Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ad4b9a0-3f6d-3801-ac8d-8276895c4536.roa
File:                     8ad4b9a0-3f6d-3801-ac8d-8276895c4536.roa (raw, json)
Hash identifier:          6xVWaSttfDHF9YmDZZ8m1T/fUeGqJy1JkaQa354+UlI=
Subject key identifier:   1B:95:CA:EC:81:E9:44:9A:58:FC:61:21:D6:4F:AC:C5:33:ED:58:26
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F49730616AC41FD934463BD00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ad4b9a0-3f6d-3801-ac8d-8276895c4536.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        209.236.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:06:16:ac:41:fd:93:44:63:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=14c5f0e9-8ea1-4cd6-bc3c-6e24176fd4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:98:4a:03:71:fa:98:06:69:65:40:4e:32:b4:
                    87:b6:41:7c:af:bf:7a:56:8d:d5:f8:12:26:d5:42:
                    c9:82:9e:4d:e4:c8:b0:68:37:62:ba:db:83:dc:fb:
                    b9:64:60:44:33:78:18:a1:71:c9:7d:a6:99:bb:f8:
                    65:e0:7d:23:47:2f:38:92:93:99:06:e4:ed:5c:51:
                    03:39:6f:99:21:ac:cc:23:af:04:68:d0:a5:57:af:
                    dc:7c:fa:3a:ea:92:ea:66:61:dc:41:e7:c3:42:66:
                    cc:df:a4:c0:83:1f:93:c4:b6:0b:be:7b:51:eb:4e:
                    a0:05:a4:06:a3:1e:52:d3:b8:39:e1:8f:bf:e4:d8:
                    b8:64:69:3b:de:8a:d8:a9:44:f5:a8:28:8e:7c:cb:
                    b3:8f:62:c3:4d:f7:5e:a0:08:31:97:87:51:fa:63:
                    c6:25:ac:0a:35:be:74:1c:eb:33:42:c4:88:80:e3:
                    51:e5:cd:6e:04:18:94:19:86:20:35:5a:8e:dd:69:
                    ef:61:f8:b4:81:ee:81:64:df:a8:c6:e2:f2:58:f5:
                    5a:2a:ac:e7:ad:71:5e:f3:02:92:67:5c:b4:b2:31:
                    8e:04:83:f2:10:5f:b4:fc:dd:a6:32:99:7c:e4:d5:
                    f8:f4:c5:a1:3d:52:f3:7e:03:1d:16:df:dd:55:c8:
                    0c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:CA:EC:81:E9:44:9A:58:FC:61:21:D6:4F:AC:C5:33:ED:58:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ad4b9a0-3f6d-3801-ac8d-8276895c4536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dc:73:9e:fb:ed:f0:92:16:3e:1b:cb:43:dc:dc:1a:dd:f2:ca:
         14:43:e8:31:60:33:23:ad:ce:3e:d4:ef:f3:3f:57:01:36:a8:
         fc:56:e7:93:70:fd:88:18:92:2a:fe:c0:ef:bb:fb:4c:35:ad:
         11:10:97:bf:59:12:36:e9:e1:79:0d:8b:52:2b:6f:4d:53:14:
         84:5d:6b:29:b2:4d:e5:b6:0a:79:c4:9f:be:95:6c:ec:63:77:
         33:6f:d0:5d:01:74:b5:0f:f2:7b:85:1c:5e:b3:ce:ce:5b:11:
         16:2a:97:f8:13:5d:a5:d5:60:e6:33:3d:4e:56:0f:a8:b1:76:
         61:d5:7a:55:94:cf:eb:1f:81:3d:8b:7c:3e:db:5b:36:4e:00:
         2a:0a:2b:33:f4:18:1f:d0:c4:2c:14:01:56:02:b2:1c:36:ae:
         9b:ca:3c:e7:a6:c8:84:63:f0:50:aa:b2:3d:f8:2c:28:6b:2f:
         e4:58:e9:1a:4b:f5:c9:43:06:48:70:02:b9:20:9a:b1:55:20:
         a8:54:bd:a8:8d:44:10:9f:df:47:1c:16:ef:d0:a0:0e:f1:57:
         db:00:34:6b:b4:e6:82:bf:bc:0e:5c:2e:e9:5a:32:aa:bf:78:
         60:7e:36:2f:85:46:e8:16:b8:7e:d2:fd:8c:3e:6d:d7:4c:71:
         7b:0c:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:18:32 2026 by rpki-client