Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7df93aa0-86c0-36c3-b07e-521f63256200.roa
File:                     7df93aa0-86c0-36c3-b07e-521f63256200.roa (raw, json)
Hash identifier:          G3E/dHVX1hZ0srZ8vCtBWZJQbJAVppQ2izXMLQiWrHc=
Subject key identifier:   7C:E4:C8:28:D2:1A:97:5E:03:B2:BF:9E:F9:A6:EC:AA:4A:93:68:27
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E5B45966D9D5C440CE8100A00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7df93aa0-86c0-36c3-b07e-521f63256200.roa
Signing time:             Wed 01 Jul 2026 17:27:17 +0000
ROA not before:           Wed 01 Jul 2026 17:27:17 +0000
ROA not after:            Tue 29 Sep 2026 17:27:17 +0000
asID:                     834
IP address blocks:        209.92.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:45:96:6d:9d:5c:44:0c:e8:10:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 17:27:17 2026 GMT
            Not After : Sep 29 17:27:17 2026 GMT
        Subject: CN=65ea216a-c09f-455a-9d1f-95ad9b075534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:2b:24:6e:99:ff:a6:07:08:45:17:b4:d2:
                    60:a9:a8:01:6a:af:7c:1a:28:e9:1f:77:71:61:e9:
                    97:9c:f3:d5:86:07:32:be:09:0d:3a:07:b8:34:ec:
                    40:6a:4f:6b:4e:6c:46:fb:dd:04:05:4f:00:e3:b0:
                    c9:a2:ad:df:f9:6f:6b:d9:8a:cf:a7:80:b5:37:b8:
                    c2:88:74:be:1a:0d:c1:3f:14:1c:5d:17:b4:99:45:
                    e6:3d:7a:e8:10:e6:ef:de:be:17:64:39:6c:71:fb:
                    d1:76:4d:8e:ac:a7:f6:1c:15:67:66:1d:bb:a6:58:
                    1e:03:0c:4b:ee:89:3d:6b:ea:af:b2:1f:db:19:40:
                    21:8e:cc:0d:f9:fe:59:37:2f:d3:5b:80:00:d8:a3:
                    f4:2f:63:70:80:c6:00:51:7e:4a:01:5e:7e:a1:78:
                    12:ce:fc:41:d8:af:6a:f2:2d:c9:f0:eb:75:43:3f:
                    0f:e2:9f:05:29:f8:d9:f9:c7:26:9b:d3:0a:22:67:
                    78:31:74:f1:f9:8c:1c:98:55:c5:c0:62:48:24:d7:
                    c1:de:f7:53:8c:1e:9a:ff:70:ed:11:37:65:78:05:
                    ba:ee:fb:f2:2c:1a:52:36:d7:9d:19:cf:54:91:ba:
                    c4:c1:89:26:68:6e:a4:25:57:61:00:23:9e:37:ca:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:C8:28:D2:1A:97:5E:03:B2:BF:9E:F9:A6:EC:AA:4A:93:68:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7df93aa0-86c0-36c3-b07e-521f63256200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:84:3a:ac:48:da:4c:ae:4f:d8:f5:36:b6:df:23:1e:f4:a1:
         17:10:83:c0:56:11:bd:6d:c9:2a:de:63:37:3f:64:4d:68:bd:
         dc:e3:58:b3:73:78:6a:8e:01:e1:96:fa:d0:73:b1:cf:62:49:
         cd:5c:db:6f:0c:98:f4:8f:eb:8e:0e:be:e5:b2:08:ac:8d:b0:
         a8:01:6f:91:40:1a:d0:c9:b7:38:b0:0a:0e:78:f4:6e:82:6b:
         c5:3b:11:fe:ed:4d:fb:6d:8c:db:0d:3e:46:3d:30:00:59:3a:
         e3:32:c6:94:fd:6c:ee:c1:d9:e0:6f:5f:6e:b1:6b:00:48:e5:
         f6:af:8e:8a:92:a0:8f:52:61:38:2e:49:a5:4c:30:24:2e:cb:
         0d:cb:47:50:eb:4b:52:3b:15:d2:81:b0:e9:9d:36:7f:96:85:
         1e:49:7a:e6:55:fd:72:c8:0c:14:37:35:74:2e:32:f9:1c:9b:
         06:46:0f:f9:0c:5e:92:fc:50:85:0e:7a:34:29:e6:b7:20:20:
         5e:cc:1b:34:4f:99:01:9a:4f:85:bc:85:04:65:4a:d5:d2:6c:
         85:83:cf:60:7f:72:3d:d3:5c:c5:40:dc:29:66:56:24:f9:a3:
         83:6c:5d:38:75:40:cf:3f:ed:7a:f5:cb:60:f5:d1:35:0e:17:
         70:96:d4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 12:21:43 2026 by rpki-client