Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa6f95c0-86fb-362d-a08d-44ecb53c5c34.roa
File:                     fa6f95c0-86fb-362d-a08d-44ecb53c5c34.roa (raw, json)
Hash identifier:          RaK68NW0PeMuSyrMFIBKGZBErEl7qooVBAal19Fc+kk=
Subject key identifier:   E1:6D:FD:51:7B:31:C3:FF:9E:2E:C7:BA:F7:0C:41:3F:4A:22:95:3F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584EB57C5002EF6DC01C63CE6B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa6f95c0-86fb-362d-a08d-44ecb53c5c34.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     21769
IP address blocks:        209.236.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:50:02:ef:6d:c0:1c:63:ce:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=f1b0c668-e0ff-49e6-aea7-7cce7e8c9f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:10:0d:4f:1a:b9:a0:0b:d7:93:d2:8f:79:27:
                    11:f8:73:c7:83:8d:50:70:1a:23:7c:8b:7c:f9:c7:
                    b7:d1:28:04:9e:4b:d4:8e:ae:f9:a4:89:ef:55:cf:
                    b8:76:ca:45:fd:63:8b:d1:f9:8b:a0:7b:97:de:6a:
                    f7:ba:4e:53:ed:0e:43:fd:5b:7c:72:75:91:5f:a6:
                    71:90:d0:36:d3:79:81:4d:f2:2f:48:ad:fc:f7:22:
                    96:54:3f:54:d2:5f:28:34:29:bc:82:1f:cd:e9:05:
                    b2:eb:24:45:2b:a5:d7:2e:31:47:59:28:7e:1c:b0:
                    25:59:e0:7a:95:ed:59:ae:32:39:16:15:f6:ef:83:
                    05:47:ab:88:ab:1f:27:a7:1d:1c:e8:31:6b:57:c8:
                    d3:6b:db:4b:73:f6:de:d2:5c:fe:99:15:42:9c:89:
                    9a:8c:63:84:90:05:42:1b:79:a3:46:91:d5:42:36:
                    08:e3:db:2a:74:87:96:83:1a:68:4e:93:87:fc:4b:
                    85:32:56:ed:fa:01:58:05:d2:4c:0e:a5:67:c3:53:
                    a5:c5:cb:dd:e7:f9:76:be:85:4a:0a:1c:be:9d:dc:
                    92:5f:6d:e2:8a:66:2f:0d:d7:db:86:37:fd:89:85:
                    06:01:24:d9:df:b9:b6:78:22:f8:fd:f1:13:e5:ea:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6D:FD:51:7B:31:C3:FF:9E:2E:C7:BA:F7:0C:41:3F:4A:22:95:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/fa6f95c0-86fb-362d-a08d-44ecb53c5c34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:34:f2:a2:25:78:3f:de:a6:f0:22:bd:b9:4c:a3:cc:bf:7d:
         72:c2:1d:e4:e5:35:91:ff:f2:4d:fb:2c:a1:36:e0:e8:30:d5:
         b5:9c:3d:34:b7:5d:fb:a9:97:e0:05:23:1b:0a:15:6d:9a:fa:
         86:b5:dc:9d:e5:ba:b2:69:de:0e:00:47:d3:5c:e4:56:2c:e3:
         41:20:b2:45:ee:6c:ce:9f:5b:99:4d:fb:84:ed:c1:62:28:ea:
         cf:ca:b8:ad:d9:a6:52:1d:c1:a3:ed:76:32:3b:e8:6c:be:b2:
         5e:58:2c:28:13:65:82:34:25:71:67:10:03:55:8d:70:66:48:
         cd:1a:6d:08:34:3b:f5:94:4f:62:da:25:01:12:d8:6f:42:63:
         17:9f:71:f5:2d:65:d7:87:c2:c4:23:cb:11:d0:8f:c8:e3:dd:
         2d:e1:fc:ed:e8:c7:11:68:0c:36:da:71:74:9e:c9:6c:d5:94:
         16:f7:15:77:b9:b3:d3:3d:21:7b:3f:02:6d:cb:50:5c:ca:bd:
         cf:6d:d2:c4:19:66:96:f2:36:8e:7c:30:f7:06:30:82:bc:90:
         cf:cf:5e:5f:0e:ca:f8:ed:06:e0:c8:57:6b:0c:30:1e:cf:45:
         a5:c6:fb:ce:2c:fe:21:9d:10:ad:8c:a8:78:2c:b6:1c:50:a3:
         34:7d:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:17:09 2026 by rpki-client