Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0dd8e3a-39d2-339a-bbbd-f618684cd0e1.roa
File:                     f0dd8e3a-39d2-339a-bbbd-f618684cd0e1.roa (raw, json)
Hash identifier:          PEW9ib2iv9uW3BX0HCborssIfYB57P/Pl/zUtnn8o6M=
Subject key identifier:   53:17:40:EE:C7:D0:08:2C:2E:9B:B3:9A:C0:85:F2:DB:77:2C:C7:55
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E0777DE5D092ACE40FDF30300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0dd8e3a-39d2-339a-bbbd-f618684cd0e1.roa
Signing time:             Mon 01 Jun 2026 17:00:41 +0000
ROA not before:           Mon 01 Jun 2026 17:00:41 +0000
ROA not after:            Sun 30 Aug 2026 17:00:41 +0000
asID:                     9304
IP address blocks:        209.92.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:77:de:5d:09:2a:ce:40:fd:f3:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  1 17:00:41 2026 GMT
            Not After : Aug 30 17:00:41 2026 GMT
        Subject: CN=0c92143e-06b0-4976-97da-87a725e6e668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:63:c3:fc:7c:b4:c0:a6:89:cb:ca:3c:f4:
                    c5:56:1c:52:6f:2f:d4:ed:0e:38:af:bc:eb:ee:ec:
                    fe:ee:da:34:94:43:4c:17:60:5b:ed:37:c6:60:dd:
                    9e:d6:4e:24:ff:5a:6a:85:49:b0:90:a3:7e:4c:85:
                    7d:76:24:78:10:2f:0d:ca:a0:11:fc:05:91:29:7f:
                    26:1f:6b:f0:ec:a1:5b:66:67:a1:bf:54:6a:86:f0:
                    20:1d:a3:2c:ba:64:50:3d:0e:2b:3a:36:9d:f3:9d:
                    26:a4:7e:be:6a:fd:cb:a0:7e:f4:7d:2f:3c:15:63:
                    f5:33:8b:31:6f:61:58:eb:1b:a4:11:94:92:78:29:
                    85:ac:5d:f4:56:6f:19:2d:2c:0c:50:b3:36:37:c6:
                    2a:67:a0:28:2d:a5:5b:62:d3:1a:76:a1:54:2a:84:
                    5c:30:a8:97:9d:f2:a7:ac:0b:30:f7:1b:4d:8d:b3:
                    9a:14:c1:45:dd:7d:df:c5:51:b1:ef:4a:44:66:f4:
                    80:1a:09:12:55:4c:ab:59:06:f0:0d:4c:af:66:12:
                    bc:1e:fa:fb:42:76:9b:49:a5:90:78:71:87:1c:c1:
                    d1:ce:ae:24:10:a0:72:e6:a0:e5:22:41:bf:6c:d2:
                    e2:36:fe:1f:82:70:ab:81:26:b5:d7:00:de:5b:7b:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:40:EE:C7:D0:08:2C:2E:9B:B3:9A:C0:85:F2:DB:77:2C:C7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f0dd8e3a-39d2-339a-bbbd-f618684cd0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ed:62:fc:9f:51:ca:17:26:e5:28:fa:dd:7b:74:93:48:68:
         21:fd:2c:41:11:e5:9f:82:42:27:08:c1:68:71:0a:1f:16:29:
         ec:fe:e2:d7:04:59:d5:d1:f1:42:8a:b1:21:95:b2:72:7a:85:
         2f:69:40:e7:1f:56:19:40:18:2d:4c:5a:22:8a:43:65:16:f7:
         22:2c:14:d4:ea:be:a3:c3:e5:f3:8c:c8:b2:a7:9b:bc:b5:5a:
         88:0c:09:1e:51:03:d0:3c:da:2d:71:1d:1e:f9:66:c2:0c:a6:
         5b:20:d4:9c:8b:20:d8:8c:f9:58:6d:4c:7d:32:2b:be:89:ae:
         27:77:50:68:20:45:c6:dd:0d:be:2a:74:a9:b3:2a:b5:6a:fc:
         e5:d9:57:3b:d8:bb:7d:ee:df:bc:64:a5:3d:67:2f:d5:93:0e:
         16:c7:be:43:91:a0:2f:77:3f:c3:9d:4a:bc:52:d7:bb:f6:50:
         28:fc:f3:1e:07:0f:62:be:43:e4:07:28:c1:99:f9:e0:c0:b6:
         55:f1:a3:bb:86:e8:3e:4a:ce:11:80:71:c0:83:03:d7:ee:51:
         89:df:bf:5e:6c:22:8f:b1:a3:e8:f9:e1:35:48:d3:db:0b:2c:
         6f:07:95:cc:6d:a4:84:5b:79:14:69:51:f0:b4:21:fc:29:72:
         d3:b6:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:11 2026 by rpki-client