Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/16233116-1ab2-363a-9c30-1735aa9a8816.roa
File:                     16233116-1ab2-363a-9c30-1735aa9a8816.roa (raw, json)
Hash identifier:          8TgbHGrISlfETu+li7ehf0SlPz8LWRyMG9+48dMzsMw=
Subject key identifier:   FC:7A:46:96:68:1A:1B:3D:1B:D7:CB:AA:10:31:2E:5F:D2:3D:BC:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EC9072463E8208F0F9D3B2A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/16233116-1ab2-363a-9c30-1735aa9a8816.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     53991
IP address blocks:        209.236.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:24:63:e8:20:8f:0f:9d:3b:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=5a7f55aa-9b20-4378-837d-8dd7e1787904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:31:fe:d0:83:b0:2c:15:ef:47:13:d4:ef:
                    7d:c4:e7:59:5f:96:a1:3c:1b:c2:2f:8f:9a:f1:81:
                    c2:60:dc:5b:54:04:87:bf:da:37:75:f2:aa:6d:06:
                    19:09:eb:3b:e9:38:68:aa:1d:65:fc:26:13:d6:70:
                    04:a2:59:f1:a6:16:1f:49:dc:7b:5f:5a:9f:65:f2:
                    aa:01:61:2f:75:36:a4:25:1b:0c:47:29:3c:14:0b:
                    29:7e:52:4d:6f:bc:33:de:0f:ea:79:de:6d:5d:e0:
                    04:c0:a4:52:b2:c3:0c:97:ef:54:5d:79:ea:95:81:
                    57:dc:c8:fe:34:fb:9d:01:ce:aa:86:73:bc:2f:60:
                    36:ff:88:d2:f2:83:62:96:34:2d:43:e8:25:ff:08:
                    6c:cd:f8:fa:63:57:00:cb:69:4a:9b:11:17:a2:70:
                    8e:2d:1f:65:1b:d2:a8:31:ac:ec:a2:1e:29:1b:19:
                    10:c8:79:20:bb:3a:63:85:22:c0:35:86:ba:4f:57:
                    a2:9b:92:ed:04:ce:b4:58:26:ec:a9:7a:a8:84:1a:
                    d4:0b:c5:87:e3:91:3e:b9:b9:9a:1d:2b:e9:ce:59:
                    67:22:bd:bd:a3:38:b6:ac:f2:de:11:9b:c8:fe:0b:
                    1e:cd:b6:2b:a2:66:4b:e3:f8:be:da:e4:44:7d:02:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:46:96:68:1A:1B:3D:1B:D7:CB:AA:10:31:2E:5F:D2:3D:BC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/16233116-1ab2-363a-9c30-1735aa9a8816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:1b:2f:75:d9:3a:16:f4:aa:8f:73:e5:a2:54:7c:77:66:a4:
         8d:72:ac:85:38:10:04:a8:f2:71:19:59:39:28:ea:aa:b5:8f:
         94:b2:40:eb:ca:eb:57:21:65:48:17:7e:fb:3b:32:74:ca:3a:
         b6:02:1a:b3:01:9d:f7:97:f6:fa:99:a0:55:4d:fe:88:0c:ee:
         3b:d3:0b:6c:b0:12:5a:90:0f:4f:b5:b6:01:e5:6d:67:58:a8:
         d1:d4:aa:9f:29:67:7d:d1:a2:b2:8e:f8:ba:14:b9:31:a6:8f:
         af:93:0a:07:e5:d2:3b:55:01:5d:dc:96:5d:b7:08:ca:0a:85:
         ee:26:31:27:70:3d:02:ae:cc:50:50:e1:7a:ea:78:85:08:d2:
         95:99:89:8e:c0:df:80:d8:aa:fe:fa:85:73:62:84:9d:9e:58:
         56:b4:71:8d:4c:2b:84:6f:f6:90:8c:f5:0f:22:48:d0:07:41:
         9e:68:37:0b:6f:8e:8d:a2:f9:b2:2c:28:b8:91:17:a7:7b:0e:
         3b:65:0b:4d:e3:61:13:8d:d4:e7:98:82:cc:2b:58:02:91:db:
         05:9b:cc:ca:29:c3:2d:45:51:60:38:15:6b:bb:6e:a6:04:0f:
         ba:77:20:a0:7c:26:45:65:c0:a5:2a:57:0a:78:4b:31:d7:2e:
         5a:54:a1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:41:23 2026 by rpki-client