Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/55a00407-f7f9-3dfc-afc4-f1b99e163c87.roa
File:                     55a00407-f7f9-3dfc-afc4-f1b99e163c87.roa (raw, json)
Hash identifier:          1bul0BnCc9/iFYXxZzWp8JuT1l6RktAz3B7npSGNyVA=
Subject key identifier:   E4:E7:34:C0:A8:C2:F6:CB:39:14:4D:7D:C8:A3:68:63:81:9D:8F:BA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4277D0D77F9AAA47DC9F9E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/55a00407-f7f9-3dfc-afc4-f1b99e163c87.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     834
IP address blocks:        209.92.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:d0:d7:7f:9a:aa:47:dc:9f:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=662089f8-39fc-41ef-840c-f26db70cf1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:cc:76:c9:4f:e7:f9:94:78:ec:10:03:5a:
                    5b:4c:f6:54:15:41:dc:36:e9:98:be:dc:85:0b:48:
                    7e:5e:77:cd:78:aa:68:aa:d5:da:b4:99:b4:ba:66:
                    a2:cf:08:b8:ac:39:e5:76:ad:0f:6d:15:e0:61:0a:
                    44:1d:b9:ff:aa:4d:c1:62:c2:e3:66:5a:90:df:db:
                    07:20:07:f0:8e:91:aa:31:81:b6:98:1c:8b:dc:1a:
                    e3:3a:ac:cf:5f:48:5c:3e:52:b5:38:63:a9:cb:6e:
                    27:94:85:0b:bb:a2:53:73:19:80:af:44:94:27:29:
                    ce:1a:e1:e7:d9:06:a4:e5:2b:cd:ed:cd:12:57:aa:
                    2b:a9:e8:68:58:12:4c:64:c6:5f:7b:eb:66:cf:56:
                    b2:bd:f8:09:8e:1e:70:30:2d:42:e3:00:fb:96:06:
                    c8:f8:b1:bd:00:4b:b9:2d:7e:6f:81:0b:93:25:a3:
                    f3:27:e1:fd:98:e8:54:32:df:8f:14:4a:64:ee:50:
                    21:9a:50:33:9e:be:3a:41:ce:c3:0b:be:4d:40:00:
                    93:67:a2:40:b2:ed:ef:f4:d0:2c:39:06:1d:f1:e2:
                    fe:96:75:c1:03:57:62:3f:8f:0d:4b:13:e3:49:2a:
                    e5:b5:68:f3:50:37:e9:8e:48:97:db:0a:65:80:bb:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E7:34:C0:A8:C2:F6:CB:39:14:4D:7D:C8:A3:68:63:81:9D:8F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/55a00407-f7f9-3dfc-afc4-f1b99e163c87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2e:2d:a7:99:b0:82:44:00:20:33:c7:97:2c:31:d8:b1:d6:
         b3:b4:6b:f4:c4:ce:dc:d8:e1:aa:c6:eb:32:80:3d:8f:3c:32:
         44:df:80:47:39:f1:f8:e0:bb:50:3c:cf:e9:b9:7a:4d:e1:a0:
         c8:86:48:f8:a3:8f:3b:89:0a:79:c9:8b:53:00:a0:cd:db:95:
         49:ff:77:72:2b:bf:f0:e9:ce:4e:ef:81:df:08:54:4b:3c:f2:
         5c:b5:2f:54:de:1c:21:7a:00:52:87:bb:4a:f3:67:43:df:6c:
         e8:b2:30:8e:6f:53:8d:5f:af:10:a5:28:fc:80:75:3a:a6:fe:
         3c:34:24:57:f0:29:40:8a:0b:0e:6d:97:e5:1c:80:13:d1:71:
         1f:12:b4:30:a2:41:5c:41:1e:fc:0d:c4:09:da:48:53:31:66:
         63:e4:01:17:49:bc:7e:ad:4f:49:bf:22:99:8f:a7:6f:25:46:
         57:8b:c4:8e:15:bb:4b:c1:f6:e2:e6:74:c6:3a:0f:c0:2f:1e:
         fa:f0:02:29:0f:51:8f:94:93:cd:13:72:9b:2b:ed:56:93:2f:
         32:ac:64:33:2e:f3:19:21:bc:ad:09:8f:31:7f:95:c3:9c:e0:
         48:fd:81:9b:ac:cf:de:6d:6f:7e:7d:8e:51:79:91:45:8e:5e:
         fd:71:ea:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:43:40 2026 by rpki-client