Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7dfd26ab-609f-37d5-9c70-540bb4c5f2b6.roa
File:                     7dfd26ab-609f-37d5-9c70-540bb4c5f2b6.roa (raw, json)
Hash identifier:          y5ODX1X3JjSaH63NDfE6Sn3d34/VrtU+CPxE7cPalvk=
Subject key identifier:   1D:75:BA:5E:E4:A6:56:4D:5D:34:EF:DE:93:A2:F3:5C:73:C8:8F:49
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F29DEDA0071310DE28BAF5D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7dfd26ab-609f-37d5-9c70-540bb4c5f2b6.roa
Signing time:             Sun 13 Sep 2026 17:32:37 +0000
ROA not before:           Sun 13 Sep 2026 17:32:37 +0000
ROA not after:            Sat 12 Dec 2026 18:32:37 +0000
asID:                     834
IP address blocks:        209.236.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:de:da:00:71:31:0d:e2:8b:af:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 13 17:32:37 2026 GMT
            Not After : Dec 12 18:32:37 2026 GMT
        Subject: CN=db0b8fc8-0ecf-493a-852b-f5220bb9ab6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:82:55:b8:11:39:f8:c1:5c:fe:95:5c:4c:b5:
                    da:01:76:08:18:2c:0a:9a:1a:ec:f5:1c:70:27:8f:
                    82:24:51:b4:01:9a:3a:7d:53:c4:12:b2:d4:c3:da:
                    61:6d:ec:cd:23:65:20:88:88:84:12:c5:48:56:c8:
                    65:e0:c3:39:06:36:66:be:26:20:1c:63:8f:85:16:
                    cf:40:c7:fa:f3:fa:64:25:da:50:8c:5e:71:9e:6f:
                    bc:c7:44:43:53:57:c7:7a:75:0f:b7:60:65:d9:7b:
                    a4:b7:d7:e6:9c:2b:72:82:f3:43:82:3c:49:d9:93:
                    8c:1a:92:51:b1:c5:af:05:59:40:b1:e3:cb:60:1b:
                    79:53:ca:ea:e6:7b:40:a3:0a:67:8b:1c:59:8e:b4:
                    80:f1:13:eb:e7:b1:66:ad:f2:77:98:fd:cb:66:80:
                    33:46:a6:90:88:47:9e:c2:ac:f6:6d:d0:0a:49:60:
                    88:b5:f7:57:75:0b:f9:e4:98:56:e7:4f:08:86:cf:
                    14:63:5c:75:d6:eb:50:0b:a8:c7:e5:1e:08:29:95:
                    e4:94:94:f6:dc:dc:39:60:24:ec:0d:0f:ec:d3:8a:
                    91:2d:91:4f:64:9b:3f:09:90:2b:ab:f2:c0:29:6d:
                    d5:cc:c8:f1:12:36:d3:48:c1:57:8d:db:83:a3:2a:
                    52:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:75:BA:5E:E4:A6:56:4D:5D:34:EF:DE:93:A2:F3:5C:73:C8:8F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7dfd26ab-609f-37d5-9c70-540bb4c5f2b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:2c:c7:4d:64:c4:8b:6c:e2:f1:59:28:70:82:e0:6e:7f:
         dc:67:93:27:85:53:4e:bd:95:88:32:ee:b8:2f:95:77:82:3d:
         2f:a5:ed:84:8c:4d:6a:4b:40:08:54:03:6b:53:24:b8:5c:f3:
         73:ad:36:1f:d1:07:20:dd:07:65:9f:f5:a3:00:a6:ad:21:cc:
         a1:9e:7e:68:12:39:ff:b0:e5:9e:34:9d:af:f6:0f:d7:ad:b5:
         82:f6:fe:17:2e:39:6c:17:fe:d1:ab:9f:a5:c1:b3:00:9a:b1:
         c5:ed:ca:e6:ee:5d:23:a3:3b:99:6b:f8:cd:5c:c1:68:19:a2:
         fc:fd:3c:80:63:1c:67:fe:00:83:3d:d2:12:8f:0e:83:97:69:
         cd:a9:b2:c4:77:38:d6:81:c6:64:43:a0:ee:a7:22:14:7c:42:
         28:9a:49:d5:a9:05:8b:84:f3:62:65:7f:8e:4d:1a:a4:59:43:
         a3:1b:d1:86:eb:19:27:bf:8c:8a:f2:fd:ec:2a:7c:cc:8e:af:
         78:55:1c:8d:ab:cb:1c:a8:9e:d9:11:4b:13:65:d3:12:1f:4a:
         e4:fb:47:e5:45:eb:18:91:a9:48:e5:46:b9:d5:20:44:0e:f3:
         c6:62:c0:3f:4c:02:02:d3:a2:25:7b:7a:9b:19:4b:a8:bb:07:
         42:e9:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 11:14:34 2026 by rpki-client