Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4d0cce3a-dc9a-327c-8cbd-a0b7545cd37c.roa
File:                     4d0cce3a-dc9a-327c-8cbd-a0b7545cd37c.roa (raw, json)
Hash identifier:          OzUAv6TtUvwybEArrNyM4ObulQML+8OCG0HE1w9mR4g=
Subject key identifier:   DD:28:41:3C:C4:8E:EB:D9:D9:19:5C:7B:FA:13:31:D4:D0:B8:7D:6D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E15647BFF7CF033D3E8962CE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4d0cce3a-dc9a-327c-8cbd-a0b7545cd37c.roa
Signing time:             Sat 06 Jun 2026 16:42:57 +0000
ROA not before:           Sat 06 Jun 2026 16:42:57 +0000
ROA not after:            Fri 04 Sep 2026 16:42:57 +0000
asID:                     834
IP address blocks:        209.236.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:64:7b:ff:7c:f0:33:d3:e8:96:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  6 16:42:57 2026 GMT
            Not After : Sep  4 16:42:57 2026 GMT
        Subject: CN=9289d2f1-2cf6-4b35-8308-03d476b42968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:db:49:c2:d5:68:d7:84:f2:80:37:f3:fc:
                    89:22:0a:fb:3f:3c:cc:22:2e:1f:ba:4c:9f:1c:63:
                    59:2e:8f:a9:7e:a9:0e:5d:26:b4:96:d5:f7:0d:7f:
                    70:04:ef:cb:3c:6d:3f:36:f2:1b:c3:41:15:9c:dc:
                    e0:c3:af:dc:b1:5a:1a:a0:93:52:d9:1b:76:e8:5e:
                    9d:ca:6b:06:43:bc:2b:c2:9d:00:7d:47:ae:bb:78:
                    bf:cf:59:a3:fb:a4:9c:cb:03:7c:4a:06:cc:99:49:
                    64:50:de:f9:6d:eb:89:b6:78:1d:6f:bd:ed:75:90:
                    32:f5:12:ba:de:d2:9f:36:81:68:e7:30:82:be:33:
                    d1:e5:7e:9c:3e:ca:e4:7c:32:cf:7b:d1:64:11:92:
                    50:9a:08:dd:3b:fa:64:86:ee:6a:b5:90:be:0d:31:
                    93:0a:3a:2e:94:77:3e:e4:96:72:1f:ef:9d:1d:14:
                    a3:35:35:f2:a6:92:63:18:15:19:38:db:10:c0:0d:
                    90:33:02:d6:ea:5b:87:22:40:cf:c5:78:a7:0c:71:
                    7f:83:26:92:35:8e:db:32:de:17:c5:14:6f:a1:b5:
                    e2:fc:16:53:6e:21:39:3a:42:a0:30:e3:2f:32:27:
                    67:55:19:0b:ff:65:b6:78:bf:da:d1:25:a9:98:b9:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:28:41:3C:C4:8E:EB:D9:D9:19:5C:7B:FA:13:31:D4:D0:B8:7D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4d0cce3a-dc9a-327c-8cbd-a0b7545cd37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:93:0d:40:45:ee:55:69:80:25:1b:f6:38:2e:6e:95:e5:e1:
         be:7c:fb:45:2d:1e:83:1d:fc:08:75:f4:a7:94:db:a8:8b:87:
         55:80:e7:ce:91:5a:15:2b:03:c0:9d:04:5f:53:fd:09:3b:b1:
         21:a7:f3:94:f9:4a:69:7d:74:01:43:69:88:74:2f:95:15:50:
         4c:c4:ef:b1:d2:c4:45:4c:0a:99:bb:52:f2:ec:b9:3d:8d:63:
         61:e3:72:30:39:a5:c8:d9:20:b7:e1:4c:6a:d5:77:a7:cf:ec:
         2d:d2:99:7c:50:da:d8:41:e0:3a:46:bd:8e:38:a1:2f:7f:8b:
         c8:bf:8f:14:12:5c:f8:bb:69:06:28:92:23:fa:55:fa:14:3d:
         40:24:bc:6b:82:63:dd:a5:3d:e5:1a:03:0d:3c:3c:a8:b3:1b:
         4e:03:70:81:cb:3c:43:33:e0:73:8f:73:d3:a5:ca:3e:20:5b:
         25:d7:91:1d:15:7f:71:14:5f:5a:c1:35:e0:c8:2b:0c:c6:bc:
         9c:37:71:25:72:bf:83:a8:6a:ec:2e:8a:d8:72:ff:57:87:e5:
         23:93:51:6b:f0:90:1e:3e:26:47:f4:ea:e1:bb:c7:e7:69:03:
         2e:79:7b:ee:0d:bb:3c:75:60:62:72:2b:63:4c:04:c0:6b:b4:
         16:be:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 13:51:36 2026 by rpki-client