Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38046f20-e7d9-3f90-9df6-390d9dc6a500.roa
File:                     38046f20-e7d9-3f90-9df6-390d9dc6a500.roa (raw, json)
Hash identifier:          jNScEOKUCoS8KEGkyArotf1sPgLG0wtQYkq7ulnthbc=
Subject key identifier:   13:16:D0:FA:A8:A8:A1:17:61:C9:FD:3D:5F:57:88:9A:44:89:42:65
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584ED60208F1CF5D592B5F110880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38046f20-e7d9-3f90-9df6-390d9dc6a500.roa
Signing time:             Fri 14 Aug 2026 16:35:36 +0000
ROA not before:           Fri 14 Aug 2026 16:35:36 +0000
ROA not after:            Thu 12 Nov 2026 17:35:36 +0000
asID:                     142240
IP address blocks:        209.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:02:08:f1:cf:5d:59:2b:5f:11:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 14 16:35:36 2026 GMT
            Not After : Nov 12 17:35:36 2026 GMT
        Subject: CN=0715562d-f444-42d8-8c21-c246138d114c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:62:69:52:49:30:46:96:e3:42:dd:60:fa:
                    f1:2f:30:2e:ec:fa:34:67:c5:21:68:52:2a:2a:cb:
                    a8:78:23:70:f6:b3:91:16:58:e1:03:6e:c2:ff:55:
                    c0:49:df:88:f7:80:e1:54:65:d3:a2:e3:82:c4:37:
                    cf:50:0a:61:e5:64:a2:a1:b2:27:5b:28:19:8d:ce:
                    c6:57:5c:20:b2:66:9b:ed:35:01:e4:4b:58:bd:94:
                    08:02:18:d7:7c:9e:22:66:de:df:c2:3a:ff:bf:91:
                    80:ca:80:21:7a:8b:a5:e6:ff:4a:7c:f2:52:40:59:
                    57:c5:80:59:6f:30:24:d9:58:d4:91:d1:c7:76:0b:
                    fe:60:11:38:42:6f:97:9f:fd:56:70:16:60:e3:a6:
                    30:f7:e3:12:11:2c:3d:fb:2d:aa:74:e0:a0:94:98:
                    f6:d8:8d:5b:df:34:b5:d3:01:fe:97:b7:31:7a:0b:
                    cc:4c:21:00:82:ff:5b:52:1c:6b:ac:a3:74:49:84:
                    ae:9d:88:d2:63:d4:3f:5b:0f:4c:4b:f3:ac:b5:c6:
                    aa:89:a2:f8:43:4b:81:9c:e5:7e:39:d3:59:57:74:
                    5e:16:46:a3:be:ee:3d:24:46:9b:4d:4b:2b:a9:8d:
                    10:a3:13:13:87:a9:86:a0:87:3e:c8:50:dd:fb:c5:
                    b9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:16:D0:FA:A8:A8:A1:17:61:C9:FD:3D:5F:57:88:9A:44:89:42:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/38046f20-e7d9-3f90-9df6-390d9dc6a500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:59:43:b0:ae:6f:c0:96:4a:1b:60:17:31:fb:e5:e9:aa:d3:
         ef:0c:84:59:70:3d:b7:13:c5:26:0e:23:f9:51:0e:1d:5b:0f:
         98:4a:f3:85:97:57:a0:76:49:10:dd:da:91:d6:17:e2:07:49:
         1b:32:19:2b:a3:af:d3:c2:72:76:07:8c:67:1c:df:e9:f3:03:
         3f:e8:1f:8d:a0:4e:5e:ff:ec:e2:3c:8f:f6:ec:bb:27:67:61:
         84:e2:ec:1a:23:d5:02:c6:55:a8:be:a7:d7:99:5c:99:d6:2b:
         fd:a6:6a:2a:d0:c3:07:4d:56:e0:5d:d2:c3:c2:9d:4c:09:ef:
         32:6b:86:59:a2:20:c3:38:5a:a4:17:74:b1:49:85:8f:21:71:
         7f:17:18:87:e8:bc:1f:52:7c:39:23:c3:5b:8d:b7:61:c4:4a:
         c5:cf:d4:24:19:fb:e9:4e:25:a5:cb:61:eb:fa:36:a5:8e:d3:
         e3:ff:45:61:c6:d5:34:2b:b6:eb:4a:d8:55:92:29:1a:e1:b6:
         81:bb:26:b3:76:ac:02:34:dc:c4:45:50:7b:cd:74:91:e4:b6:
         39:4d:86:3a:73:8a:b0:db:c2:a2:3d:7e:0d:c5:4a:8d:15:49:
         78:00:a3:ce:1e:fd:6d:ef:bc:b2:78:6c:64:9b:a1:7d:de:f7:
         e3:4e:6c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:41:41 2026 by rpki-client