Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a36dc6ea-a3c3-3373-b315-d568b2f80524.roa
File:                     a36dc6ea-a3c3-3373-b315-d568b2f80524.roa (raw, json)
Hash identifier:          UZ6I2I2v8XhYgAd9Z8AXJEptvuskwDiE6LZPvtdZqg4=
Subject key identifier:   63:F8:2B:84:A9:86:58:1A:4A:D8:38:0F:20:30:9B:B4:06:E8:5B:F9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E341599158977994FA3924340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a36dc6ea-a3c3-3373-b315-d568b2f80524.roa
Signing time:             Wed 17 Jun 2026 16:34:04 +0000
ROA not before:           Wed 17 Jun 2026 16:34:04 +0000
ROA not after:            Tue 15 Sep 2026 16:34:04 +0000
asID:                     47007
IP address blocks:        173.211.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:15:99:15:89:77:99:4f:a3:92:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 17 16:34:04 2026 GMT
            Not After : Sep 15 16:34:04 2026 GMT
        Subject: CN=9b5ca1ab-a0e0-4077-89cf-01909a0ebb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:2d:f0:f5:50:99:f6:dd:73:a9:89:17:50:
                    a0:61:6e:d8:a8:cc:24:07:49:ff:85:6d:44:74:ca:
                    bf:ba:3e:18:25:a6:d4:0f:64:f3:27:f5:59:41:45:
                    2f:56:4e:a1:1c:ad:c5:d5:ea:c6:95:04:34:78:47:
                    eb:5c:5a:fd:bd:b1:69:30:f4:7f:5b:17:8d:84:e9:
                    66:7c:46:c7:16:b8:81:83:e0:cb:af:cb:8f:69:ee:
                    fd:c3:1a:97:a3:cf:bd:b0:7b:7a:9b:00:a7:65:fa:
                    89:78:d5:ff:20:40:00:d7:b9:ef:3d:76:95:36:ee:
                    3f:5c:8c:d2:d0:b3:47:a9:48:b0:ba:cd:c4:e0:76:
                    45:61:87:e0:7f:5f:ff:5d:a5:67:26:45:ab:25:eb:
                    d8:dc:41:7d:0c:be:49:ce:eb:fc:a8:e2:ae:57:85:
                    25:4f:5c:43:c8:b6:4d:13:36:0e:2d:4c:79:14:42:
                    05:95:13:64:60:82:d9:08:0e:6c:15:ec:a5:bd:26:
                    9d:13:09:16:21:c0:c1:0e:0b:b5:96:ae:d3:b0:8d:
                    03:bc:7e:66:62:c4:ba:e2:5b:aa:dc:1f:dd:dd:24:
                    79:74:97:5d:91:48:69:bf:9d:b7:69:46:a2:2f:a3:
                    e1:d4:d6:07:b6:7c:e5:9b:80:0a:44:5e:79:dc:38:
                    c1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:2B:84:A9:86:58:1A:4A:D8:38:0F:20:30:9B:B4:06:E8:5B:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a36dc6ea-a3c3-3373-b315-d568b2f80524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f3:8c:b0:6c:84:6c:9f:7d:5c:43:9d:ac:dc:8f:ab:73:31:
         6d:b4:8f:96:e7:d5:c4:c5:5c:b0:8b:b9:55:22:da:cc:5e:99:
         cf:47:05:05:97:63:8b:5f:46:07:86:ea:f4:d3:c5:56:8c:af:
         4d:f0:05:2d:02:ee:d5:4e:3b:2e:1b:3c:95:3c:7d:d8:e4:fe:
         32:24:61:89:05:ed:e0:7c:c7:d9:cf:f7:5a:74:fa:bb:60:df:
         f9:c7:ad:9c:ea:f8:bf:ee:11:ad:64:28:ad:92:c6:62:75:9d:
         3b:d4:d2:14:24:c7:d2:53:42:f1:14:13:8e:c2:81:11:a2:8e:
         a3:9f:30:97:24:c4:eb:b9:fc:6e:a1:82:bc:9d:a0:66:f3:6d:
         91:bc:e4:dc:d6:1d:43:ec:fa:f7:96:08:d8:4d:52:d2:1b:30:
         af:8d:0b:d4:58:50:50:3c:9b:05:05:25:62:2e:2e:a1:9e:94:
         10:9d:94:14:63:c4:12:82:47:f8:38:aa:84:d7:da:0f:68:07:
         4b:9f:40:2a:eb:1b:d0:8a:52:ea:b8:60:2c:80:55:57:ba:f8:
         2c:65:2b:22:d8:54:b4:82:df:94:68:2a:33:42:7a:2a:8c:29:
         72:18:cb:76:b6:f0:a9:29:03:8c:c1:52:50:2d:93:5d:df:73:
         66:d6:e3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 20:43:09 2026 by rpki-client