Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/423b325f-cb9a-34d5-a5ca-22229c97a054.roa
File:                     423b325f-cb9a-34d5-a5ca-22229c97a054.roa (raw, json)
Hash identifier:          rV47foI4LHHR7G8+S7CSMeQFeCx9Rt/Oy6uLjA7k+X4=
Subject key identifier:   55:7F:A6:A3:FF:24:5A:C6:DD:0E:F1:E3:E0:E9:77:91:03:7D:7D:27
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E59595F4FF8F0757304B1C050
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/423b325f-cb9a-34d5-a5ca-22229c97a054.roa
Signing time:             Wed 01 Jul 2026 00:55:32 +0000
ROA not before:           Wed 01 Jul 2026 00:55:32 +0000
ROA not after:            Tue 29 Sep 2026 00:55:32 +0000
asID:                     834
IP address blocks:        209.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:59:59:5f:4f:f8:f0:75:73:04:b1:c0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 00:55:32 2026 GMT
            Not After : Sep 29 00:55:32 2026 GMT
        Subject: CN=9943e587-aa4f-4ce9-86a6-f3654eaab725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:a1:5f:90:c6:2b:8b:1f:54:5a:6d:fe:c4:
                    12:82:8f:f8:24:54:d1:dc:e5:00:ff:c9:ce:3f:6d:
                    e8:a0:8f:27:b2:ec:51:9d:2f:16:68:4e:6c:0d:f4:
                    b2:2a:1a:be:8b:7c:e6:28:ab:a2:20:11:da:40:5d:
                    be:46:e0:be:0c:f6:73:3d:d2:fa:c4:63:ea:e9:32:
                    b5:db:a7:82:ba:8a:53:31:d3:f3:10:15:a9:48:a6:
                    91:29:9e:2a:d5:e2:89:48:9c:05:ae:09:bc:85:00:
                    65:01:f0:9d:ee:be:d3:0b:3a:d9:6c:c3:d2:63:3d:
                    be:9c:09:c5:c5:70:71:87:4e:1e:6c:fc:6f:23:f3:
                    00:02:d4:8e:98:34:05:14:2f:b3:0d:25:ae:b8:a2:
                    cc:5b:06:3e:25:de:87:c5:df:38:20:ae:ad:91:4c:
                    6b:d6:5f:29:4c:fc:87:ea:e4:f2:a3:24:53:3c:4e:
                    de:c4:8a:5f:12:c6:5f:f7:43:17:ac:16:d7:6b:d3:
                    98:1c:9f:94:fe:17:06:62:3e:b3:ac:7d:a7:b1:ae:
                    b0:c1:2a:ca:71:8b:bc:46:b1:f6:85:2f:49:f0:d4:
                    d7:ce:4e:0f:36:24:ff:c4:e2:1b:85:b2:1f:a8:5e:
                    21:88:44:bd:39:c4:d6:d0:7e:de:71:6e:92:47:aa:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7F:A6:A3:FF:24:5A:C6:DD:0E:F1:E3:E0:E9:77:91:03:7D:7D:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/423b325f-cb9a-34d5-a5ca-22229c97a054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:33:3a:f5:7d:fb:bf:16:2d:d1:73:da:79:91:d4:b7:00:
         7a:2f:d4:c5:fe:82:73:8c:37:6b:01:cc:53:51:ad:e4:ef:59:
         ae:75:80:f8:bc:59:57:1e:2b:2f:19:14:16:aa:6e:11:c0:a8:
         17:32:36:02:de:61:b2:70:e1:c8:b3:91:8a:dd:2a:77:44:74:
         b8:f5:c4:78:c1:95:84:de:9d:41:01:c5:21:43:e3:2a:e9:22:
         66:72:58:7f:ea:1f:8e:ad:4c:bd:e6:9b:fa:f9:e6:4e:ca:64:
         69:67:1f:a0:3f:31:dc:07:be:9b:ca:82:a1:59:87:3d:2f:7f:
         4d:15:60:ce:e3:32:f2:45:3a:3a:ca:3c:61:69:a1:3f:37:17:
         0c:92:16:e5:88:1b:1e:32:11:b3:42:63:56:3b:26:16:6f:0c:
         14:b1:9d:4b:85:4a:b6:5e:3e:15:19:cb:62:5b:b8:55:51:2a:
         1c:c1:af:88:c5:39:84:48:9c:70:3f:89:5b:7b:53:fe:b1:91:
         2f:f7:08:79:d9:f3:0e:db:6a:f8:03:bb:f6:b6:da:bb:d0:56:
         5b:51:77:bc:ad:96:25:b4:15:69:37:69:72:77:05:43:d0:e0:
         e1:1b:51:bb:84:0f:6a:4a:e4:a7:fe:0b:35:a0:4f:51:d3:6c:
         6c:78:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 11:56:14 2026 by rpki-client