Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa364d71-f0cc-3e57-88c3-19010301bd7f.roa
File:                     aa364d71-f0cc-3e57-88c3-19010301bd7f.roa (raw, json)
Hash identifier:          Yr9keJlUWIfvFcZHWni82KE4y5MHeVUmNpWJXJtGa40=
Subject key identifier:   EA:BF:23:64:4E:0E:8E:BB:26:A4:9F:FE:FA:D9:69:30:20:91:7E:60
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F498BC55A4C4BFF431617FBD8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa364d71-f0cc-3e57-88c3-19010301bd7f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     142111
IP address blocks:        173.211.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:c5:5a:4c:4b:ff:43:16:17:fb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d141982a-abc6-4c84-963a-65b66bf8ce40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:d4:e0:f3:0d:ff:c4:73:9d:9f:7b:e2:f0:
                    2c:b8:94:7d:22:69:45:c2:08:e3:12:b9:27:09:8d:
                    3d:ff:c7:54:60:1f:25:1e:7b:e8:9d:a9:1a:6e:7d:
                    1d:89:32:4b:f1:01:2a:b7:84:c6:62:ac:99:60:7a:
                    11:05:d5:c6:1a:6b:9c:1c:8d:0b:ba:50:20:28:2e:
                    2e:46:36:6b:7e:df:f1:dd:6e:6a:0a:c5:f3:41:64:
                    f3:3c:07:80:48:ef:86:94:35:73:2c:fe:ba:e3:33:
                    e1:7b:03:5f:60:f7:8e:23:47:85:5b:08:e1:1f:2e:
                    09:45:30:bc:03:3f:1e:3f:61:68:8e:2d:4b:e9:2c:
                    84:d3:e3:51:dc:1f:d0:0a:8c:6d:10:f0:d5:1c:3d:
                    96:33:c7:6c:ac:29:11:af:9d:8f:a7:d7:67:e0:fb:
                    0a:8a:e2:be:75:1c:20:c4:8b:f1:d0:e6:b5:bc:4d:
                    86:7a:0e:9f:1b:64:94:a2:96:13:cc:6e:90:4f:e8:
                    39:a2:38:7a:fb:87:56:2d:b4:ab:a2:86:ee:ca:2a:
                    15:f7:64:59:17:ae:af:7a:01:0e:6f:4f:1d:c2:21:
                    b1:77:09:ed:8f:1b:8a:a8:a4:91:cb:2c:49:f3:7f:
                    a2:44:89:60:e7:5f:e1:f0:11:04:fa:5c:5e:fd:00:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BF:23:64:4E:0E:8E:BB:26:A4:9F:FE:FA:D9:69:30:20:91:7E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa364d71-f0cc-3e57-88c3-19010301bd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:8d:fa:52:f9:2c:a6:31:29:80:d7:9c:d8:b3:78:c9:0b:
         94:13:9d:4a:d2:29:b1:bf:7e:a5:b4:7f:cc:e7:b5:6d:71:0d:
         11:e7:92:68:d0:21:7f:79:18:66:83:b2:f3:8f:75:98:8c:88:
         61:ab:c0:e7:4b:9e:58:9b:e0:eb:02:b8:3f:f5:25:23:12:1d:
         57:85:0b:9f:4c:52:d9:97:6e:44:bd:cd:d3:33:98:4a:9b:5e:
         ee:01:77:df:fa:12:a2:24:40:77:6d:d3:66:ea:62:dd:8b:f2:
         30:9b:79:d7:92:05:59:64:ee:d7:0e:97:5a:72:4e:5e:a4:24:
         49:d6:78:83:bb:8e:ab:9c:3f:51:40:df:c2:1d:7e:a8:3d:63:
         37:6d:f4:c2:9e:c4:fb:6e:d4:03:f4:3a:bc:81:78:05:56:f1:
         05:c9:73:57:4e:0f:3b:3e:14:0f:e6:6d:aa:98:89:02:5b:d2:
         15:30:a0:b6:b5:f2:c7:54:5e:13:a7:71:35:f6:41:76:99:6f:
         b0:1f:e0:42:6c:41:4f:b1:dc:fb:e5:63:27:eb:80:82:74:a4:
         69:39:39:18:17:55:80:d8:6e:3c:4a:68:60:f3:2d:dc:ac:04:
         35:90:19:ae:a2:22:d2:11:57:f6:52:78:67:f4:1d:79:88:1a:
         f5:4b:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:21:05 2026 by rpki-client