Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cfc409e1-4fc3-3432-afcd-7daeb6f32eae.roa
File:                     cfc409e1-4fc3-3432-afcd-7daeb6f32eae.roa (raw, json)
Hash identifier:          2WPFgnZz6oEebLcpGFlqKCkVShHkAttsKV2kQ3iHHj8=
Subject key identifier:   EB:D7:1B:6C:1D:66:96:E6:D8:85:09:A4:B6:22:4A:7F:58:71:99:41
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DE30C190327167393B0229240
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cfc409e1-4fc3-3432-afcd-7daeb6f32eae.roa
Signing time:             Tue 19 May 2026 15:54:27 +0000
ROA not before:           Tue 19 May 2026 15:54:27 +0000
ROA not after:            Mon 17 Aug 2026 15:54:27 +0000
asID:                     9009
IP address blocks:        216.183.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e3:0c:19:03:27:16:73:93:b0:22:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 19 15:54:27 2026 GMT
            Not After : Aug 17 15:54:27 2026 GMT
        Subject: CN=2a086e47-dd1c-44fa-bb55-9a3e6674e849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:76:f8:b9:49:49:f2:08:9e:7e:c3:13:a2:
                    36:13:e1:5b:39:7a:78:e3:2d:40:68:29:fb:a4:03:
                    74:5e:d8:74:b3:ba:93:c6:cf:72:3d:3e:1a:16:69:
                    2b:df:d2:2f:6c:b2:20:4c:79:4f:da:ee:c4:12:67:
                    15:17:6a:dd:c8:72:cd:1e:b6:57:83:65:f9:ec:5d:
                    ff:84:e0:cd:d0:48:7d:e9:f0:04:1c:90:da:76:31:
                    44:f8:5c:06:d8:71:20:f3:f9:8e:83:5b:39:9b:da:
                    fb:b7:20:70:17:de:22:86:31:3d:5e:ca:84:f8:07:
                    61:3b:dc:2b:d1:9f:cb:ea:39:d5:44:8f:73:8f:96:
                    59:1c:b3:54:d0:01:c9:03:64:81:37:1b:4c:b1:e4:
                    79:29:c8:4c:5f:e3:ec:c2:d0:8b:b3:55:43:b2:99:
                    e9:43:d4:23:81:47:b0:3b:37:24:72:f0:d4:32:dd:
                    69:22:7f:75:7c:37:f2:1a:a3:88:a9:a8:4a:f4:3b:
                    ed:75:1a:d7:3f:9d:1c:3c:77:da:a9:79:8d:e0:98:
                    2b:ef:f2:fd:3e:28:68:3c:2c:ea:2d:f6:28:bc:ff:
                    a3:c6:34:72:ae:4a:2e:96:44:b3:cf:ab:b7:da:ad:
                    fd:f4:61:30:06:2b:de:46:ab:74:5b:b5:1a:44:6c:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D7:1B:6C:1D:66:96:E6:D8:85:09:A4:B6:22:4A:7F:58:71:99:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cfc409e1-4fc3-3432-afcd-7daeb6f32eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e7:83:b2:5d:1c:e6:b4:8e:1b:56:4a:1a:b4:d2:d7:23:13:
         65:e3:b9:11:cb:28:eb:d2:65:59:ec:98:7f:ff:fe:db:5b:55:
         80:5d:ae:09:11:bf:a0:8a:ec:2d:8c:db:ac:10:e7:df:b6:7d:
         8c:38:47:88:1d:a9:aa:fd:a6:c1:ce:26:95:be:62:94:12:18:
         0b:c9:2a:f0:fd:f0:6c:07:a1:99:f4:88:58:a5:f7:87:92:1c:
         28:d7:67:a1:7f:c0:86:3a:15:06:4d:4b:fc:c2:9a:21:f3:0c:
         fd:37:69:d2:f4:52:1e:68:29:1a:83:c7:63:94:ed:34:c3:df:
         76:0b:ae:37:78:31:1c:3a:e2:be:bc:f3:26:6f:91:61:fc:7a:
         03:f3:a8:f6:46:dd:96:48:46:11:c4:ed:85:c2:4d:99:b9:ca:
         0b:e5:ed:9c:d8:3a:74:26:88:45:31:25:f4:0c:75:2c:68:67:
         cc:0b:71:9a:fc:e3:5b:b2:76:86:38:6a:ce:4b:25:61:2d:d2:
         ea:11:f6:06:c8:d2:4a:90:d6:14:45:5a:78:56:ae:64:f3:c1:
         fb:5e:b6:a5:3e:e7:c7:1b:69:96:d9:c5:bd:00:f2:d3:4e:68:
         50:55:fc:db:0f:3a:0e:c2:30:31:f3:b9:b9:5d:3f:85:ed:27:
         7d:53:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 01:18:38 2026 by rpki-client