Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/20ebca33-9f8b-3c63-8162-f8c72d9ab0ca.roa
File:                     20ebca33-9f8b-3c63-8162-f8c72d9ab0ca.roa (raw, json)
Hash identifier:          Pu8Z3R+kChlqY78MfgOjNlJNt88IJjp/Hl66WyGP7IE=
Subject key identifier:   7E:28:37:19:59:9C:28:3F:8A:D0:6F:3A:11:5A:71:AD:A7:35:7F:E9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D253651A1F29B13E7A8AD1BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/20ebca33-9f8b-3c63-8162-f8c72d9ab0ca.roa
Signing time:             Thu 12 Mar 2026 15:55:56 +0000
ROA not before:           Thu 12 Mar 2026 15:55:56 +0000
ROA not after:            Wed 10 Jun 2026 15:55:56 +0000
asID:                     20473
IP address blocks:        209.236.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:36:51:a1:f2:9b:13:e7:a8:ad:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 12 15:55:56 2026 GMT
            Not After : Jun 10 15:55:56 2026 GMT
        Subject: CN=77936874-e9db-4781-822c-e8883e854091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:f0:0c:cf:66:fb:9d:36:68:42:0e:71:d0:
                    d3:06:d1:81:ae:36:8b:d7:b3:20:3f:dc:fd:10:d7:
                    21:ab:a7:66:55:1b:78:66:31:03:46:b2:7c:fc:73:
                    fb:e0:77:de:df:00:3b:89:f5:4a:77:c3:11:77:95:
                    9f:b9:21:13:66:2f:bd:20:4d:ee:9b:2f:85:b2:5e:
                    aa:31:52:71:20:59:28:e4:be:a6:8d:d9:d4:8c:2c:
                    f6:2d:a8:e5:ce:20:17:7b:af:df:99:84:e7:17:c3:
                    92:82:f6:98:63:ef:8b:f8:4c:e6:00:96:33:f0:1f:
                    b1:f6:2a:7a:54:d6:6d:d3:31:74:08:51:d6:85:86:
                    60:09:82:24:e0:76:67:fa:82:48:aa:a6:c2:1d:2b:
                    a1:76:b1:dc:06:11:0e:70:6e:8f:a4:02:87:d6:7a:
                    38:7d:b0:6e:53:0a:22:fb:04:c6:5f:1d:74:7a:bd:
                    c6:e5:e8:2b:35:f2:9a:8f:12:37:3a:70:8d:86:d7:
                    1e:4c:78:24:41:af:7b:76:b5:1f:ee:8e:7c:da:75:
                    77:ff:ab:60:5a:a4:c2:88:52:03:c3:6e:10:62:72:
                    7b:ef:ee:c1:ed:88:7f:20:50:57:31:77:46:f6:ed:
                    af:35:38:33:45:13:02:d6:c1:39:57:c9:a3:f6:44:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:37:19:59:9C:28:3F:8A:D0:6F:3A:11:5A:71:AD:A7:35:7F:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/20ebca33-9f8b-3c63-8162-f8c72d9ab0ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c2:b3:c1:9d:cb:80:e1:97:62:c0:3c:20:38:57:6a:63:27:
         54:7e:f9:06:82:ae:d1:29:0f:4f:b8:e8:92:e2:df:c1:ea:85:
         e9:71:f4:3c:dd:04:70:53:5f:68:d4:af:8d:40:a2:55:a2:69:
         1f:e7:04:37:05:43:a2:b4:2c:a2:6e:a1:57:64:92:50:cf:f5:
         5a:df:bc:8b:cd:cb:28:df:c1:d3:09:1b:70:dc:4d:f0:b1:51:
         69:8e:80:66:32:fc:49:ee:5f:3c:1c:a1:38:70:2a:9a:eb:8b:
         82:25:ee:80:8c:95:06:40:37:f4:30:bb:e1:85:24:a4:f9:c4:
         ef:d9:8d:79:e2:50:d1:b9:e4:fe:dd:e2:33:57:2e:31:1d:83:
         4e:5f:63:d9:7a:98:7a:7e:71:e6:c3:63:c4:7d:d0:96:97:85:
         e1:f7:2e:1e:1b:10:23:bb:32:92:49:28:8e:3e:47:37:16:a4:
         10:71:b6:60:4f:37:ba:37:f8:f4:83:3e:5c:dc:ce:5b:bc:05:
         4b:b0:27:45:10:b2:ca:7f:a5:4a:65:c7:58:74:4e:84:e1:12:
         e2:d1:0e:7e:dc:4e:13:a4:f9:d8:40:56:62:9a:58:c6:66:af:
         a5:62:6d:b6:b9:68:8e:eb:1b:58:ec:e1:21:10:33:7c:a2:9e:
         e5:77:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:18:51 2026 by rpki-client