Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c92e893a-8752-3f11-baf1-e620f55c3175.roa
File:                     c92e893a-8752-3f11-baf1-e620f55c3175.roa (raw, json)
Hash identifier:          haAO7kt7KPMp9kvdF92J0Qn1ebEYVQih03JjfmQp73k=
Subject key identifier:   B3:C0:0D:E0:16:11:85:1E:01:7A:0B:DD:FE:F9:71:81:ED:6E:4B:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EE3FA74799F4CF3DD407E7F40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c92e893a-8752-3f11-baf1-e620f55c3175.roa
Signing time:             Wed 19 Aug 2026 16:41:39 +0000
ROA not before:           Wed 19 Aug 2026 16:41:39 +0000
ROA not after:            Tue 17 Nov 2026 17:41:39 +0000
asID:                     146883
IP address blocks:        209.92.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:fa:74:79:9f:4c:f3:dd:40:7e:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 19 16:41:39 2026 GMT
            Not After : Nov 17 17:41:39 2026 GMT
        Subject: CN=bec29df8-f485-486e-a532-8b6406292dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4e:6e:06:ee:db:93:66:c2:26:cc:38:5f:04:
                    be:d2:72:ec:d6:04:d0:3f:8f:bf:5c:ea:6c:c1:b9:
                    37:4f:06:88:50:fd:c2:00:38:2e:aa:16:aa:63:cd:
                    6b:58:a0:4c:f0:bd:d5:aa:ae:5c:df:e6:0f:2c:00:
                    35:0b:fd:d7:64:d2:bc:f2:12:3f:e4:2c:3f:42:6a:
                    72:30:8e:69:61:0f:e0:a7:53:6c:64:31:cb:91:26:
                    db:27:3d:2e:f5:b6:0d:1a:77:34:5e:57:53:7c:ad:
                    68:a3:89:f2:22:64:df:9b:9f:72:f6:42:7a:0d:f6:
                    5f:70:9c:2e:43:ce:f5:0c:ae:90:2a:d2:81:c1:f4:
                    19:ac:26:06:9b:76:be:96:e8:13:f8:38:e7:52:1e:
                    b1:dd:1e:79:9d:1b:98:e3:8b:1f:86:81:64:49:fa:
                    1d:88:be:ef:e1:89:23:d7:e4:3b:8f:2d:04:c6:88:
                    2a:76:c2:29:35:39:47:6c:12:30:10:bf:78:49:00:
                    ea:59:0f:f4:08:d8:15:a4:0a:1f:a7:e2:4b:45:b9:
                    28:5f:d7:bf:19:68:77:9c:8a:ce:99:8e:64:32:3f:
                    45:55:b0:6a:73:03:d4:6f:d2:cd:69:c5:d5:fb:0b:
                    f5:07:bf:55:8b:e7:69:cc:1b:8b:f3:eb:90:66:aa:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C0:0D:E0:16:11:85:1E:01:7A:0B:DD:FE:F9:71:81:ED:6E:4B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c92e893a-8752-3f11-baf1-e620f55c3175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:cd:29:0d:68:48:01:bc:51:05:5c:38:29:67:20:95:dd:66:
         e3:50:6b:07:75:70:ae:68:ae:80:1a:05:b1:b3:c6:78:a1:1e:
         5e:03:8a:a3:a3:8b:da:da:c0:2a:4d:9b:8e:e0:36:08:38:2d:
         18:fa:39:67:c6:db:6b:73:87:7f:c7:71:f0:83:c6:43:2d:30:
         fe:2d:68:78:2c:7f:c7:ac:f9:53:e5:d2:8f:b0:0b:31:9e:49:
         ba:5e:c3:cf:a5:48:ee:5c:5c:0e:ea:ed:9e:9d:28:9a:0b:d2:
         34:05:85:01:72:c5:2e:cf:c9:7f:40:a0:1b:6c:9f:f6:dc:aa:
         94:16:83:eb:61:16:73:7d:be:46:b1:c3:8b:d8:63:cd:eb:c9:
         f5:9f:ac:84:63:a4:b6:d8:92:8c:17:56:d0:bb:a8:46:50:ba:
         ca:17:b5:ba:45:3f:65:9c:42:4c:27:c4:ea:5e:0b:ab:4d:2a:
         c6:47:8c:3d:31:49:01:d3:d5:04:ea:4e:73:01:41:a6:2a:3a:
         9f:2e:30:2e:ac:4b:b1:54:25:9e:2f:ed:5f:14:35:76:17:7e:
         28:77:26:72:19:c7:f2:f4:8f:d4:09:b7:5d:12:83:12:dd:4a:
         aa:51:fe:22:d7:c3:95:d1:30:ba:6b:28:6f:0e:22:02:b2:3c:
         1a:74:6c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 12:49:47 2026 by rpki-client