Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f18e3722-57b7-32ac-a1ca-c16237fb46c0.roa
File:                     f18e3722-57b7-32ac-a1ca-c16237fb46c0.roa (raw, json)
Hash identifier:          EciFBnswnKziZaNMPIN8evWcrxXYWWlKacTnED+f+c8=
Subject key identifier:   28:A1:77:8D:47:A4:AC:2C:2E:01:79:F2:6E:79:AA:A9:9A:F1:6E:7D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4972D399DD668308198B3280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f18e3722-57b7-32ac-a1ca-c16237fb46c0.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40564
IP address blocks:        216.183.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d3:99:dd:66:83:08:19:8b:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4ee7e69e-5259-4cfe-9818-54eb1e68b3e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e4:3a:85:c5:2c:ee:8d:17:4c:49:fb:a4:94:
                    93:cd:ad:03:be:af:80:c9:08:ee:c6:e8:9c:84:79:
                    2b:fe:f2:33:dd:da:38:a8:8b:cd:20:32:1e:54:bc:
                    85:25:c9:04:35:e1:e1:45:df:78:a4:cf:39:9a:bb:
                    bf:1b:53:7f:c5:cd:31:9d:cc:bf:94:09:c8:90:87:
                    d9:e0:d4:48:f9:81:1f:38:87:f4:0b:ca:b9:2e:5c:
                    ae:0c:17:b7:5d:cb:9a:7f:7b:5e:60:d2:0f:1b:65:
                    34:92:db:a8:72:6a:b4:52:32:d5:85:43:60:c5:31:
                    a6:59:8f:1a:f3:a1:24:43:7c:53:95:bf:04:34:51:
                    d4:1a:e5:48:ed:d2:2e:be:46:e8:8a:0c:f0:f9:bb:
                    6f:d9:8d:ce:8e:43:07:48:09:f1:34:5f:f3:4e:a2:
                    35:2a:6a:04:c4:21:99:66:d8:99:21:d1:19:5b:a9:
                    2a:b2:f2:36:36:49:c0:c7:ca:6f:46:a6:76:19:be:
                    dd:c7:ec:16:9f:cb:3c:43:11:11:df:d5:6e:e0:48:
                    27:b7:b8:78:26:bf:77:be:00:49:1d:07:9d:97:fe:
                    c3:f3:b5:ec:9c:1c:cd:9d:39:38:92:e0:d9:12:21:
                    cc:c0:5b:f8:a6:77:e1:1b:e9:52:1f:ff:b1:a5:76:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A1:77:8D:47:A4:AC:2C:2E:01:79:F2:6E:79:AA:A9:9A:F1:6E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f18e3722-57b7-32ac-a1ca-c16237fb46c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:35:e9:70:0c:32:98:f5:e0:9f:93:83:5d:e7:4b:33:bf:e9:
         f2:25:95:8b:30:f8:56:11:9a:99:94:41:bd:6e:61:e9:59:c4:
         cd:aa:04:13:90:3d:b0:0b:fb:2e:37:46:0f:c2:73:1b:5d:8b:
         b0:b3:84:1c:aa:ca:a8:27:73:50:bd:0f:48:76:87:0e:2e:0c:
         de:7d:36:24:eb:4a:50:19:11:0e:43:f0:87:a1:23:3c:54:22:
         66:c7:22:22:b2:37:c1:b0:b9:4d:af:0b:55:59:b0:b6:e1:f9:
         da:13:d2:d0:8f:74:84:b9:72:16:79:a4:0f:16:37:00:a9:dc:
         3b:ba:6f:9f:b0:8e:ae:5b:7e:4c:20:34:7d:b3:57:b1:fe:7f:
         a7:66:d3:b8:02:29:eb:25:c6:07:f0:0e:3b:6d:ef:ff:79:11:
         46:b9:af:87:be:52:12:19:d6:77:4c:09:c5:49:ea:51:f6:7b:
         53:9a:6d:d7:0d:f1:d6:47:88:49:48:c7:14:87:14:10:4c:0a:
         c5:d6:49:64:d1:c9:ab:88:6c:b6:b7:60:20:ca:20:be:a8:cc:
         62:b4:61:9a:c0:da:c9:d4:79:90:c2:3a:9f:6e:e4:3a:a7:d0:
         05:7e:ce:f3:f7:37:a6:70:6a:b1:20:7f:f7:48:cf:c4:02:cf:
         b8:74:89:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:08:57 2026 by rpki-client