Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d028d0fc-8116-30a4-9d75-f0f83672881b.roa
File:                     d028d0fc-8116-30a4-9d75-f0f83672881b.roa (raw, json)
Hash identifier:          uuYxfSVAVyYkwr+qNYqucu2e2MRgcoscUObOZ+GjkhE=
Subject key identifier:   A7:FA:3B:1A:18:45:4F:F0:17:C0:0B:9A:64:D1:20:9F:8E:23:A8:2B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E5B452D5BA4CAA64B02B875C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d028d0fc-8116-30a4-9d75-f0f83672881b.roa
Signing time:             Wed 01 Jul 2026 17:26:27 +0000
ROA not before:           Wed 01 Jul 2026 17:26:27 +0000
ROA not after:            Tue 29 Sep 2026 17:26:27 +0000
asID:                     834
IP address blocks:        209.92.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:45:2d:5b:a4:ca:a6:4b:02:b8:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 17:26:27 2026 GMT
            Not After : Sep 29 17:26:27 2026 GMT
        Subject: CN=e9e899fe-7fb8-41c9-957a-8a4ad888e011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:77:04:61:86:6a:d4:06:69:71:7a:d9:0f:
                    1a:1a:4d:04:94:43:26:f8:01:7c:58:85:bb:fd:f5:
                    2f:cf:7b:5d:af:82:f8:c3:16:c2:79:b4:95:4a:01:
                    28:00:dd:eb:e7:d6:cc:14:18:79:9e:9c:8a:6e:5a:
                    aa:40:1b:8a:97:c1:86:80:dd:41:07:b8:86:62:d4:
                    dd:08:39:84:b5:47:09:a5:33:31:75:c0:e3:0b:34:
                    9c:96:7a:5d:36:01:1d:fe:4d:c5:63:41:8c:ab:ff:
                    62:91:44:cd:43:4b:2e:96:87:d9:98:c3:2b:0e:90:
                    f1:21:14:91:c0:eb:e5:3e:4f:16:17:44:ca:aa:15:
                    3e:b2:eb:7d:ae:7d:4d:6a:72:93:01:07:2d:83:64:
                    c4:52:b0:b9:93:0a:2a:96:19:43:8e:5a:5e:57:7a:
                    db:07:1a:e7:f3:30:20:54:75:a8:af:21:1f:be:66:
                    d1:d6:41:91:69:e6:fb:e4:9a:a9:5f:54:e1:45:23:
                    ba:43:84:cd:50:31:17:88:a1:76:83:9a:b8:95:a3:
                    ef:74:79:a2:23:e2:07:40:5d:e4:6e:41:c4:b3:e2:
                    b1:73:27:2f:38:f5:d0:03:34:b4:4f:08:18:78:20:
                    47:db:46:51:e3:bd:5d:2f:5e:35:0a:8d:7e:9b:ee:
                    19:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FA:3B:1A:18:45:4F:F0:17:C0:0B:9A:64:D1:20:9F:8E:23:A8:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d028d0fc-8116-30a4-9d75-f0f83672881b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:4c:0b:2e:74:53:6e:f5:4e:1c:56:f0:b6:cb:7a:b5:0e:87:
         76:f5:7b:65:6c:c7:f4:7c:18:f6:bf:43:01:e8:96:23:df:c3:
         5f:90:c1:0c:15:5d:d7:5b:bd:58:37:d0:59:1b:48:fd:72:81:
         4a:30:c8:2e:2c:a8:01:cc:ae:1d:48:cc:52:4e:a3:23:f8:46:
         e5:f4:9f:7b:f8:87:24:60:49:81:c4:88:55:95:21:03:d2:e0:
         b6:3f:ab:dc:c3:b5:86:bb:22:76:9b:a3:ff:c2:5c:35:96:7d:
         f4:f5:b6:c6:da:e8:38:12:99:95:b2:35:a5:d5:dd:18:4d:1c:
         4a:c1:45:81:57:17:dc:41:93:30:68:89:d7:e6:33:51:44:31:
         d9:f6:e7:da:ce:41:be:5a:95:50:dd:09:aa:35:53:4e:3d:12:
         ae:cf:e2:63:c5:14:c4:95:be:bf:c0:3d:f5:cc:bc:45:24:2f:
         01:3b:6a:b9:04:4c:f5:1d:2e:31:e9:8a:d4:cc:32:5a:f2:81:
         65:78:b2:5e:fe:a4:c1:90:e9:50:86:89:5d:a0:28:46:10:da:
         0a:bd:70:20:d3:9f:55:eb:cd:b5:e1:0b:b1:6a:1b:19:68:58:
         12:21:3f:87:d8:98:7c:55:21:58:65:b2:bc:9d:94:73:62:e0:
         78:dd:bb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 2 12:21:44 2026 by rpki-client