Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/24f6677e-6190-3235-925c-8765dfed94b2.roa
File:                     24f6677e-6190-3235-925c-8765dfed94b2.roa (raw, json)
Hash identifier:          de4lRxv9HFXDPSZGmpJnp80h5oHOXZQku4iWHU8+Kvo=
Subject key identifier:   99:67:A2:4A:36:82:49:3E:33:0C:7F:A0:6D:EE:32:37:68:99:FF:44
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E3FC4877BCE317D6F3A4D9C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/24f6677e-6190-3235-925c-8765dfed94b2.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     402174
IP address blocks:        209.236.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:87:7b:ce:31:7d:6f:3a:4d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=9f0ff57e-59b8-423d-a270-1182ac446e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:46:60:ac:95:45:13:88:04:ff:e7:66:64:db:
                    b4:ff:e5:32:87:64:71:b0:d3:61:68:4a:93:49:ed:
                    17:d0:a2:ba:f9:9f:2f:69:c8:05:b4:4a:47:64:82:
                    1e:61:73:3d:5c:82:62:2f:34:67:e3:1d:8a:5f:db:
                    13:0d:1d:35:fa:14:8c:13:9e:a7:0b:14:24:2d:9a:
                    e2:3d:0e:74:a2:72:85:79:4d:8e:50:89:74:56:d9:
                    75:b7:b6:db:c1:b5:cb:3f:b2:cc:18:7e:55:4c:d1:
                    9d:0b:cc:af:95:0c:00:c1:80:5a:1c:40:93:d8:d5:
                    30:91:f3:77:3d:90:c4:d3:61:ce:e7:d4:77:71:de:
                    11:aa:72:73:e2:68:a4:8f:57:fc:50:eb:e8:39:13:
                    50:04:0d:9c:a9:60:6a:85:34:c5:d2:eb:79:af:8c:
                    27:55:b3:a2:96:f4:bb:09:2f:fb:1e:7f:c9:58:4b:
                    d0:ae:70:70:8b:a9:2e:ad:e6:9c:a7:fc:81:17:d7:
                    42:cc:cc:a6:d0:37:bb:a0:0b:81:43:24:09:7c:a7:
                    3b:59:1b:37:26:ec:67:f5:f3:83:ed:a3:85:e6:70:
                    42:80:5f:5b:2e:85:e4:38:8e:1d:67:41:89:f3:d7:
                    d7:8f:26:7e:ef:82:ad:b6:03:54:f0:2c:35:24:40:
                    57:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:A2:4A:36:82:49:3E:33:0C:7F:A0:6D:EE:32:37:68:99:FF:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/24f6677e-6190-3235-925c-8765dfed94b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ac:4d:97:00:58:66:13:e4:b2:61:d0:d9:29:87:91:3f:84:
         48:3e:1d:8f:5b:83:36:fe:80:03:69:ce:16:73:78:5e:28:94:
         e9:a1:de:b4:30:5c:82:58:5c:55:e8:29:8b:2f:6a:a2:61:85:
         71:d2:01:15:bb:2e:d7:aa:50:81:c2:46:96:65:87:6c:83:a4:
         37:cc:3e:43:e5:d8:31:ab:dd:41:38:2f:ff:20:06:e4:ac:05:
         61:31:ca:9c:36:50:28:53:ff:1d:0c:42:94:16:0f:c9:a0:42:
         72:cd:78:ee:30:1b:7a:2e:01:32:15:f5:92:d7:0e:5d:81:2b:
         dc:2a:25:ab:1a:c4:78:11:25:d0:ce:ec:b7:43:01:3b:69:3a:
         ca:85:0a:03:3b:f4:b7:a1:16:60:3f:79:a9:3a:db:88:a3:e7:
         ff:10:a7:d1:f5:e8:b4:77:d6:6d:34:10:98:88:51:1a:07:d1:
         10:a6:f6:07:aa:ca:db:14:bd:e4:6d:40:29:9b:2b:dc:cf:c5:
         24:c4:1f:2e:dc:91:bd:34:d7:f6:f7:dc:07:ab:8e:a5:a4:57:
         c5:ed:c0:ec:78:8a:31:f1:be:e3:73:7e:3e:9e:c5:32:ba:fe:
         fe:2b:5b:7c:bf:fa:30:aa:99:ad:60:49:3c:66:10:02:23:5d:
         6d:63:71:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 13:01:17 2026 by rpki-client