Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88cfc9ce-5643-3070-8591-0f8ea65b5179.roa
File:                     88cfc9ce-5643-3070-8591-0f8ea65b5179.roa (raw, json)
Hash identifier:          LJIhLt3Tdmf4fiUYIRKxz6XBD+hENkpu8N3PL40C3qs=
Subject key identifier:   69:62:56:35:26:16:BF:C9:34:51:20:46:7C:C0:10:C5:39:7F:86:FA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EA79D2CBBD685CC127E500E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88cfc9ce-5643-3070-8591-0f8ea65b5179.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20473
IP address blocks:        209.236.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:2c:bb:d6:85:cc:12:7e:50:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8a418c2d-c7f2-4684-9198-32f496d2b6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:76:0f:f4:83:7c:f3:17:19:a6:e8:9f:e0:c0:
                    48:32:ee:5f:16:b6:e9:d4:5e:68:51:f8:5c:ba:c2:
                    98:58:f5:b6:e6:3f:45:53:8c:6c:52:1a:5d:12:93:
                    f4:36:3f:54:4d:a5:28:3c:35:9c:7d:9b:15:40:82:
                    7b:04:b7:66:06:21:d4:72:18:56:f2:e4:02:22:4b:
                    43:9f:c9:dd:bf:1c:b3:b5:5c:ce:39:05:56:55:f7:
                    08:35:2b:95:df:2f:2f:9c:02:df:6b:9f:bb:70:32:
                    e5:4b:a7:18:86:4b:07:a7:c6:71:7e:73:a6:46:0b:
                    a1:3b:24:86:79:58:c4:89:bc:fb:d9:f2:a4:17:e9:
                    5d:34:13:23:21:6e:91:9e:19:a0:a2:33:d1:f3:a9:
                    7b:83:e3:f2:bf:83:fe:4e:3b:0f:b0:59:e3:19:3e:
                    0a:45:96:20:99:a3:49:02:b1:74:4f:af:e6:71:cd:
                    87:d6:eb:05:61:cc:24:23:4f:d5:75:20:8b:10:3f:
                    5e:90:93:a5:ba:03:c3:54:da:c0:51:be:fa:bf:d5:
                    48:0a:60:16:5b:99:bc:73:f3:55:0d:fe:64:56:50:
                    35:56:a4:c6:11:13:a2:cf:cd:0c:f9:16:d3:d0:45:
                    be:7e:5b:49:8a:aa:1e:c7:0f:45:68:ab:61:38:88:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:56:35:26:16:BF:C9:34:51:20:46:7C:C0:10:C5:39:7F:86:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/88cfc9ce-5643-3070-8591-0f8ea65b5179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:71:10:e3:f6:c4:ab:c0:e4:7f:16:8e:71:f4:f8:75:cc:ae:
         65:41:bd:e6:a1:91:b1:aa:5f:c8:63:4d:1d:c0:6b:fd:4e:6c:
         b3:23:cf:5a:ee:aa:53:23:5a:0c:50:c9:b5:1d:23:97:9d:d1:
         64:7f:ea:3f:75:19:09:94:b7:fa:09:8a:aa:1e:a1:5b:c5:f7:
         6c:0b:a9:9b:93:2d:2a:1c:65:6c:32:50:78:41:b0:60:2f:6f:
         5a:21:55:8c:ed:b1:73:bb:39:95:c1:ff:65:a7:0f:66:72:17:
         78:3a:a7:ab:57:6f:62:59:8d:d5:75:6d:bd:e7:40:dc:cd:19:
         15:a5:b2:3c:c6:4d:1f:e3:44:ce:62:66:9f:9b:f6:1c:07:13:
         93:d2:2d:cc:ce:e5:05:a4:ef:05:5d:ea:e0:cf:8b:c8:db:de:
         ba:83:82:c5:87:26:64:f8:e1:87:69:cb:10:ac:74:34:9f:6b:
         39:85:91:b8:76:d4:15:70:44:42:b4:20:9c:b6:f3:c8:94:2d:
         b0:fe:06:e9:69:08:d2:40:f8:35:7c:bb:09:1c:ae:84:b3:e6:
         b5:30:5e:c8:33:18:54:8d:81:9a:81:11:f3:93:73:77:ff:36:
         ee:5d:cb:e3:d0:45:b0:cb:90:95:3b:0e:9c:fc:aa:86:2c:ff:
         42:21:df:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:52:28 2026 by rpki-client