Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/36017a21-f514-30fa-92f0-8cc69eed1b58.roa
File:                     36017a21-f514-30fa-92f0-8cc69eed1b58.roa (raw, json)
Hash identifier:          OFxrVUZYY5hIA5ImabbV1EKW7z4hTeI12+ZlpAS88NE=
Subject key identifier:   16:F6:43:D7:0D:D2:7E:83:6A:1C:5C:6E:97:CF:B1:83:22:49:26:17
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F1467883A901B4E793A65A180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/36017a21-f514-30fa-92f0-8cc69eed1b58.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     211440
IP address blocks:        173.211.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:88:3a:90:1b:4e:79:3a:65:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=5ac18ecb-d745-43a4-9a01-5ed49dc9fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:46:13:dc:3c:e9:e1:a6:72:fd:11:bf:4c:
                    db:58:d9:37:7e:67:5b:56:26:80:a5:e1:c2:7a:88:
                    3b:0c:46:52:33:dd:45:77:64:15:b5:87:4b:b9:eb:
                    8c:aa:01:60:b5:9a:c0:43:a7:d6:cb:cc:7b:ba:0e:
                    6e:e3:3f:14:8a:1e:ae:05:07:fe:04:14:1b:a9:76:
                    bc:19:b3:12:94:7b:02:02:f0:33:67:e4:18:d3:c0:
                    52:35:bb:41:64:fa:12:ce:05:21:c3:44:22:25:76:
                    02:d3:87:ad:d1:d3:d7:92:ad:58:bf:df:a5:23:a8:
                    a9:eb:b5:e9:80:f4:2f:0c:b2:c6:c0:36:1a:7e:6d:
                    17:f8:b3:33:30:59:0e:c2:e5:43:3b:d0:38:5b:0d:
                    ca:4e:88:4a:7e:a7:cb:7e:30:36:86:a4:ac:4d:7d:
                    e0:06:cb:bc:5f:c1:17:41:4a:69:61:34:19:bb:0f:
                    9a:49:55:98:52:3b:21:9d:a1:80:1e:35:71:ea:d8:
                    7f:6c:c8:74:30:a5:70:80:ea:b4:d6:62:73:b4:97:
                    6a:73:5e:14:77:fa:8e:18:d2:e8:04:9b:da:21:d8:
                    d1:0c:d4:cf:da:65:f5:33:ef:f3:05:3f:29:ba:07:
                    b9:14:fa:f7:b2:5b:23:3e:03:bd:53:d2:9e:97:c5:
                    d7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F6:43:D7:0D:D2:7E:83:6A:1C:5C:6E:97:CF:B1:83:22:49:26:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/36017a21-f514-30fa-92f0-8cc69eed1b58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:8d:78:e3:5c:af:90:6d:40:7d:39:0a:a9:13:2c:c6:82:
         0c:05:07:3a:e4:b2:43:d9:b0:99:5b:23:eb:bb:48:37:d8:f9:
         f2:c4:f6:5e:11:21:52:1e:b7:2d:bb:12:75:1c:19:dd:1a:2a:
         31:d6:ae:3b:ac:f0:9b:31:e2:14:49:f2:13:7c:11:d7:5b:d8:
         21:0d:4a:66:6e:ee:f2:bc:71:91:fb:11:dd:ca:9a:f8:f6:c2:
         49:90:c8:fb:67:04:4a:c9:2e:45:6e:9e:d0:bb:28:ff:95:6a:
         68:05:3a:2b:46:b7:05:63:8a:5b:e2:35:da:21:99:5c:f3:f9:
         30:be:0c:b4:6a:d1:20:e0:a3:f9:24:91:23:19:20:0a:7f:41:
         2d:7e:5a:e1:41:52:46:00:41:59:ea:fa:27:9b:5c:5c:49:ab:
         96:9d:0a:d1:d1:d4:30:8b:4f:18:3d:c0:44:67:91:b2:46:37:
         76:ae:20:a9:a2:4c:dd:54:4f:0a:f1:e2:12:34:1c:05:c6:50:
         15:9b:e9:a6:1d:4e:14:6c:fc:38:67:ae:72:65:93:19:88:bd:
         e8:58:48:90:ef:5f:fd:82:16:8e:c4:1a:09:c3:60:d2:4e:32:
         5b:b5:4a:86:cc:7c:8b:13:c2:d7:eb:12:9a:5e:6b:39:85:08:
         ed:0e:af:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:04:24 2026 by rpki-client