Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea080002-ca8d-3d0a-9cef-067a1cc6a3bf.roa
File:                     ea080002-ca8d-3d0a-9cef-067a1cc6a3bf.roa (raw, json)
Hash identifier:          4ZKxOt4jLMA6Gml6dlHeBJUvITTyh3/MVLabkVjBALM=
Subject key identifier:   52:53:E2:60:AA:E4:F7:21:56:32:40:B9:34:D4:8D:71:7B:DD:23:8F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EF4D8D5D43DB1C0F1F3F2BD80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea080002-ca8d-3d0a-9cef-067a1cc6a3bf.roa
Signing time:             Tue 25 Aug 2026 17:42:39 +0000
ROA not before:           Tue 25 Aug 2026 17:42:39 +0000
ROA not after:            Mon 23 Nov 2026 18:42:39 +0000
asID:                     20473
IP address blocks:        209.137.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:d8:d5:d4:3d:b1:c0:f1:f3:f2:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 25 17:42:39 2026 GMT
            Not After : Nov 23 18:42:39 2026 GMT
        Subject: CN=60631d71-975f-4c16-9e66-61075b14ced6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:4f:ab:18:59:8f:61:c8:ac:54:66:72:d1:
                    d8:51:64:f0:3b:e8:54:a0:6d:7e:ba:03:2b:46:ed:
                    da:69:04:1b:0b:8d:3e:77:2c:3e:7c:d3:c6:b5:50:
                    6f:1f:e1:42:ea:f5:94:aa:18:3f:1d:ab:ef:c5:6b:
                    77:fd:66:a3:64:32:6f:61:f4:01:97:3c:fc:d3:30:
                    5c:20:95:92:81:95:de:05:1e:10:83:b4:be:86:e2:
                    55:2c:95:53:7f:48:28:46:87:46:05:42:a3:86:01:
                    03:13:b9:3a:22:cc:32:ad:37:d3:27:40:2a:f2:f1:
                    68:8e:8a:06:be:f3:7e:f1:ce:e5:67:77:f5:7c:c9:
                    1b:9d:83:22:e5:bf:45:ea:3a:33:de:40:3c:e5:96:
                    2d:fb:cc:cf:e6:fd:74:b9:bc:99:e9:48:b0:e8:9e:
                    ab:bb:98:12:9e:e2:61:c4:de:45:13:be:32:a1:cc:
                    59:34:20:1f:3c:7f:84:bd:4a:87:33:9f:28:e1:ea:
                    66:d5:32:b1:93:a8:c7:35:8b:f1:84:07:85:b9:45:
                    21:d2:bd:d8:d6:3f:cd:2a:37:57:d0:4a:1d:e6:9c:
                    b2:7d:71:01:ea:3f:dd:4d:5c:5a:c2:8a:75:e3:bd:
                    0d:52:57:59:e4:60:7c:e4:cc:00:e4:f6:b1:70:c3:
                    f1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:53:E2:60:AA:E4:F7:21:56:32:40:B9:34:D4:8D:71:7B:DD:23:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ea080002-ca8d-3d0a-9cef-067a1cc6a3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.137.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:9d:64:16:5f:2f:5c:01:84:d4:28:91:71:c0:f4:81:f2:32:
         5c:f5:a9:cf:3d:fa:5a:fa:38:79:19:8f:b9:ac:ec:79:a4:94:
         1e:aa:83:06:d2:fb:23:88:67:54:e4:3d:6d:a2:45:81:2d:4c:
         9b:3c:5f:e2:b1:b8:e1:4b:3e:2e:70:b3:67:6c:2a:10:9f:9d:
         7e:37:06:33:0a:98:ac:19:44:ae:1f:61:0c:82:50:9b:43:61:
         29:ea:29:24:89:cd:7a:48:60:47:1f:15:89:7c:8f:79:77:6f:
         69:5d:d1:99:0e:0c:0c:8e:39:f3:84:31:dd:ee:9d:ae:ad:95:
         e7:c6:15:9c:f6:74:23:f7:a9:57:46:58:a9:48:c9:23:10:8d:
         96:36:14:2f:28:f0:64:bb:bb:7b:55:83:9c:3d:5f:96:1a:a3:
         1a:a7:36:47:83:d7:c5:69:92:96:56:de:e7:43:ca:28:02:0f:
         e3:bb:29:32:8a:fb:f7:30:b4:fe:cc:f8:7c:c6:a5:63:51:b0:
         87:88:bb:46:70:a8:1d:ab:07:08:6a:b2:b8:f6:01:59:c7:8d:
         28:ec:ff:2b:91:6a:fc:38:65:6b:f1:62:14:74:ab:cc:7d:43:
         0a:44:0e:5b:cf:c6:dd:93:32:da:76:8e:e2:80:79:00:da:c1:
         52:2b:c3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:56:20 2026 by rpki-client