Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad7e1e57-ed97-36af-a56d-5adc8af4bfd4.roa
File:                     ad7e1e57-ed97-36af-a56d-5adc8af4bfd4.roa (raw, json)
Hash identifier:          q62LDhfzK6P5kneN3BPFNCVBI8ZbNW0KPEKjDLkohVY=
Subject key identifier:   A9:BC:E1:D4:56:E4:3D:21:51:C2:5A:68:6C:ED:63:4E:48:B2:97:87
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DA8F24CE90455350119E60CC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad7e1e57-ed97-36af-a56d-5adc8af4bfd4.roa
Signing time:             Tue 28 Apr 2026 20:25:35 +0000
ROA not before:           Tue 28 Apr 2026 20:25:35 +0000
ROA not after:            Mon 27 Jul 2026 20:25:35 +0000
asID:                     402044
IP address blocks:        209.236.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:f2:4c:e9:04:55:35:01:19:e6:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 28 20:25:35 2026 GMT
            Not After : Jul 27 20:25:35 2026 GMT
        Subject: CN=1a1d4d08-c21d-4539-b8bf-a8cbf71f6dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:21:6f:ec:c0:f0:ab:6f:63:0b:1d:8d:19:a4:
                    4f:62:e6:16:21:2e:ad:84:2c:c1:00:bb:2c:11:b1:
                    81:fa:c3:5d:35:1d:f0:d9:6a:33:c7:5d:b0:6b:6f:
                    47:40:45:ef:45:a7:7e:07:a5:78:62:8d:c9:90:06:
                    21:6d:f6:49:4a:35:59:22:89:6d:4e:f7:f4:85:2b:
                    0c:54:da:c9:5d:2d:9a:ae:52:ee:e3:68:24:4b:2f:
                    48:5a:73:e8:9c:5b:6f:4e:b9:87:90:6b:98:7c:d7:
                    db:69:af:4c:6f:08:51:24:e6:36:6f:31:54:b5:f1:
                    04:15:9f:53:be:16:0e:8a:5f:d8:05:1c:1e:64:6a:
                    5b:c5:1d:5b:58:8b:46:c8:db:a4:ca:da:d1:1b:70:
                    55:8c:ef:7c:c7:fa:44:96:f6:32:cf:11:fa:94:07:
                    1e:3b:a2:d3:cd:76:2b:13:a1:08:d9:64:57:8b:22:
                    f4:a5:62:bb:6b:2b:a6:f8:e2:70:04:10:21:6c:7b:
                    5b:ba:3c:07:96:f3:c8:e4:e5:4d:8f:b3:0a:bb:c4:
                    74:77:f5:ad:1b:a0:c0:dd:09:32:d5:50:63:b4:4f:
                    19:6b:f4:12:12:f1:07:ad:ca:13:93:75:01:c7:91:
                    48:fd:54:c5:12:85:a6:23:a1:b4:87:de:85:de:32:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BC:E1:D4:56:E4:3D:21:51:C2:5A:68:6C:ED:63:4E:48:B2:97:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad7e1e57-ed97-36af-a56d-5adc8af4bfd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:89:b5:ec:4a:15:0b:a4:9a:92:f0:3e:5d:3f:88:14:ea:72:
         29:05:11:ce:8a:0c:ed:a9:2d:fb:7a:97:8c:2a:34:bb:84:2b:
         34:23:9f:15:b6:84:6c:f5:66:f1:14:04:cf:15:f5:76:5e:23:
         da:ac:12:16:a5:b4:b7:e1:62:81:2e:57:db:ee:cb:13:aa:ba:
         eb:3a:b2:c0:1d:1c:a5:6c:20:5a:59:74:a2:f5:c6:c9:5e:06:
         58:d5:29:f8:c6:b8:03:ed:61:fb:ac:40:4a:40:91:5e:86:1d:
         bd:f7:0e:2b:ca:a0:c0:32:15:c1:69:a5:9e:e1:88:b1:7b:8a:
         7e:46:08:64:18:e0:e2:c5:c9:30:52:a8:e0:7d:93:86:01:ea:
         c4:af:bb:55:0c:03:5e:ad:c8:e7:48:dd:da:fc:c2:a0:f9:ce:
         3c:73:94:4a:88:42:29:72:22:a6:f2:f9:5d:c6:cb:aa:90:23:
         5a:9d:e8:60:61:1f:a5:7b:5a:1f:fb:ad:04:2f:23:de:aa:78:
         59:a1:73:44:0e:51:20:ca:54:d6:ed:e0:94:2f:55:09:ff:25:
         00:61:59:b8:01:01:ff:12:b1:64:55:7e:53:5b:d0:e0:b1:1b:
         38:03:00:ce:a8:8d:df:4c:49:5d:13:75:d5:ad:49:7c:d1:0c:
         c6:0c:9f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 15:52:06 2026 by rpki-client