Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c76d28b0-e22c-3469-9be2-0880e5613a02.roa
File:                     c76d28b0-e22c-3469-9be2-0880e5613a02.roa (raw, json)
Hash identifier:          E1KWI7nWptBBYBOfndZ1qGWQwwB8tBtw4GwOwGwTKcQ=
Subject key identifier:   93:E7:1E:D4:F8:29:10:F9:16:08:A8:CC:3B:22:F6:2C:70:01:AB:22
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F1BA55B0E83E87204B382A180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c76d28b0-e22c-3469-9be2-0880e5613a02.roa
Signing time:             Tue 08 Sep 2026 15:15:27 +0000
ROA not before:           Tue 08 Sep 2026 15:15:27 +0000
ROA not after:            Mon 07 Dec 2026 16:15:27 +0000
asID:                     212633
IP address blocks:        173.211.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1b:a5:5b:0e:83:e8:72:04:b3:82:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  8 15:15:27 2026 GMT
            Not After : Dec  7 16:15:27 2026 GMT
        Subject: CN=3123dc39-910d-4c81-9a44-31b04ab116e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6e:7d:b2:1f:a3:d8:2d:73:61:8e:01:89:81:
                    e1:ce:bd:91:46:41:e6:9b:49:ef:07:35:9e:28:77:
                    41:0d:4c:12:6e:32:ae:c7:37:d0:80:91:52:4e:51:
                    53:53:47:c1:7f:96:31:49:28:64:a7:00:87:8a:60:
                    8a:88:12:a2:3e:27:79:6e:13:07:02:ab:eb:61:c7:
                    b6:b8:66:b8:9d:af:ee:ec:f3:02:ce:35:bc:a4:60:
                    eb:00:ce:bf:fc:fe:53:eb:04:e6:78:a0:a6:cb:45:
                    9d:f6:1e:a0:b4:62:34:17:2e:3f:ec:ac:c6:e8:8b:
                    39:9b:3b:30:a9:44:38:86:48:e9:89:c7:25:06:33:
                    87:6e:f1:b0:5c:0b:7d:af:4f:e6:b3:73:9b:cf:3a:
                    92:83:db:7f:21:52:65:d6:a4:0f:c5:45:36:09:b2:
                    53:c4:28:11:b9:2d:f6:49:54:38:83:b7:5e:01:a7:
                    8f:70:a0:2f:33:c2:11:8a:42:cb:6f:60:09:9a:50:
                    11:32:4c:be:e4:06:78:6b:7d:6d:bb:f2:47:03:7d:
                    d2:1c:b2:59:87:18:06:88:a6:81:37:97:ca:46:da:
                    d0:b9:0d:fa:11:00:d6:e5:ee:8f:0c:d1:1d:fb:48:
                    cc:a7:bb:c2:d9:99:96:7b:de:be:1c:3f:15:d3:e6:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E7:1E:D4:F8:29:10:F9:16:08:A8:CC:3B:22:F6:2C:70:01:AB:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c76d28b0-e22c-3469-9be2-0880e5613a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:31:51:e4:1a:b2:2f:0c:f0:88:b8:ed:fa:e1:7c:ab:94:95:
         4a:70:9f:97:54:88:0e:f3:db:4b:88:d8:b4:53:03:10:57:09:
         08:34:d7:a4:21:72:6e:c6:69:c5:f5:00:22:3a:08:4f:3f:a8:
         2b:63:29:55:b3:ee:09:b2:63:48:e6:89:33:7c:e6:36:54:14:
         d8:82:52:19:a8:df:28:19:00:5f:a2:73:fa:5d:50:23:60:e1:
         e7:dc:bf:22:15:a0:cf:7b:60:5c:f5:b9:10:52:8f:20:b9:a0:
         86:c3:77:36:5a:07:cb:b7:3a:c4:36:5c:44:ec:3d:0c:2c:01:
         a8:b0:e0:ed:c5:d4:c5:7a:5a:41:9c:5c:6d:c4:f7:72:79:26:
         69:ee:f9:c5:71:47:7d:a8:26:d6:94:da:34:69:cc:4a:3f:18:
         de:19:87:de:2d:77:c1:2d:cb:81:0f:83:61:e5:dd:20:05:3d:
         3f:18:89:58:67:27:64:bf:74:8a:9a:fc:49:b8:d6:49:d5:68:
         5b:0a:8e:ac:65:8b:c0:02:c6:f0:ca:6c:2a:8c:24:bd:ca:28:
         2a:af:ec:a4:26:75:c5:5f:36:63:af:f2:4b:27:7d:40:d1:fe:
         7f:df:ac:28:13:3b:f9:3e:8e:61:94:f9:10:19:0d:44:72:26:
         44:1f:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:05:22 2026 by rpki-client