3f:57:
         e8:37:7c:7f:50:8b:a2:f6:bb:fe:ac:37:fa:49:fc:82:41:21:
         56:ba:14:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:36 2026 by rpki-client