Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b965ad6c-89e5-3554-9a6e-455ffd921a4c.roa
File:                     b965ad6c-89e5-3554-9a6e-455ffd921a4c.roa (raw, json)
Hash identifier:          NQOwKRU3oRGd1jksQiKrRY65NCJNsz8fVEqhPRr4QGY=
Subject key identifier:   EB:E5:4A:22:33:D7:65:04:29:77:E8:3B:35:C7:7B:A3:95:F5:0B:75
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E3FC487895F397FAF4E984D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b965ad6c-89e5-3554-9a6e-455ffd921a4c.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     60841
IP address blocks:        209.236.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:87:89:5f:39:7f:af:4e:98:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=1e01a1e0-c0c0-4671-bdfe-dcc84907679d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:84:21:d5:11:e4:2a:0e:a4:92:7c:ff:20:91:
                    0b:b1:65:a8:ba:fa:d7:ad:40:24:bf:e6:40:a3:fb:
                    08:f8:e2:9b:84:03:86:e1:37:d9:e2:f9:9e:96:a0:
                    c9:3d:36:04:b1:aa:09:b4:e9:69:9b:2e:42:2d:24:
                    b2:14:4e:be:0d:ae:3c:99:70:9c:97:12:bd:54:ee:
                    67:bd:08:a4:58:7d:f8:16:65:4b:95:96:19:48:48:
                    23:39:0b:4f:99:c2:35:b8:d4:38:06:f9:f2:dd:9c:
                    f0:a2:47:a9:0d:5b:5e:ee:6e:ed:8a:22:0e:80:5f:
                    fc:2b:54:5c:d6:d0:8b:e7:02:dd:23:7f:28:1b:22:
                    1d:c3:9b:f6:05:3b:c6:0e:2f:63:9f:9a:b6:20:c6:
                    30:55:e5:86:55:35:d1:32:a6:a9:92:a5:61:22:9a:
                    2d:12:58:26:de:df:fe:96:40:be:90:d4:db:13:8e:
                    21:51:a6:72:61:dc:44:1c:92:d6:a5:f2:77:bd:91:
                    b1:ac:2c:36:15:fb:7d:60:94:ba:bc:00:7b:a9:eb:
                    77:cf:b7:6c:79:df:bc:25:3f:17:3d:e9:04:1f:43:
                    fb:65:17:d7:26:81:03:8f:89:c0:35:9f:24:fa:c3:
                    f2:69:a5:eb:e9:2f:f1:a8:83:06:75:4a:97:7d:0d:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E5:4A:22:33:D7:65:04:29:77:E8:3B:35:C7:7B:A3:95:F5:0B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b965ad6c-89e5-3554-9a6e-455ffd921a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:ca:5e:a4:11:0a:7b:43:85:da:1f:cd:c5:62:f3:b8:a4:
         cb:66:28:93:aa:3d:96:bb:b1:8e:1f:7d:38:01:37:c7:4c:05:
         90:61:7a:59:13:65:05:0b:65:f8:cd:ce:25:df:fc:e5:c8:f5:
         2d:9d:6b:2c:a2:6a:ce:a1:af:d3:28:01:2f:d5:5c:10:f1:ff:
         7c:56:36:2f:43:56:6e:36:27:8f:aa:c0:9f:3f:b6:11:4a:48:
         8b:1c:01:fd:e9:bf:62:bf:92:ee:25:ba:e4:1c:fc:f6:85:a7:
         cb:de:b8:94:4a:e3:57:9a:69:4e:a7:3e:43:56:94:7f:44:10:
         3c:04:a4:bc:e4:f4:31:7f:ee:f4:d2:65:22:23:2b:74:ba:88:
         6a:b8:4d:16:2d:45:b8:e8:ea:4b:04:e5:cf:85:63:69:b6:b8:
         15:77:34:6b:b2:28:c2:80:51:be:8b:f0:81:9c:4c:45:35:1a:
         3f:54:f0:d2:78:89:ac:8d:b3:10:1d:c9:9d:ea:92:a9:08:26:
         14:c1:d7:83:f8:5e:5e:74:4c:0a:dc:8e:66:68:08:2d:db:cf:
         ed:b6:fa:21:93:fe:89:f0:65:ad:c1:c3:7c:a7:ed:e8:83:31:
         29:bb:f7:84:01:60:f2:ff:e4:c2:9e:4f:75:56:07:dc:4d:09:
         85:00:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 12:59:46 2026 by rpki-client