Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f43e8f3e-a10c-3236-8eef-4db61cf1eefe.roa
File:                     f43e8f3e-a10c-3236-8eef-4db61cf1eefe.roa (raw, json)
Hash identifier:          slnP8YeWFGD5JjIGsSif4h/n8wDCraOd2f+ig/XvpWo=
Subject key identifier:   54:53:AD:23:D1:4D:8F:02:14:2B:62:3B:E6:F8:EB:D4:FC:17:15:1F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DEB4522D683A982CE14944980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f43e8f3e-a10c-3236-8eef-4db61cf1eefe.roa
Signing time:             Fri 22 May 2026 14:35:50 +0000
ROA not before:           Fri 22 May 2026 14:35:50 +0000
ROA not after:            Thu 20 Aug 2026 14:35:50 +0000
asID:                     203149
IP address blocks:        209.236.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:45:22:d6:83:a9:82:ce:14:94:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 22 14:35:50 2026 GMT
            Not After : Aug 20 14:35:50 2026 GMT
        Subject: CN=3d56a14e-1e38-4cf6-9740-e9fece98d9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:89:a6:5a:cb:90:a9:c9:a4:ea:3f:a5:0e:
                    14:d5:18:68:e8:bd:e5:d3:44:eb:12:ca:fd:71:dc:
                    8f:8c:80:c4:e0:7b:c4:63:92:ea:39:43:db:bd:54:
                    50:7e:bb:4f:93:40:38:32:94:3a:69:0d:78:fc:f9:
                    90:b3:4b:e5:ab:05:41:b3:c8:d6:b0:2e:46:e4:66:
                    99:03:2b:bf:22:76:fd:53:39:a0:74:71:cf:94:d5:
                    c7:97:38:5b:14:e7:d0:0e:5b:c0:9d:02:25:0f:d6:
                    80:bc:70:11:64:24:88:c2:aa:90:de:48:14:92:b0:
                    bb:98:f1:a3:65:77:01:a1:b3:27:78:a2:47:7f:81:
                    0d:db:6f:a3:6c:67:40:a1:08:96:f4:11:34:54:cc:
                    8f:34:5d:e4:1a:08:61:9e:9b:94:47:31:3e:cb:e4:
                    45:40:64:26:ab:c0:b1:98:59:c0:dd:b8:bb:8d:39:
                    65:7b:ed:08:a8:8d:e9:33:8d:8f:ee:64:ef:c1:db:
                    8e:21:25:50:6d:a5:f6:63:b1:0e:c1:1d:51:18:f2:
                    83:7e:4d:84:e7:69:a6:62:8f:97:ed:06:2d:88:c2:
                    12:09:a7:67:7d:78:b3:49:a6:70:0c:20:10:8e:4f:
                    3f:fe:bf:ee:74:aa:42:19:f8:ef:0c:1a:d1:4d:1d:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:53:AD:23:D1:4D:8F:02:14:2B:62:3B:E6:F8:EB:D4:FC:17:15:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f43e8f3e-a10c-3236-8eef-4db61cf1eefe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:79:be:72:8f:8b:3d:49:c7:23:a3:69:06:b6:8b:91:bc:98:
         b7:c9:3e:0b:fb:26:5a:31:d4:40:3a:7b:9d:70:14:ab:02:0f:
         b2:57:1e:b8:df:83:8c:86:7b:35:10:ef:2b:0f:ff:11:52:f4:
         eb:f6:84:ab:4f:4a:5b:30:ff:0e:74:92:e7:94:3d:d8:2e:1f:
         20:af:22:04:29:dc:61:07:71:bd:2a:ed:c1:29:0a:fa:6c:59:
         b1:2f:2e:31:a4:86:b4:2a:64:cc:20:cf:36:2c:1c:09:88:63:
         bc:4d:47:e7:08:3c:54:1d:15:67:b5:4b:44:f7:72:4d:6e:3c:
         4b:5f:16:be:9b:27:e5:1c:6c:3f:6e:a3:8a:c8:6b:24:e0:d7:
         d8:62:19:9b:ce:fe:1d:85:b9:68:46:7e:fc:9d:aa:55:02:8c:
         a4:d1:ee:55:55:f6:d2:58:f2:e2:5b:c3:3d:7f:47:c9:ef:54:
         8f:a3:e0:8f:25:18:74:00:d8:fb:a3:ce:1e:e1:84:cb:19:ef:
         46:2a:36:49:ba:c6:90:36:e1:8f:ac:5e:8b:3f:db:fc:a2:48:
         d6:5e:c7:ff:c6:88:56:3f:84:94:ad:9d:74:4a:31:99:b5:49:
         76:d2:8f:4f:dd:17:8b:31:cf:38:74:2d:f2:3d:e0:c7:11:0c:
         01:27:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 04:25:51 2026 by rpki-client