Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4e7c694b-863b-33a6-a2dd-9abb17e3a67c.roa
File:                     4e7c694b-863b-33a6-a2dd-9abb17e3a67c.roa (raw, json)
Hash identifier:          5WJGt9bHwDY9HjNaCP4aMReKxGlLRk9QGbce2PGFHUw=
Subject key identifier:   72:15:94:D0:09:71:04:05:EF:46:2A:8C:2C:EC:97:B3:30:9E:B5:7E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D14A2D5CC936BBFC3697D2C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4e7c694b-863b-33a6-a2dd-9abb17e3a67c.roa
Signing time:             Fri 06 Mar 2026 17:25:50 +0000
ROA not before:           Fri 06 Mar 2026 17:25:50 +0000
ROA not after:            Thu 04 Jun 2026 16:25:50 +0000
asID:                     834
IP address blocks:        209.236.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:a2:d5:cc:93:6b:bf:c3:69:7d:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  6 17:25:50 2026 GMT
            Not After : Jun  4 16:25:50 2026 GMT
        Subject: CN=e22f6743-35ec-415b-b82f-718cbc882c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:6b:a8:9a:6d:90:09:58:3e:2d:05:c0:cc:
                    65:18:10:da:89:99:1c:b4:cb:e8:a7:c6:48:f6:03:
                    9a:af:1f:30:81:4f:c7:b7:c7:82:cd:15:8f:04:c7:
                    e3:0d:f2:da:e9:eb:1a:79:54:0b:bc:9b:1a:d4:25:
                    c1:49:c9:b0:75:a3:61:c7:f1:34:a4:3f:11:2c:75:
                    e6:1e:2b:af:ee:1d:73:29:f9:2a:70:44:99:ab:87:
                    55:55:f8:ab:23:ef:f1:54:07:82:be:50:1f:7e:1a:
                    0c:40:29:43:bd:c7:4c:a6:3e:5c:1b:97:d5:6c:5e:
                    96:6e:4a:02:90:71:46:a0:cf:37:6f:9c:26:7f:00:
                    93:ee:02:7f:7c:70:4c:d3:2e:a2:7e:8b:96:12:ff:
                    5a:ce:b8:33:16:4f:d0:95:2f:95:3f:90:82:31:30:
                    10:38:f9:89:1f:68:06:80:23:f3:a4:c2:0e:fe:f5:
                    49:42:8b:83:85:4d:2a:ac:36:62:8d:15:0a:eb:e4:
                    60:87:2c:26:f1:fb:e7:cb:fc:c2:d6:cf:36:85:12:
                    08:85:63:89:d9:eb:83:24:0a:c4:2c:ad:bd:6f:9f:
                    ff:22:d8:76:be:b5:85:68:83:c7:34:9c:51:e1:ac:
                    94:d9:3e:c1:00:c4:48:1f:34:52:cf:9a:92:a3:a2:
                    03:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:94:D0:09:71:04:05:EF:46:2A:8C:2C:EC:97:B3:30:9E:B5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4e7c694b-863b-33a6-a2dd-9abb17e3a67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0f:73:aa:1a:06:bd:79:13:89:7c:04:35:ef:91:d9:b8:e4:
         5e:f6:29:70:3d:65:bf:f5:56:16:ac:1f:50:be:82:fe:55:42:
         e4:07:b2:e3:42:e7:37:10:5a:c2:81:72:1f:9e:4c:66:e0:fe:
         cd:15:ca:8e:73:af:2c:44:da:83:1a:86:ac:0f:7e:be:75:8b:
         ca:aa:ba:de:82:7b:3c:d2:4d:25:6b:08:00:a3:45:92:75:63:
         16:e2:d8:5a:34:69:22:ad:14:31:8e:e2:76:79:22:bb:eb:9d:
         bd:4f:ca:71:7f:3d:bd:63:bd:cc:e0:2a:c5:82:1a:53:52:4e:
         e4:bd:2f:19:fe:eb:22:a7:44:76:bd:ac:8e:b8:04:8c:09:ef:
         3d:17:78:97:d0:46:20:db:26:e3:5f:40:0e:38:23:43:d2:22:
         ea:8f:fa:ae:8a:75:a0:32:3d:ed:da:97:8f:b3:1a:4b:37:50:
         0e:f6:3b:b0:18:d5:d0:6f:58:46:bc:d6:1a:06:ef:c8:a6:93:
         19:10:ca:ae:ed:84:75:f6:3a:bd:27:9c:26:df:e5:98:e1:94:
         20:f8:df:47:0c:e2:cf:79:d2:2f:cb:88:38:94:6f:ef:13:dc:
         5c:47:c7:f0:28:38:30:df:b5:20:80:cb:4d:77:67:c1:d4:17:
         66:23:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:44:27 2026 by rpki-client