Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84410fb5-af97-3634-84c8-2bb670ad4245.roa
File:                     84410fb5-af97-3634-84c8-2bb670ad4245.roa (raw, json)
Hash identifier:          QM35VL4w3RU2Vn1j1hEM0b4cprSbfpK6lDWDRCVHw30=
Subject key identifier:   D6:F8:FB:EA:90:B5:66:18:70:07:F3:4C:A9:82:2B:89:FC:94:D1:84
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D5FD57EB10B95718AF2C79EC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84410fb5-af97-3634-84c8-2bb670ad4245.roa
Signing time:             Thu 02 Apr 2026 15:53:32 +0000
ROA not before:           Thu 02 Apr 2026 15:53:32 +0000
ROA not after:            Wed 01 Jul 2026 15:53:32 +0000
asID:                     402257
IP address blocks:        209.137.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:d5:7e:b1:0b:95:71:8a:f2:c7:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  2 15:53:32 2026 GMT
            Not After : Jul  1 15:53:32 2026 GMT
        Subject: CN=e8109ad0-8754-4529-95f2-41c28b21b588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:35:3b:50:1c:55:b3:61:29:20:26:ec:79:
                    39:ee:af:3e:22:df:e6:f0:01:ce:ec:05:c4:57:65:
                    c4:9f:f2:0a:67:8b:5d:a7:f1:b2:bf:22:28:29:23:
                    24:eb:5c:e6:fd:46:cd:f4:a3:48:51:1a:21:3d:4c:
                    e5:93:2e:06:ad:d8:dd:95:2b:8b:84:2a:f0:7f:51:
                    81:0f:bd:80:78:e8:03:14:60:43:73:be:a5:af:b1:
                    a6:70:4a:80:48:a7:64:bf:1f:03:2c:aa:f5:fd:80:
                    65:fb:95:67:0a:b0:6d:43:ae:fc:05:02:49:54:6d:
                    c3:0c:49:e8:11:39:b1:ed:76:bf:e1:87:0a:d8:6f:
                    d3:0a:e0:93:f8:0e:8b:29:be:78:b5:74:fc:cb:0c:
                    b5:5a:2a:40:cc:6a:bb:ef:05:3d:c0:07:c3:de:07:
                    c1:6a:a5:84:c4:3a:63:ee:8a:61:cb:3b:3f:71:f2:
                    14:5e:4f:5e:aa:b8:04:c8:eb:cc:12:0f:08:12:38:
                    16:94:f8:c4:8b:97:e6:57:36:3d:29:b9:a7:b9:8e:
                    6b:b3:d0:a4:9a:f0:78:ef:71:92:57:64:59:6e:72:
                    4c:e7:5a:54:c1:0f:5f:16:7d:83:85:5d:72:82:cb:
                    92:74:46:61:9d:05:86:b3:ac:06:65:37:30:27:29:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F8:FB:EA:90:B5:66:18:70:07:F3:4C:A9:82:2B:89:FC:94:D1:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84410fb5-af97-3634-84c8-2bb670ad4245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.137.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:14:42:dc:74:f9:b4:75:0b:33:40:6f:d8:72:4a:3e:fa:39:
         0f:ac:fb:9c:5b:cd:22:a1:41:52:b7:c0:ca:06:9c:7a:b6:54:
         ab:33:32:36:5f:82:b5:58:8c:6a:3c:2d:bd:fa:7a:af:89:a9:
         e6:f1:62:32:c7:7c:68:9e:a0:6a:b9:91:ca:63:a8:f4:16:f7:
         e4:83:86:1e:1e:2e:d4:1f:57:9d:0f:6f:78:ff:48:67:41:0b:
         b2:7d:7b:ae:7e:f0:2d:1e:a8:ad:18:0f:d7:9b:89:fe:6c:cb:
         06:12:13:ee:ba:2c:5e:c1:c2:cd:a9:84:e4:64:99:2a:24:8d:
         77:d4:4d:44:7d:ba:35:d5:29:5e:c4:ef:bd:24:40:0a:ad:de:
         bf:38:58:4a:c0:4e:29:a9:28:25:38:dd:88:a4:53:58:de:49:
         10:2d:cd:54:69:a5:54:8f:78:14:21:47:52:32:8d:4d:20:db:
         df:c3:bb:cd:1d:ca:6d:55:f5:b4:2b:cc:1b:79:95:72:38:e2:
         bd:7f:4f:b7:5e:fb:ee:11:9b:e0:ce:8d:35:a7:68:69:c1:60:
         ce:a5:f9:8c:3a:19:ca:52:73:9e:8f:a3:40:e9:fd:99:18:b2:
         46:fb:8b:57:f4:f0:41:44:ee:eb:5e:bd:19:7a:64:60:76:b1:
         df:ff:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 13:50:36 2026 by rpki-client