Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3f91ce69-81ca-3f3b-b061-583e9d11b8dc.roa
File:                     3f91ce69-81ca-3f3b-b061-583e9d11b8dc.roa (raw, json)
Hash identifier:          AQt7WBeYgVENP6t+Gh7r5tCFeXh+rBgYu0s+di7FfMY=
Subject key identifier:   D7:30:3B:85:B3:5A:E5:B8:FA:AF:62:8D:1A:E1:4D:41:AE:BF:6D:6D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E4A564500217AC3DD77130A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3f91ce69-81ca-3f3b-b061-583e9d11b8dc.roa
Signing time:             Thu 25 Jun 2026 15:52:09 +0000
ROA not before:           Thu 25 Jun 2026 15:52:09 +0000
ROA not after:            Wed 23 Sep 2026 15:52:09 +0000
asID:                     29802
IP address blocks:        209.92.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:56:45:00:21:7a:c3:dd:77:13:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 25 15:52:09 2026 GMT
            Not After : Sep 23 15:52:09 2026 GMT
        Subject: CN=a07e9b4b-1fd4-4faa-9002-64fb4e171910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a7:89:59:d2:bf:5d:86:37:11:d8:82:1f:3f:
                    e3:38:5a:70:b7:63:50:c9:2d:d0:20:d3:b1:56:25:
                    50:ee:eb:41:58:07:6c:fb:c8:12:6b:d1:b3:83:54:
                    5b:2b:9e:c3:79:ff:e5:f6:37:f0:1c:09:74:35:d8:
                    3e:12:1c:91:17:f8:04:9d:da:d5:f6:5f:16:42:27:
                    4b:98:5e:c6:cf:d0:83:b6:04:11:3e:bb:a9:2b:a1:
                    81:69:4e:8a:83:a6:13:41:59:7a:ee:38:11:22:3d:
                    37:b0:f6:3d:fb:58:e6:d6:83:8e:55:6e:e0:72:3a:
                    67:43:1b:86:49:55:df:78:fc:54:a1:a7:10:11:d1:
                    2f:43:dd:05:3f:d4:a3:94:f0:68:e7:8e:f5:c6:d5:
                    4c:dd:1d:16:60:fc:65:5e:0f:58:23:4b:e3:a4:24:
                    00:f8:55:2a:bf:de:3e:8f:0e:6c:d3:e0:f8:42:25:
                    52:e9:f4:df:25:0f:00:3f:d4:bd:e7:b4:b4:fa:ba:
                    d0:9c:fe:22:27:7d:39:de:a3:b2:76:27:ef:20:69:
                    c0:44:1d:4f:80:08:f7:b1:1c:4c:d2:dc:6a:6f:00:
                    9e:ed:06:3c:23:3a:39:79:4a:41:8d:20:9f:d1:ce:
                    92:d6:5b:f8:9b:de:70:2b:52:2d:2e:a4:fd:35:fc:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:30:3B:85:B3:5A:E5:B8:FA:AF:62:8D:1A:E1:4D:41:AE:BF:6D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3f91ce69-81ca-3f3b-b061-583e9d11b8dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d2:92:b7:50:5f:ba:80:8e:60:cf:11:99:c0:79:ac:35:fe:
         e8:15:35:a5:9f:fe:53:b9:0b:d7:ab:fc:7e:5c:d4:04:f6:01:
         2e:74:23:06:ed:91:f5:42:51:8a:03:74:77:b4:71:61:09:d9:
         64:59:0a:41:93:81:c8:2b:dd:ac:82:a5:7f:b5:f9:dc:04:af:
         e2:7e:7c:41:0c:37:e6:d9:9b:76:47:85:09:19:48:a5:7b:17:
         c1:9a:6d:69:5c:94:bf:34:5f:2d:e2:32:7b:22:93:dc:b2:33:
         69:b6:15:ab:42:e9:29:c3:06:90:b1:f3:32:df:f0:77:4b:99:
         79:e8:20:07:97:bd:19:15:bd:53:fa:72:ae:52:7e:d6:9c:49:
         40:0d:5b:d9:9b:ab:b5:e5:36:c3:f4:32:86:76:ee:d9:18:99:
         4d:27:25:7b:8f:5c:fa:87:21:bf:56:85:00:87:80:66:f3:66:
         fc:87:38:fe:0c:3d:52:7f:ac:56:dc:32:54:c3:d6:40:3a:b3:
         0d:24:5b:a8:2b:09:a3:f6:75:81:b8:97:b4:44:0f:03:b0:18:
         71:9b:57:a6:b6:ac:59:d4:fb:e6:37:e2:80:0d:9d:dc:3d:99:
         1d:5b:bb:1e:0e:cd:6b:7b:40:ce:22:c9:b6:c3:f3:cb:5c:49:
         6e:6f:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 03:31:25 2026 by rpki-client