Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfd3b2f0-8122-3427-8b32-036a02298282.roa
File:                     dfd3b2f0-8122-3427-8b32-036a02298282.roa (raw, json)
Hash identifier:          lms5WSD/Vy6xaIre86hZwDZFqqpqgDj7yelfNfjXIpw=
Subject key identifier:   8D:75:2F:BA:5C:20:E3:AF:CB:55:69:C1:8C:75:85:E4:4D:EB:B8:BE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E95F4E1368B7737E6E3B569F4
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfd3b2f0-8122-3427-8b32-036a02298282.roa
Signing time:             Wed 22 Jul 2026 17:57:22 +0000
ROA not before:           Wed 22 Jul 2026 17:57:22 +0000
ROA not after:            Tue 20 Oct 2026 17:57:22 +0000
asID:                     17252
IP address blocks:        67.203.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:95:f4:e1:36:8b:77:37:e6:e3:b5:69:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 22 17:57:22 2026 GMT
            Not After : Oct 20 17:57:22 2026 GMT
        Subject: CN=882262d6-4407-4318-85a0-8eb72eb3e17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cf:fc:59:69:c3:3c:97:43:38:05:71:44:f9:
                    90:ab:84:79:85:1b:a0:6b:34:24:ab:0e:f7:62:2a:
                    64:1d:17:a0:8f:04:45:46:13:bd:6c:15:91:42:78:
                    a3:ea:d4:2e:60:bc:49:e0:c7:2f:0c:78:80:c2:8a:
                    60:20:4c:67:fa:02:8e:53:8d:33:2a:14:03:f2:f3:
                    14:33:8a:fb:e1:2c:ab:f9:0a:96:c5:e3:f4:d8:a3:
                    e5:78:a6:ce:56:3e:c2:83:01:e7:5f:96:be:fb:63:
                    99:f6:57:18:55:12:e6:08:70:9a:1a:81:2a:d8:7e:
                    26:7b:bf:76:a7:c6:88:8e:02:e2:93:a9:0b:c0:60:
                    be:e5:7a:e4:e9:cc:21:7d:ef:c7:09:81:48:42:b0:
                    38:eb:4c:4d:62:ed:4b:62:c5:98:a0:47:ec:28:0f:
                    41:6a:97:8c:84:bf:a4:d9:a6:7c:be:09:e2:8a:fe:
                    b5:43:ba:e2:15:8f:a6:52:02:9d:37:b8:c6:43:f4:
                    78:cb:cc:7d:08:c7:c6:04:a9:8c:e9:67:cf:d6:95:
                    05:83:8a:4a:1e:49:60:3d:79:c1:55:70:b2:c8:d7:
                    34:75:47:54:de:aa:32:da:b4:ad:0a:b8:5b:fc:d4:
                    83:f1:a8:57:27:ff:f8:7f:c6:5b:9a:57:1d:f5:49:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:75:2F:BA:5C:20:E3:AF:CB:55:69:C1:8C:75:85:E4:4D:EB:B8:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dfd3b2f0-8122-3427-8b32-036a02298282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:55:b9:17:27:a2:14:f0:a8:cb:60:b9:67:2b:65:67:63:
         2f:0d:f7:5b:2c:6c:8f:1a:f2:b1:a0:1f:e4:eb:63:8e:b7:bf:
         39:e9:32:d6:45:60:bd:5f:63:e0:35:41:7c:58:3d:f7:50:18:
         b5:c2:3c:02:33:55:ce:49:7f:3a:25:53:0b:6d:9f:f3:55:46:
         6c:ac:4f:d4:3d:c6:6b:a9:be:7a:2d:53:0e:54:29:19:24:a5:
         39:f4:15:c2:fb:9a:0c:9f:6c:89:d7:fd:b2:ac:3c:b1:51:24:
         1f:48:8b:f7:6a:ea:68:ba:76:64:06:93:55:e7:31:bd:2d:53:
         d2:67:7e:2c:db:7b:7f:67:06:cd:55:65:c5:f5:1e:59:52:3b:
         20:7d:90:1c:c8:f9:15:e4:d9:19:9f:ec:73:dd:d0:88:68:7e:
         6a:e6:8c:cc:5a:8c:60:23:8d:32:4b:0d:90:7d:94:07:b2:dd:
         3f:ec:fa:34:40:a8:3f:5c:d2:fe:27:e7:af:3a:17:3c:3a:e2:
         12:be:21:e0:9a:83:4a:d7:c4:df:74:24:2b:6b:15:2e:0e:e7:
         22:7f:69:07:a2:bf:f8:09:36:91:1e:30:39:0f:70:b1:10:88:
         33:97:70:6d:28:59:1f:ed:2d:13:e8:1e:b9:5d:b4:18:f7:8a:
         a0:3e:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 12:44:22 2026 by rpki-client