Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7e83001-4e3f-3de2-8fc5-45f83eabba68.roa
File:                     d7e83001-4e3f-3de2-8fc5-45f83eabba68.roa (raw, json)
Hash identifier:          wYtOxkd497SnazHlmEyCVi7i2sBfX0QJ41ZcXMo3HqE=
Subject key identifier:   D0:1F:DB:0B:37:63:C8:E7:74:68:F7:13:06:16:55:86:58:54:4A:1A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4972A88787C9BE5475316580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7e83001-4e3f-3de2-8fc5-45f83eabba68.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     47007
IP address blocks:        173.211.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:a8:87:87:c9:be:54:75:31:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=71ebda9a-935a-4bda-9e24-76d00dda9322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f2:d7:eb:cf:d3:19:22:12:1f:bc:3c:e6:e5:
                    e7:6f:3d:e0:19:70:9d:c4:5d:36:79:fe:6f:32:bd:
                    9e:f2:2f:2d:8d:5c:23:c2:4c:74:4a:6d:2f:0d:ce:
                    fb:82:27:70:b4:74:ce:65:86:6c:17:de:cf:ac:b1:
                    88:ce:05:f0:03:af:24:06:ed:d6:db:c1:5e:7c:26:
                    ca:01:87:d1:4c:cb:90:62:54:db:14:70:97:5d:1b:
                    60:2d:6b:56:c7:af:f0:b8:ff:8e:b6:76:85:4f:99:
                    66:7a:c9:16:43:80:c1:20:8b:67:93:9e:71:0d:b3:
                    34:46:ec:c5:82:ae:3f:24:99:f8:62:49:e9:7a:41:
                    7d:29:68:4a:27:16:85:a1:ed:db:1b:d8:fd:07:14:
                    54:2a:f4:11:87:08:2f:a3:55:bd:ce:a6:de:67:57:
                    db:1d:cf:e2:84:e7:b0:13:03:04:b6:05:00:5c:87:
                    73:78:fc:b7:c4:a9:f1:e9:d8:ce:06:86:b6:53:4c:
                    25:12:6f:9e:93:8a:a9:49:8a:fe:5d:c4:36:2a:a3:
                    ed:74:d6:d0:2f:12:7f:48:28:4f:fb:29:7f:45:97:
                    c4:3c:06:e8:1d:4e:c6:75:4b:2e:b6:59:8e:6b:25:
                    94:f1:4e:3c:cf:c4:c9:4a:c1:37:f8:61:7c:21:3b:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:DB:0B:37:63:C8:E7:74:68:F7:13:06:16:55:86:58:54:4A:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7e83001-4e3f-3de2-8fc5-45f83eabba68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:84:ef:e4:41:09:f0:cf:62:12:e6:f3:fe:92:c8:69:e8:
         d8:28:8f:36:04:4e:23:b0:e5:7b:64:e5:33:a5:ec:95:fd:84:
         83:eb:d0:6a:37:8c:14:ff:69:35:b1:1d:91:1f:88:e2:0d:90:
         dc:a8:c0:66:52:56:6d:77:e3:bf:d7:ff:e2:61:9a:45:d3:f0:
         88:26:e4:fb:20:67:26:9d:27:21:08:17:91:3d:80:81:84:94:
         76:55:04:2f:67:c9:af:db:34:37:ea:ce:4b:c2:f9:b8:a9:45:
         51:65:c2:5b:2e:d7:39:c3:21:d6:a0:0e:50:d6:76:36:56:1c:
         8e:0d:72:fb:fc:56:75:5e:7e:e8:41:cd:42:e9:a8:71:e4:7e:
         ff:4c:18:99:06:61:87:50:c4:bd:e0:e3:ff:ab:0f:24:9f:31:
         1b:b3:4d:9b:05:2d:29:6e:ed:21:7b:0c:54:29:9a:90:b5:30:
         00:63:15:90:61:13:ce:88:eb:20:95:fd:69:97:2d:37:f1:57:
         7f:d4:41:79:2e:e6:8e:27:ab:67:08:ea:b4:21:c1:83:98:25:
         f0:3a:c6:c2:5d:0c:7d:94:e0:fb:8c:ae:5b:42:0c:d8:60:78:
         b5:ae:ef:71:92:69:1c:2e:24:f6:bf:54:58:54:a8:0f:d2:9d:
         6a:65:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:15:31 2026 by rpki-client