Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3887d589-fcd5-321c-9ee7-c4cfff415515.roa
File:                     3887d589-fcd5-321c-9ee7-c4cfff415515.roa (raw, json)
Hash identifier:          7gmBgpjl5aYgRz8nEmwB1aON4++umusyRVo/Q3PZxEo=
Subject key identifier:   16:1E:E3:E2:20:0D:FC:8B:09:DE:A2:DD:08:47:2E:3E:04:FF:DC:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F43DD3746273041E3DD213400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3887d589-fcd5-321c-9ee7-c4cfff415515.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        185.201.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:37:46:27:30:41:e3:dd:21:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=5f542ca9-a539-4204-a56f-4caed0929bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b7:0e:15:f1:d5:1b:c4:0a:f7:9a:0e:0e:91:
                    61:cd:99:74:4f:ad:ee:99:ef:e2:82:b6:64:12:39:
                    8b:63:f7:67:ec:25:fa:a1:2f:d3:97:4f:a6:76:56:
                    93:1e:67:c7:fe:7b:68:09:0a:1d:f2:e8:fc:ff:5e:
                    fb:77:7b:30:79:e1:ab:90:a3:d5:4b:37:9a:21:d6:
                    c6:a4:c8:1a:f4:49:fc:49:0f:1b:a3:c7:21:a7:10:
                    3a:6f:47:83:c1:a7:03:30:81:b4:3c:89:77:90:e0:
                    a0:3e:2d:e8:bc:fb:a6:6a:75:ff:b2:5b:dc:f5:fa:
                    1d:44:3b:57:4d:cc:02:ef:3c:e3:13:ea:35:3f:3c:
                    eb:b0:2e:32:99:e4:be:ce:c8:95:52:ba:07:29:48:
                    0f:a4:61:4d:cd:1b:cb:18:eb:90:cc:5e:82:75:67:
                    39:36:67:32:af:e6:3c:5b:d4:78:e6:09:42:54:de:
                    bc:d3:2a:27:fd:92:f2:77:c7:7f:69:54:45:39:25:
                    0c:cd:0e:36:39:eb:1f:9e:ec:15:c9:42:a0:af:17:
                    b0:9f:29:8c:f2:77:33:53:12:23:f9:cb:ed:24:19:
                    8d:d3:bf:bc:3d:bb:73:9f:ed:19:46:73:d2:92:a3:
                    5c:4e:05:57:78:0b:16:07:64:61:4d:cb:7a:9c:8e:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1E:E3:E2:20:0D:FC:8B:09:DE:A2:DD:08:47:2E:3E:04:FF:DC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3887d589-fcd5-321c-9ee7-c4cfff415515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c4:7d:f6:c7:d9:a4:d9:0f:93:c2:b5:2e:ec:87:b6:98:81:
         e7:f6:d4:00:db:3d:77:b2:df:4e:22:fb:84:45:ed:64:f9:ee:
         73:6c:cb:51:0c:9e:00:21:86:f3:af:af:0f:89:3a:d4:9f:56:
         ef:54:af:bb:2d:a3:59:57:09:ce:ff:43:7e:36:05:82:0f:f7:
         72:0e:d3:4b:30:71:37:22:1d:c6:57:ea:0a:f0:92:00:e0:57:
         cc:9f:9b:fe:8f:52:d0:b4:35:13:2d:a7:af:a2:57:fd:af:23:
         c1:46:96:8d:13:c6:49:82:2e:44:5d:92:24:d7:bd:ff:bf:ec:
         b9:d1:0f:d7:4d:46:73:f5:0c:9f:e4:30:5f:a6:93:76:7b:43:
         bf:4e:5a:6e:80:41:1b:f0:e0:01:98:95:bc:08:2c:a0:cf:81:
         fc:f1:79:df:66:7c:53:2a:b5:cf:6b:aa:62:74:60:24:00:db:
         36:3d:2e:5a:cf:e3:83:9a:2a:5d:bf:98:2a:ab:14:61:4c:fb:
         09:6c:81:12:b4:a2:4d:22:e6:c3:b9:5c:11:bb:6f:48:95:dd:
         ee:d7:3d:ad:d6:87:64:f4:10:48:68:a9:79:67:17:0f:98:13:
         93:cf:d1:ac:4e:16:d5:4c:2f:53:8e:e2:72:7b:72:02:a8:78:
         a1:c6:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:46:00 2026 by rpki-client