Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01453457-98fa-3a65-8ee7-4134f763a06d.roa
File:                     01453457-98fa-3a65-8ee7-4134f763a06d.roa (raw, json)
Hash identifier:          rii+qnL9odfKHp3QpsKFMDmkzkSp30KrSnI1yYYZk84=
Subject key identifier:   C9:BA:97:52:D3:92:85:12:58:56:6B:0F:D0:15:01:AF:9A:E1:36:26
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D2528715E7AE63B016FDE8840
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01453457-98fa-3a65-8ee7-4134f763a06d.roa
Signing time:             Thu 12 Mar 2026 15:27:58 +0000
ROA not before:           Thu 12 Mar 2026 15:27:58 +0000
ROA not after:            Wed 10 Jun 2026 15:27:58 +0000
asID:                     134135
IP address blocks:        205.196.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:28:71:5e:7a:e6:3b:01:6f:de:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 12 15:27:58 2026 GMT
            Not After : Jun 10 15:27:58 2026 GMT
        Subject: CN=fdfaf234-7dba-4ebe-8f13-7eed6a873499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:b2:d2:4e:15:f2:c6:72:96:f9:da:ba:ea:
                    ee:e0:0d:14:c8:26:8a:d5:69:f1:3a:37:9c:fa:2f:
                    5d:18:a0:c1:ee:0b:73:8f:33:fe:26:e8:96:82:af:
                    6d:31:26:0c:7a:16:0d:0a:e1:2e:d5:59:57:48:d7:
                    6a:f2:00:aa:21:75:a8:5b:68:96:76:8b:00:18:d2:
                    b0:2a:73:5f:77:5c:e2:5c:de:ae:23:cf:ad:f1:48:
                    1f:17:a2:b4:d4:64:20:33:77:56:37:7e:1b:9b:73:
                    f9:4f:54:31:26:8b:bd:0e:9b:e3:41:db:3c:46:ef:
                    13:76:a1:8b:87:bd:14:0d:25:e5:ce:bd:cb:72:0a:
                    8b:33:36:92:e8:0c:83:2c:5e:e9:66:04:30:80:c5:
                    bc:17:27:6d:86:3d:83:78:26:99:95:86:17:4b:33:
                    3e:59:70:f9:af:a8:e3:8f:7b:b6:84:a7:7a:8c:e7:
                    95:a8:ac:b1:d8:25:d5:f9:52:02:28:38:99:99:b7:
                    e9:16:5b:bd:14:46:92:ae:88:cb:43:da:76:72:b1:
                    00:d6:21:bb:ae:ac:6a:ae:c0:e3:5b:01:e5:7c:7a:
                    76:5e:61:3b:2b:ac:4f:ce:38:6a:df:96:61:54:4b:
                    96:45:15:b9:1e:50:02:fb:fa:25:39:a4:e4:87:b9:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:97:52:D3:92:85:12:58:56:6B:0F:D0:15:01:AF:9A:E1:36:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/01453457-98fa-3a65-8ee7-4134f763a06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:1a:f9:be:0d:3a:a4:c9:08:cd:29:90:0d:66:d3:4c:f6:21:
         e2:51:9b:ec:c6:fa:84:5d:0b:12:89:96:64:18:94:bd:98:04:
         9c:a9:55:94:4a:c0:a0:f3:6f:78:24:46:ae:db:34:91:11:86:
         c7:4f:07:ee:64:1f:1d:6b:74:42:7a:ec:e2:94:36:2f:89:9a:
         75:9a:54:17:d8:97:74:7c:73:73:a8:3c:b2:18:de:f9:50:76:
         24:fd:0e:65:68:68:e4:0c:71:5f:34:7c:74:16:6e:58:88:37:
         1b:34:ac:c1:87:8b:25:1d:e4:8b:1d:be:54:e7:e3:48:db:55:
         fd:0b:16:92:73:ec:02:26:c0:50:f2:46:f7:d4:c5:b7:52:73:
         58:74:14:c2:b7:d9:28:f3:b0:93:19:8f:61:42:95:0b:59:3f:
         32:2a:0e:1e:b3:11:41:5c:ea:7e:6d:ba:00:40:7a:e3:97:e9:
         a2:c8:e8:10:9c:d3:5a:7d:98:2e:06:5f:c5:50:69:8a:de:84:
         17:90:47:27:9a:83:eb:f7:f5:57:e5:bd:75:3f:cd:fb:f6:ab:
         83:f6:82:8c:29:47:54:2a:d4:c8:4f:cb:35:82:d1:90:de:3c:
         e2:b3:2a:d8:c1:7a:90:8a:7c:9e:3f:42:97:eb:5a:fb:d8:a2:
         07:b0:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:49:38 2026 by rpki-client