Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad094b86-a0c1-38eb-b3b5-f19944936856.roa
File:                     ad094b86-a0c1-38eb-b3b5-f19944936856.roa (raw, json)
Hash identifier:          YPK5i0w5DZP7UoNHIHSmyOvtxs0/4hkmhlRtSLEXuZI=
Subject key identifier:   38:7F:E4:75:CB:6D:1D:35:CF:00:82:2B:F7:A1:0A:B2:08:B4:08:86
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DB7703F85D7009FBBCFB5B080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad094b86-a0c1-38eb-b3b5-f19944936856.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     174
IP address blocks:        209.236.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:3f:85:d7:00:9f:bb:cf:b5:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=9ef72af4-6616-4a31-a9bc-d0ae8cd5ed6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:82:9f:d6:08:64:23:40:59:fe:6e:0a:47:
                    3d:4d:24:10:48:3c:65:ca:ae:b9:b3:d1:7d:fb:7a:
                    7a:74:21:1b:11:e7:be:9f:76:b4:48:dc:81:aa:a1:
                    c2:19:cd:61:cc:6b:41:b2:fb:5e:70:83:98:22:72:
                    b3:9a:8e:ab:43:5f:72:00:42:cb:55:35:eb:f1:35:
                    e6:47:0e:8f:62:c9:98:0b:bb:1f:c4:23:0e:c3:66:
                    1d:22:b0:a0:b7:46:44:11:c9:b9:24:7a:7f:69:4f:
                    5d:34:9a:41:0a:b4:fe:85:60:57:0e:43:cf:cb:f7:
                    c5:02:93:9a:65:7c:36:d1:e0:db:e3:27:a7:b4:4a:
                    93:da:a8:93:80:ef:77:5b:c5:00:bd:57:30:49:f1:
                    ae:2d:90:ff:dc:75:70:0e:9d:89:83:9d:72:85:21:
                    8b:99:58:04:c5:bc:09:68:1d:85:b4:96:9c:8d:75:
                    56:dd:aa:8c:cf:6b:fa:4b:7a:7e:dc:f4:ee:23:5c:
                    b8:4a:ea:5d:c4:18:25:26:46:bf:ec:35:7c:7f:a1:
                    3e:4b:b6:3b:58:7c:13:97:7a:87:21:e9:67:18:1d:
                    f4:91:94:cb:e1:a1:ae:19:9f:f4:40:77:ff:5f:e7:
                    84:09:a3:b3:4e:c5:85:5c:e3:df:f1:40:38:12:3a:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7F:E4:75:CB:6D:1D:35:CF:00:82:2B:F7:A1:0A:B2:08:B4:08:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ad094b86-a0c1-38eb-b3b5-f19944936856.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d0:ae:ba:7c:d2:d8:cb:7a:c1:b7:96:f1:7c:6e:ca:db:b1:
         42:59:6a:0b:97:fa:15:c8:c5:f5:cf:85:d2:94:19:91:15:54:
         4e:94:29:cd:de:ac:59:f2:ba:0f:da:6f:67:45:77:18:a4:ba:
         45:6c:a3:80:0b:af:54:1d:ed:8c:ff:6b:ca:17:4b:ae:ca:16:
         fc:22:7d:68:35:d7:65:ae:8d:ef:94:93:88:f1:15:5e:b2:0d:
         30:06:33:42:b3:a2:57:c1:97:21:9d:fd:e0:82:7a:50:18:1a:
         ef:25:9c:e6:62:a0:43:e2:d9:d1:1c:d6:da:13:fa:fc:26:14:
         f1:71:13:cf:1e:c7:d2:a7:ae:98:5a:9c:72:eb:1d:29:ac:f3:
         67:d2:bc:97:77:af:b0:a1:0d:25:0a:7b:c9:af:d7:7a:9b:90:
         4b:f0:08:9b:b1:6a:82:ca:29:44:26:c8:ec:f4:00:79:2d:4b:
         6e:0a:62:46:a1:bd:bd:86:ba:2c:c6:9b:aa:cc:67:cd:04:c3:
         86:7e:5f:51:40:1b:13:e3:33:8f:77:0b:1b:8a:95:03:c9:10:
         6c:c5:6b:5e:31:fd:53:d7:4b:bf:3d:0e:71:a1:21:6a:59:92:
         10:e3:7f:f1:ea:61:b4:ca:a5:d3:a5:96:e6:42:9a:08:31:b4:
         00:19:6b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:57 2026 by rpki-client