Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ea2ee7c-db32-33ed-92a2-42bcdb232a49.roa
File:                     8ea2ee7c-db32-33ed-92a2-42bcdb232a49.roa (raw, json)
Hash identifier:          IolEojAV9GXWC3FK86tiWWWQj8KDJpK3bggcl8rq4d8=
Subject key identifier:   DB:A1:1E:64:0B:BC:35:74:8F:15:93:51:24:F5:48:3D:55:A2:40:32
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D03AD001EF09BB703E6ACF800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ea2ee7c-db32-33ed-92a2-42bcdb232a49.roa
Signing time:             Sat 28 Feb 2026 15:37:34 +0000
ROA not before:           Sat 28 Feb 2026 15:37:34 +0000
ROA not after:            Fri 29 May 2026 14:37:34 +0000
asID:                     17497
IP address blocks:        209.92.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:ad:00:1e:f0:9b:b7:03:e6:ac:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 28 15:37:34 2026 GMT
            Not After : May 29 14:37:34 2026 GMT
        Subject: CN=edd62c81-7fd8-4bc4-bd29-a7805ed90212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:c0:bc:56:4c:26:19:a2:ba:ea:26:80:2d:
                    1f:ab:70:d0:7c:73:da:21:e4:a0:33:2e:9c:be:36:
                    32:0e:db:c1:15:1b:79:b8:6d:d6:21:73:60:aa:15:
                    06:f0:98:43:aa:12:ae:f4:c2:c6:af:da:0a:2c:3f:
                    62:09:68:73:3d:1d:a6:5e:9d:08:62:88:14:1c:f3:
                    00:fa:5d:13:63:4f:e3:40:81:8c:72:64:2a:b3:d1:
                    24:5e:88:36:db:b6:7c:f1:e6:ea:49:93:b5:38:ea:
                    5e:9c:c9:03:55:e2:4d:6d:a6:f7:bc:31:e9:f0:39:
                    25:ec:c2:1b:1a:60:f4:b7:36:a3:dd:55:59:3b:e4:
                    bb:b5:f9:2d:00:a4:00:81:76:71:3a:93:d2:7b:ec:
                    aa:8b:14:39:f2:10:ac:0b:ae:27:2a:43:60:89:e0:
                    00:20:a3:9c:b8:20:02:ee:28:c0:eb:fe:ed:f4:23:
                    dd:ed:74:b1:e4:1d:2d:9c:83:86:73:ad:81:1b:e6:
                    9f:3a:5c:75:e4:08:20:a3:34:db:a9:0b:20:a0:5d:
                    59:6d:6c:e3:45:1a:52:6b:c5:4a:dc:23:4e:d2:d5:
                    8c:f5:a9:1e:04:6e:91:46:c3:68:d4:fc:47:8c:90:
                    fc:bc:72:bd:c1:7b:8e:09:37:a5:2b:13:cc:bf:75:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A1:1E:64:0B:BC:35:74:8F:15:93:51:24:F5:48:3D:55:A2:40:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8ea2ee7c-db32-33ed-92a2-42bcdb232a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.92.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:0a:eb:f7:0a:52:57:bf:0c:fd:47:52:87:e4:30:4d:e9:
         a8:10:61:93:72:a5:44:6c:5a:09:08:f6:19:3f:d2:f3:3a:86:
         c9:9a:2b:00:d3:12:47:d9:aa:d5:c2:68:d3:97:ef:97:c3:05:
         75:95:39:a4:6a:05:bf:e3:32:11:1f:8d:52:33:26:70:70:12:
         93:df:b9:ea:64:c6:a5:85:30:72:74:a2:1c:d0:94:b8:30:66:
         c7:ad:a4:f0:8f:ab:e7:00:3e:04:da:3a:5a:d2:37:c2:ba:9d:
         09:4e:5d:b3:46:69:60:fd:07:17:67:3f:da:c6:a5:78:af:65:
         d7:46:c3:d1:8e:ae:2c:48:fe:dc:f1:1a:9b:88:b0:0e:d9:4c:
         58:f3:37:42:38:d4:3d:21:c5:dd:b8:cf:d9:9b:e9:1e:95:c8:
         df:de:f0:ae:ad:93:d3:02:c1:67:6f:bb:1c:2c:37:af:f3:2a:
         89:54:02:91:63:76:9b:c8:fb:32:07:3b:a8:a7:ed:d4:58:fb:
         01:70:59:0a:5b:8e:85:96:87:4b:8c:91:e2:72:b5:f5:1f:85:
         85:e9:1f:2b:60:12:8a:9a:8a:ac:12:6f:68:6d:dd:60:ff:a4:
         9a:80:6d:03:ee:ed:30:0e:a1:0a:23:bc:3b:d4:92:08:44:0f:
         d8:4d:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:16:55 2026 by rpki-client