Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8dea5fff-402b-38a7-867f-4b32770eab5b.roa
File:                     8dea5fff-402b-38a7-867f-4b32770eab5b.roa (raw, json)
Hash identifier:          lBz7y7lmiQGLPnIOIGEBDzoYx2apcTDeLfztB+1Cbtw=
Subject key identifier:   C2:F2:61:22:2F:5C:EA:67:9A:EE:CB:BD:3C:62:F4:1C:9A:C3:36:28
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DAB4401A324C44133CF002B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8dea5fff-402b-38a7-867f-4b32770eab5b.roa
Signing time:             Wed 29 Apr 2026 16:21:50 +0000
ROA not before:           Wed 29 Apr 2026 16:21:50 +0000
ROA not after:            Tue 28 Jul 2026 16:21:50 +0000
asID:                     32418
IP address blocks:        209.236.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ab:44:01:a3:24:c4:41:33:cf:00:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 29 16:21:50 2026 GMT
            Not After : Jul 28 16:21:50 2026 GMT
        Subject: CN=d2fb8c8f-09fa-42a5-9250-496778eaa68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9e:20:c5:d2:a7:95:1b:4f:92:a4:62:b1:f2:
                    2d:f3:c2:13:85:4f:92:ea:89:ff:ca:4a:f9:44:be:
                    22:47:3a:cc:51:52:33:b2:00:24:26:a4:db:e0:55:
                    91:c6:77:41:1e:47:1f:34:9a:4b:10:c8:f9:ea:86:
                    35:cd:ae:c4:11:12:15:57:12:7e:ec:32:ec:86:48:
                    7a:85:c7:e8:de:af:3a:38:37:eb:84:45:ba:75:43:
                    07:1d:0b:7a:57:b2:ec:24:48:51:16:8c:de:49:e0:
                    bd:59:16:4b:3d:c7:c6:ab:cd:fc:10:ae:34:23:7b:
                    a2:d7:32:3f:6e:9c:56:7d:0f:85:8b:bf:a3:4b:40:
                    ba:d3:d1:04:b3:0b:d5:94:67:47:b0:a3:0f:eb:a8:
                    65:c7:07:07:8d:92:85:d3:52:cc:da:85:ed:b6:2a:
                    1e:38:ec:89:c7:be:9e:d6:5a:1f:f6:22:5c:dd:90:
                    92:fa:03:3a:cd:b6:f5:fe:0a:02:dc:c8:31:45:cc:
                    25:7f:07:49:21:12:84:98:f1:75:a0:39:6f:8f:36:
                    53:a8:31:44:34:ce:f8:cc:19:36:f0:69:c5:2a:c9:
                    98:e6:44:fa:ca:04:22:e3:7f:72:3a:59:42:3f:4d:
                    d9:a8:32:b1:87:09:73:48:66:98:62:68:58:fa:ea:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F2:61:22:2F:5C:EA:67:9A:EE:CB:BD:3C:62:F4:1C:9A:C3:36:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8dea5fff-402b-38a7-867f-4b32770eab5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e2:a6:7c:57:99:a4:a7:5a:28:c4:fb:57:12:e2:f6:cd:0e:
         dd:b4:9e:6e:6b:3a:d5:08:44:a4:2d:94:db:6e:0c:48:02:b1:
         ab:0e:20:75:4b:54:4c:46:d4:b3:dd:ef:73:e0:28:86:ab:45:
         37:ea:ec:89:8d:dd:7c:30:a1:30:9f:86:9c:7e:9f:80:2e:62:
         99:6c:c0:00:d4:0e:fc:04:c4:4e:85:51:52:a0:cc:4d:ca:29:
         70:b7:b7:73:52:02:88:94:8e:b2:91:0f:b3:cf:fe:40:3b:9b:
         b7:0c:c8:68:b3:67:d1:5d:3e:82:3b:de:d7:4e:f8:13:67:8e:
         4f:e8:2f:7c:88:92:e8:79:5a:6e:f3:ba:77:8d:19:41:68:92:
         aa:81:8e:74:93:70:25:c5:2a:e9:e5:c2:97:40:25:73:79:42:
         f6:d8:05:17:32:ba:ec:a8:b1:e6:25:9e:7d:01:59:9d:71:a2:
         b4:09:a4:8f:8c:51:1d:45:23:54:0d:37:b3:a7:bf:e2:14:ca:
         62:d9:ba:14:dd:3c:f7:4d:ff:f6:53:7c:d8:98:48:42:2d:95:
         89:c0:80:15:90:28:f0:21:58:54:66:7a:fb:de:90:3f:ef:95:
         dd:cc:52:3f:b4:5f:93:5b:fd:29:e6:f4:f8:19:d4:a1:2d:54:
         f4:e5:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:52:37 2026 by rpki-client