Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/e9e9c259-e996-3e8b-84aa-0c9f99c2cade.roa
File:                     e9e9c259-e996-3e8b-84aa-0c9f99c2cade.roa (raw, json)
Hash identifier:          zotTy6zHBJhJd/pHLxAzwcgmDGxMqge7CUyZ2BvFzU0=
Subject key identifier:   AA:E6:3F:47:02:E9:0C:65:A9:6A:E9:73:46:41:E2:D8:31:69:26:E8
Certificate issuer:       /CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
Certificate serial:       010D0C9F4328584DD09057F2D86363AF95D6B680
Authority key identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/e9e9c259-e996-3e8b-84aa-0c9f99c2cade.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        167.234.36.0/24 maxlen: 24
                          203.2.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:57:f2:d8:63:63:af:95:d6:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=64849a1b-1201-428c-b81a-68cb2f7996d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:93:d9:29:9f:92:23:7e:2a:e1:86:f5:d1:
                    01:0f:c5:91:ed:e2:04:02:0f:0f:34:03:ba:4a:fa:
                    38:95:13:3f:73:d5:fc:75:ef:02:53:81:c9:0d:c5:
                    32:15:33:c5:59:c0:2a:09:97:3b:e2:39:e5:f1:1e:
                    b4:6f:5c:8f:c4:19:70:60:2f:a9:67:c5:78:f8:b2:
                    21:6d:c9:60:12:1b:8a:56:90:94:ac:f7:87:3a:be:
                    22:98:42:f1:84:5c:b7:72:15:f2:fd:57:99:45:1f:
                    5b:99:ca:ce:81:76:e1:19:73:90:fe:12:58:6c:44:
                    a8:50:6a:2a:15:f7:a8:59:64:ba:2b:c9:ff:ed:a0:
                    9d:de:b4:57:8d:5d:3e:e7:8e:20:ed:98:86:4f:cf:
                    16:cc:3f:37:88:b1:7c:53:20:a1:fc:6e:51:a6:40:
                    bd:bd:d3:f7:78:3d:4c:16:2f:07:ee:ab:32:5a:be:
                    6c:3a:a2:03:c9:8e:73:53:4c:93:e3:86:a9:e4:8b:
                    cd:79:03:01:6c:c0:b6:83:76:ff:56:2f:db:95:1d:
                    d7:c6:71:1e:d1:d1:7f:2c:84:76:35:88:59:08:9b:
                    6f:a3:43:d1:bb:e2:f6:73:ec:75:06:a7:de:78:fe:
                    70:fd:3f:3a:1c:63:bb:a1:ca:68:68:7a:fa:35:e9:
                    93:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E6:3F:47:02:E9:0C:65:A9:6A:E9:73:46:41:E2:D8:31:69:26:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/e9e9c259-e996-3e8b-84aa-0c9f99c2cade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl

            X509v3 Authority Key Identifier:
                keyid:C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.36.0/24
                  203.2.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:85:78:56:71:3d:3c:39:48:12:b1:2f:e3:95:4e:d8:18:75:
         b0:60:1d:49:12:5f:e1:71:d2:b1:b7:28:8d:29:57:aa:51:a1:
         db:64:e0:71:46:b7:61:fb:da:b7:36:05:5e:ef:42:65:30:fb:
         51:7d:80:67:de:45:6f:1f:cc:3c:2b:53:29:49:35:d9:de:20:
         f5:93:4b:85:e2:a2:4c:da:23:d5:1e:fd:96:30:51:ea:ca:4a:
         83:ad:bf:9a:57:9f:22:81:fc:28:01:e7:dd:51:e1:d8:88:28:
         42:4c:4d:98:87:2a:69:07:50:3f:e5:19:2b:93:f4:69:5b:82:
         ef:f0:cc:81:fe:5b:b6:45:2a:47:d4:0f:c0:00:67:32:94:70:
         ab:2f:5c:91:0e:d7:df:5a:c9:ec:5d:92:18:3d:58:aa:ba:3e:
         83:d4:13:9f:51:6c:12:ca:4b:e2:f3:85:41:32:12:20:8d:28:
         50:ff:00:4a:b6:80:19:7c:bd:05:09:5a:de:f7:46:e9:be:0f:
         ec:e6:57:ba:7f:59:33:6c:06:08:3f:7a:7c:4d:d1:7e:60:81:
         13:af:a2:8c:96:f5:d9:ce:31:47:d3:a3:ed:41:94:ef:5c:ac:
         d3:86:01:9f:43:f3:5a:44:b7:06:d3:69:8b:40:fb:56:02:2a:
         1e:a5:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:43 2026 by rpki-client