Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3ea804a4-2341-3988-b3d1-f6f26236d33e.roa
File:                     3ea804a4-2341-3988-b3d1-f6f26236d33e.roa (raw, json)
Hash identifier:          EJBZZRUcT7q9WWX6EONoVQ3oIHjNgiUw1cT8xOcz6r0=
Subject key identifier:   E9:42:FD:DB:72:86:CC:34:7E:5E:0A:17:C7:8F:85:72:0B:5A:EF:99
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E22E55FF37AE2D574F9A53600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3ea804a4-2341-3988-b3d1-f6f26236d33e.roa
Signing time:             Thu 11 Jun 2026 12:48:09 +0000
ROA not before:           Thu 11 Jun 2026 12:48:09 +0000
ROA not after:            Wed 09 Sep 2026 12:48:09 +0000
asID:                     200221
IP address blocks:        209.137.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:e5:5f:f3:7a:e2:d5:74:f9:a5:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 11 12:48:09 2026 GMT
            Not After : Sep  9 12:48:09 2026 GMT
        Subject: CN=146e64b1-bf2c-4cde-8723-48a531f4a258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:82:18:8f:bf:be:e4:73:74:1f:af:db:11:85:
                    7a:aa:dd:a3:eb:0e:c6:5c:b4:16:d6:7c:95:5e:f0:
                    80:21:6b:de:9c:7e:c1:af:48:23:d9:93:75:85:cc:
                    32:fd:13:02:a0:07:c6:1f:16:f4:9c:2e:e4:70:4c:
                    6f:ef:aa:bc:fa:55:74:2e:93:1d:8b:26:c6:0c:2c:
                    70:42:9b:a9:7e:d5:1c:2f:a5:a0:16:cb:51:95:0d:
                    9d:57:9b:1c:31:29:12:46:91:33:a2:b5:07:b6:85:
                    cd:3b:84:27:d0:61:99:b8:5d:ed:35:2a:f0:94:d3:
                    09:d8:f3:2e:73:a1:fd:7d:97:de:8a:5b:86:ee:6b:
                    a2:36:95:61:cd:41:9a:91:4d:d4:da:0e:23:24:3b:
                    48:fc:b3:f9:16:a8:47:66:e6:05:6c:f5:ca:54:ef:
                    91:86:84:bb:a7:3a:25:da:14:63:ca:41:87:34:d9:
                    a1:dd:b1:52:62:bf:b9:1e:99:9c:3b:4a:ae:91:90:
                    a4:a6:90:c2:5b:76:63:fd:d0:8d:ab:85:9e:68:7f:
                    6f:1f:09:d3:66:ea:14:a6:ac:81:df:30:ca:8e:60:
                    30:a2:23:88:df:2c:8c:26:f9:64:48:aa:29:73:bb:
                    34:6e:81:8e:27:e0:c0:63:d3:58:84:57:15:56:e4:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:42:FD:DB:72:86:CC:34:7E:5E:0A:17:C7:8F:85:72:0B:5A:EF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3ea804a4-2341-3988-b3d1-f6f26236d33e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.137.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:c0:08:ae:d3:75:9b:20:b8:ce:15:57:d9:90:65:42:f3:
         84:0e:c7:6b:f4:c5:01:1f:62:19:c8:0b:bb:4a:23:bc:38:6c:
         df:ba:30:69:a7:17:7d:db:a8:17:6e:10:c8:f5:a1:2e:c3:df:
         ed:3f:7d:81:2b:13:0a:d7:ce:96:40:62:71:00:63:22:77:f7:
         0c:b7:c3:7a:0f:d4:a4:c8:2f:d2:ad:84:5b:f8:5d:a3:3e:e6:
         11:9f:47:ac:ea:0a:79:d5:5e:f7:4a:ca:c1:d2:7e:3f:f1:1c:
         06:a8:69:16:88:9d:4d:dc:15:bb:29:0f:26:3d:ea:e1:b4:d1:
         e4:3a:ee:7c:90:cd:79:a9:04:84:54:df:b5:c2:f0:4d:06:a0:
         36:e2:54:b9:f0:d8:79:c0:f4:22:bd:9e:02:74:8b:70:8f:95:
         6d:c6:3e:7f:00:49:8c:72:eb:30:67:09:bb:6d:88:f9:d5:2d:
         74:78:24:ea:0e:05:85:1c:95:c9:81:20:ad:e0:13:ba:7a:ab:
         ee:40:d0:77:fe:4e:ef:65:3c:c1:a7:9c:22:cc:0a:5c:2b:9b:
         d2:4e:ff:44:23:be:ea:84:19:17:6f:ab:09:33:f3:5e:e1:e2:
         df:b0:31:f0:57:59:85:1a:87:76:12:61:2b:b0:bb:e5:2f:24:
         42:43:d3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:21:59 2026 by rpki-client