Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fe2a429b-1656-30f8-b394-96d2fee3cfb8.roa
File:                     fe2a429b-1656-30f8-b394-96d2fee3cfb8.roa (raw, json)
Hash identifier:          ER6lgtYyylNuwZK9LLz2ZyzIYgB4VKwPg6rmhweceVY=
Subject key identifier:   B5:AE:D8:C0:CC:DD:5E:D5:97:DE:E4:F8:B3:12:82:9D:0E:62:EE:2F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F49744609C482E78EFD9685A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fe2a429b-1656-30f8-b394-96d2fee3cfb8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        173.211.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 03 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:46:09:c4:82:e7:8e:fd:96:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=406cca75-41eb-43c2-9bfa-623ec6b89050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c0:75:ee:4d:0d:fa:78:4f:84:fb:59:e7:95:
                    27:9f:86:c5:7d:b0:be:b0:bc:e7:ef:ec:ec:94:fd:
                    6a:6c:69:cd:4c:cf:5e:b6:81:32:e4:1f:85:3f:64:
                    a0:8c:e7:50:19:00:fb:06:f1:ea:e0:2d:cb:71:fd:
                    42:95:96:b3:5f:64:8b:02:2d:13:1c:b8:27:30:bc:
                    11:7e:a9:12:6d:d1:d6:43:1f:1d:5a:5f:b2:0c:86:
                    a0:06:8c:af:d8:96:7b:11:ef:7b:54:f0:cc:da:5e:
                    d1:63:a7:12:6e:2d:0d:64:31:67:ed:69:1d:4f:c3:
                    a7:0d:a0:15:74:28:f5:0c:c1:0b:26:01:a7:8b:f9:
                    a5:49:ae:94:12:5a:94:37:5d:15:dd:15:66:ed:00:
                    a6:92:63:89:fe:a0:91:d4:c1:76:f7:40:b5:f4:e8:
                    64:07:ae:71:e2:4f:58:3a:1e:b1:32:72:80:f9:c1:
                    53:b6:96:0a:57:13:f0:b4:5e:5d:ff:0f:c9:40:cc:
                    b5:8e:99:df:86:32:91:81:2d:74:38:ac:7c:a1:ab:
                    d0:3d:f0:dd:92:68:25:35:59:40:eb:37:6f:47:c9:
                    39:33:28:38:dd:a8:2b:37:f3:8c:fb:98:d8:49:f3:
                    68:44:73:24:01:5a:83:92:fb:ea:aa:17:c8:16:8b:
                    5a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:D8:C0:CC:DD:5E:D5:97:DE:E4:F8:B3:12:82:9D:0E:62:EE:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fe2a429b-1656-30f8-b394-96d2fee3cfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:71:dc:33:31:ec:5c:8f:09:16:37:97:37:24:b5:9c:b9:a5:
         67:81:14:e7:90:a6:08:78:15:82:e9:cb:59:62:94:17:3d:2d:
         c3:24:bf:ba:03:b6:3b:16:93:1c:cd:88:4a:94:49:d1:2e:ee:
         71:59:81:de:4a:6d:d1:b7:f1:6e:cd:a2:1d:48:0f:51:ee:b4:
         12:a7:65:15:b4:71:2d:cb:47:33:e5:0e:ca:a4:54:dd:11:8d:
         87:f4:8b:24:42:17:de:29:1a:54:d4:02:63:af:07:fe:50:5c:
         02:b3:1a:70:16:1b:ab:97:52:c6:8e:96:d1:f1:8d:bb:f4:d4:
         1b:42:02:aa:40:13:47:19:4f:84:b6:20:ed:1b:bb:eb:ca:44:
         bd:34:95:3f:b3:7d:b2:8f:7a:f6:91:59:54:ae:6d:ee:9a:c7:
         c5:bd:f7:7e:f5:e2:6d:c9:55:5f:87:88:ab:7c:5f:c0:d2:57:
         bb:33:7a:ac:48:f4:62:04:9b:25:7d:51:5d:69:09:42:0b:57:
         9e:0c:14:63:da:f1:09:02:77:bd:9c:e0:2b:78:5b:53:c0:a0:
         5c:11:51:d4:5a:74:a2:88:c5:a3:c3:53:d7:27:4d:cb:08:11:
         e9:5a:64:5d:70:76:9b:fc:3b:db:59:c4:42:8a:27:fe:a8:42:
         3e:32:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 00:37:49 2026 by rpki-client