Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/57a5217e-fb7c-320f-93c4-62a418bde3ce.roa
File:                     57a5217e-fb7c-320f-93c4-62a418bde3ce.roa (raw, json)
Hash identifier:          i4eWyGlnTLq/WJ06M16AMVnccgLDkTN/Al17Q6WTV/c=
Subject key identifier:   F0:4B:9E:84:9D:1C:FE:4C:7F:35:2E:32:5D:D8:99:5F:5C:B7:68:44
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584ECBD1BE92840970BE54027C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/57a5217e-fb7c-320f-93c4-62a418bde3ce.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     55201
IP address blocks:        209.92.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:be:92:84:09:70:be:54:02:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=5eab1a11-d48e-4967-8664-973e83a4abe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:62:23:64:d1:bd:87:6b:2d:57:a2:80:dc:
                    19:8e:70:ca:4a:09:ec:f9:e2:d3:1c:45:1a:3a:87:
                    66:02:00:6b:da:71:81:eb:86:fa:f3:9a:c2:d2:f5:
                    2e:4f:d3:2f:3c:d4:45:08:c0:aa:82:3a:b4:d5:c3:
                    e8:e7:c3:40:e1:2a:7a:b0:38:9c:54:cb:a0:c8:74:
                    15:ca:8e:1c:8f:04:a4:c9:e1:ab:e4:95:3d:75:6f:
                    88:dd:3d:46:60:5f:44:5a:0f:1e:02:e7:bd:f4:25:
                    86:59:38:48:e0:45:f8:5d:c3:55:44:8e:0c:79:e2:
                    dd:6b:f9:32:a8:cb:42:ec:83:74:37:e8:8e:09:b1:
                    31:13:66:2a:18:fc:85:22:34:9b:ba:be:ee:35:2f:
                    7a:35:a7:a3:5b:22:51:dc:ec:fd:e2:e6:75:8e:d9:
                    18:5a:e9:43:b6:20:4a:0f:5a:ee:c6:05:3f:b2:3c:
                    ec:1b:f2:13:b2:4b:ae:57:1b:86:b3:e9:e9:06:55:
                    be:6b:5b:10:f1:ce:ad:bb:3b:02:cb:2d:39:39:02:
                    8b:9a:02:a2:8c:96:78:73:0b:49:f1:12:ae:47:2b:
                    2f:41:44:cd:50:a2:48:19:dd:e3:8e:0f:be:37:57:
                    f1:d8:e3:03:0a:3d:08:16:23:66:82:f7:fd:93:c7:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:9E:84:9D:1C:FE:4C:7F:35:2E:32:5D:D8:99:5F:5C:B7:68:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/57a5217e-fb7c-320f-93c4-62a418bde3ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d3:bb:c4:24:a7:06:94:ce:af:76:cb:0b:0a:5e:c2:5e:1d:
         7a:57:eb:68:0d:39:0c:13:0e:0e:63:bd:ff:07:8f:d0:7e:65:
         d1:25:8b:14:d2:03:62:fa:5f:e7:66:b0:1a:42:dc:a3:00:bc:
         cc:7c:9a:85:ce:30:41:8c:d9:5c:29:8f:82:da:65:4d:bd:0f:
         07:cf:97:ce:90:cf:7d:c4:d0:bc:c0:ea:49:04:a7:86:a9:2b:
         91:60:84:24:6e:d6:14:05:a9:18:53:38:8c:06:80:ce:14:37:
         00:f5:21:88:7f:27:99:fa:a0:78:4f:db:ba:15:bf:12:ed:ee:
         ff:af:2d:bb:4d:b9:2f:ef:e3:ce:0f:2a:f5:12:ec:d1:1a:8a:
         a2:83:d7:41:32:55:bf:ff:77:72:04:11:dc:66:84:2e:0b:70:
         e5:f7:8d:46:db:8f:7f:2c:b9:73:f5:5e:60:48:e4:77:87:dc:
         e2:0a:19:bf:2a:93:94:f8:e3:70:df:a6:f6:01:e3:3b:40:0f:
         3f:b7:d0:11:83:ff:c2:cf:b7:01:28:30:c9:00:9a:0e:7b:ff:
         c7:53:57:80:6a:1e:64:9f:58:63:50:e7:3c:f3:d0:be:22:df:
         c3:f7:02:a7:80:f4:98:e2:85:d8:8d:3a:3d:5a:04:b8:f8:96:
         31:6c:55:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 11:55:40 2026 by rpki-client