Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bfd5f518-cea0-3bc2-9742-4b99460de15c.roa
File:                     bfd5f518-cea0-3bc2-9742-4b99460de15c.roa (raw, json)
Hash identifier:          qh/EYURdjpqQaCKracX8fVN80DunGMw9NNjJoyNNRc0=
Subject key identifier:   FC:B2:F5:2C:7C:E0:57:71:9D:58:08:E8:C8:A9:0C:F1:7A:A5:8B:6F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D472682C6764EB3B399162600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bfd5f518-cea0-3bc2-9742-4b99460de15c.roa
Signing time:             Tue 24 Mar 2026 19:41:34 +0000
ROA not before:           Tue 24 Mar 2026 19:41:34 +0000
ROA not after:            Mon 22 Jun 2026 19:41:34 +0000
asID:                     40676
IP address blocks:        209.92.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:26:82:c6:76:4e:b3:b3:99:16:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 19:41:34 2026 GMT
            Not After : Jun 22 19:41:34 2026 GMT
        Subject: CN=0e6226e6-2449-45b6-90ba-deab598c0cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:ea:b3:2b:58:32:2e:e8:60:08:ca:4d:c4:
                    08:37:31:7a:63:a5:71:e9:f5:81:2a:75:8a:da:cf:
                    a3:9e:ea:f6:ba:3f:29:32:ee:23:dc:d6:b4:2d:4e:
                    cc:0a:ee:04:0d:b9:9e:38:ea:6e:63:e1:c1:d6:53:
                    ab:d8:90:2e:10:e0:c2:f5:0b:c2:b1:8c:f1:e3:85:
                    f4:db:08:b8:ed:6f:82:c8:45:26:5b:0b:c6:59:e8:
                    af:bf:94:ed:3d:a2:0a:d3:e1:f4:06:60:68:40:2f:
                    1f:86:bb:9a:12:6b:71:97:8a:da:78:72:8a:b1:4d:
                    f1:12:6c:92:14:27:d4:0e:68:32:3e:6c:9d:0c:fd:
                    ba:2f:bf:f3:95:84:dd:18:1a:e8:03:82:14:59:2b:
                    71:ce:d0:38:d6:2c:b3:2e:31:c3:25:04:36:59:48:
                    e7:41:27:37:26:b4:1d:b6:72:f8:44:63:ec:26:9b:
                    ec:b3:36:65:69:8b:58:c8:ed:65:62:e2:61:82:18:
                    64:39:78:40:7b:bd:18:7b:1a:8f:58:2a:0c:82:b4:
                    e6:c2:31:46:e7:96:fb:8b:1a:4b:38:5f:41:db:95:
                    c3:dc:87:44:07:9c:62:5c:c9:5a:83:3d:25:de:f6:
                    d9:ff:7a:bf:42:20:bd:11:17:82:97:47:17:c8:44:
                    fa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B2:F5:2C:7C:E0:57:71:9D:58:08:E8:C8:A9:0C:F1:7A:A5:8B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bfd5f518-cea0-3bc2-9742-4b99460de15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:ab:2e:52:10:9e:a8:37:3e:15:4e:e6:b6:61:dc:f3:00:
         04:d1:3e:d2:9f:70:59:32:b4:2a:30:26:a2:f4:d1:fe:da:15:
         f1:a5:35:f1:79:6b:c2:ed:25:3c:3d:7c:fe:63:1a:38:fc:30:
         21:ae:2d:41:fd:b0:91:8e:3a:da:e6:00:38:32:e7:5a:f3:ed:
         cb:85:4f:a2:5c:2e:b6:05:a0:a4:c4:5d:db:29:cf:8f:b3:fe:
         30:11:8e:0a:b2:a9:33:94:41:04:ce:79:de:1a:55:86:2e:64:
         dd:90:a0:98:9f:4f:bc:75:fe:ba:40:34:21:79:12:10:0b:55:
         b1:66:91:33:dd:5d:6a:cf:86:87:e7:b6:55:cc:fc:e1:1b:0c:
         cb:b7:e8:ed:09:6a:70:46:ed:7a:28:44:93:44:22:a6:0c:17:
         be:36:cf:3d:03:72:45:10:06:31:2b:75:39:65:b0:d8:a4:78:
         19:01:6d:53:88:b3:fc:39:9b:8f:62:9f:95:67:47:66:11:29:
         85:3b:be:2b:e3:9e:5f:74:10:13:fd:02:6b:b6:9a:89:bf:f5:
         79:b8:37:4b:86:31:6e:8f:cb:4e:e8:17:0f:35:ec:8e:c4:3a:
         4f:ec:b0:41:7a:76:81:b7:fb:6d:33:b3:92:24:03:25:1a:c6:
         5a:b0:0a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:33 2026 by rpki-client