Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9e825951-0a84-3ec3-8814-3e3afca2bb5a.roa
File:                     9e825951-0a84-3ec3-8814-3e3afca2bb5a.roa (raw, json)
Hash identifier:          6kveI3MBrJGlfgMajp4cw7+ArOu4wIv428JM2cZRDFk=
Subject key identifier:   9C:14:9F:9A:D1:45:61:5D:F5:E8:8C:5E:F4:34:25:7E:93:3C:99:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EF4D69D7732905D076DCA8A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9e825951-0a84-3ec3-8814-3e3afca2bb5a.roa
Signing time:             Tue 25 Aug 2026 17:38:10 +0000
ROA not before:           Tue 25 Aug 2026 17:38:10 +0000
ROA not after:            Mon 23 Nov 2026 18:38:10 +0000
asID:                     20473
IP address blocks:        209.92.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:d6:9d:77:32:90:5d:07:6d:ca:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 25 17:38:10 2026 GMT
            Not After : Nov 23 18:38:10 2026 GMT
        Subject: CN=fd5a333d-0a5d-461d-a30d-930e0251aae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e9:9d:1c:7e:5a:e7:ac:ea:72:a9:65:8e:ed:
                    80:6e:02:27:44:8c:f1:78:eb:18:08:b8:f5:63:0f:
                    5e:3e:9a:fb:8e:1f:f5:5c:41:d3:73:f9:08:9e:8e:
                    ac:8e:4c:ed:37:ca:ce:e8:46:b8:dd:64:87:f0:c5:
                    50:d5:97:82:70:b5:06:ef:c1:6e:d2:0a:75:29:b0:
                    2d:54:7e:66:2b:d2:a8:01:da:04:a0:a7:0c:01:70:
                    94:6d:59:95:aa:23:9b:6e:bb:9d:7e:9a:b5:cc:d2:
                    e2:1a:28:0b:8c:ff:3d:8d:0d:04:8e:14:c4:eb:ca:
                    e6:14:c0:6c:89:ae:a7:3e:82:6d:2d:7c:bd:d5:e2:
                    81:9f:9e:4a:93:11:21:e2:66:06:03:86:63:22:c5:
                    27:81:4d:b7:f9:f1:40:36:d4:81:2f:a7:0e:76:b1:
                    3e:17:dd:cf:29:cb:d5:3d:46:fb:d0:3d:28:4d:04:
                    f9:9e:12:56:71:28:5c:d5:17:f7:e5:cc:37:63:d2:
                    a2:6f:4b:e7:24:f0:b1:16:d8:c3:24:4d:a0:47:47:
                    53:f8:37:05:8c:0e:91:66:0e:4b:d7:b0:51:0b:b0:
                    3b:ac:b6:88:6b:23:d9:c4:8e:c0:b4:d5:c8:81:7d:
                    5b:85:70:8e:be:d6:69:77:1d:a4:aa:e1:2f:86:0c:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:14:9F:9A:D1:45:61:5D:F5:E8:8C:5E:F4:34:25:7E:93:3C:99:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9e825951-0a84-3ec3-8814-3e3afca2bb5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:25:08:df:e8:99:6a:df:b7:14:f5:9e:48:db:82:99:6f:f2:
         d6:8a:7a:71:0e:6a:1b:f8:30:92:19:eb:97:ea:e9:02:a9:de:
         2f:b0:f3:e6:f6:01:36:05:89:9e:b8:54:95:e8:fe:55:51:c0:
         a1:a9:2e:5a:e8:6d:ea:be:28:75:4b:a3:44:58:ce:0a:4d:bb:
         b7:55:63:08:81:0d:92:a8:bb:3d:52:40:3d:2e:7c:b8:ac:94:
         ae:0c:e6:7f:2d:7e:4b:cc:51:c1:bf:e7:51:cc:c6:eb:b7:43:
         7e:50:ba:6d:07:75:62:94:d8:d4:7d:96:76:77:65:17:26:bc:
         77:72:c5:24:99:04:b1:af:d1:70:f8:ca:54:54:52:71:c1:19:
         9a:f3:ad:d3:c0:26:0d:26:e5:5b:c2:0f:a3:58:16:0d:83:b9:
         84:90:cd:d9:bb:84:8e:4e:14:3a:f0:58:a1:b8:b2:9e:a3:08:
         cb:ec:50:71:ac:0f:fd:30:b5:b1:4e:1a:33:27:5d:51:94:ed:
         f4:29:87:89:0a:02:fc:ce:7e:a8:23:28:30:d8:0e:61:57:c7:
         19:e6:de:ce:7d:dd:45:89:eb:da:2d:a6:14:4a:e0:56:0e:51:
         66:ee:89:2b:4f:ab:e0:b3:df:16:24:b0:ea:29:0f:7c:66:7a:
         ce:c5:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:54:52 2026 by rpki-client