Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0dd633a8-4b6b-3089-bdab-88748a69c5f2.roa
File:                     0dd633a8-4b6b-3089-bdab-88748a69c5f2.roa (raw, json)
Hash identifier:          HKghCRCwHlkeZy/3zTSzbqlGHvVfyGz34pGTrEqC+7w=
Subject key identifier:   69:1C:6D:1E:8C:5E:65:AA:15:86:EF:C0:7C:C1:CA:B0:46:A6:4A:64
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F57680ACF5284E23D628EFA18
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0dd633a8-4b6b-3089-bdab-88748a69c5f2.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     27161
IP address blocks:        184.174.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:0a:cf:52:84:e2:3d:62:8e:fa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=dc490a48-e3a6-4896-8505-f74fb3f32048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:21:ff:f4:e6:28:0a:33:d4:e5:53:a4:31:
                    fa:b0:9f:a3:03:78:25:b1:0c:e0:91:dc:70:0d:d0:
                    52:31:26:ac:cb:8d:b7:98:26:d0:17:61:09:89:24:
                    cd:b7:01:75:ce:7c:b3:57:8c:68:53:f6:4f:da:1c:
                    6e:05:38:92:f5:fd:6b:04:60:b8:b5:42:fa:15:2f:
                    30:66:34:32:73:79:0d:c5:48:db:25:1d:b5:46:1b:
                    52:4a:4a:66:9b:2d:d7:0b:b3:25:7c:fc:bb:f9:82:
                    e0:71:d7:46:a7:d7:ca:8d:b4:28:cc:4c:9e:66:4d:
                    89:35:aa:27:b7:9e:e2:b6:7a:01:c2:90:a0:3c:a6:
                    9a:d6:ba:ef:86:19:73:ef:cc:ef:4b:fe:09:76:68:
                    0b:e7:01:db:44:16:68:6d:0b:a4:f6:b3:f5:dd:7f:
                    b8:5b:54:f0:ac:44:71:ba:8d:d9:c8:e5:e6:46:85:
                    6f:d6:93:37:09:7d:6d:22:6d:05:1b:d2:a4:94:ac:
                    0c:80:44:0d:1e:01:b9:cd:79:96:ea:fc:2d:7b:b3:
                    ee:37:4b:cd:16:c8:9c:63:6c:4e:da:fc:d8:ff:66:
                    ed:ad:28:99:c9:1b:6e:7b:27:c6:24:07:95:b0:99:
                    87:e5:8c:49:60:a2:1f:1c:86:3d:1f:f1:31:12:64:
                    88:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1C:6D:1E:8C:5E:65:AA:15:86:EF:C0:7C:C1:CA:B0:46:A6:4A:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/0dd633a8-4b6b-3089-bdab-88748a69c5f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:cb:ab:c9:f0:26:c5:00:d5:e6:18:15:6c:72:fc:9c:f7:30:
         dc:c1:03:2b:fc:cb:4d:70:d5:c6:b1:e2:e8:49:d4:5b:4b:22:
         48:91:45:76:2c:92:5d:3f:2a:57:bf:45:11:c6:ec:fa:37:be:
         cf:08:3e:68:9b:81:b9:3d:ae:ca:b0:0e:7b:25:1c:70:d7:d5:
         49:40:a8:a4:70:32:58:3f:55:ab:60:29:cc:0f:d5:b4:22:41:
         06:28:72:7a:be:10:8c:5a:03:d9:0f:d4:6e:a7:e1:6f:f0:92:
         73:5b:c4:98:35:91:85:0b:b7:58:9a:fc:ed:b1:ec:13:d1:8a:
         fe:5f:17:be:5b:66:df:80:94:68:56:c3:8f:b9:f7:9e:16:64:
         74:63:44:9e:0e:d1:05:be:7d:4e:6a:a6:16:5c:1c:b5:87:a7:
         78:05:5f:7c:5f:ae:6f:62:bc:08:72:d1:a1:20:19:04:63:dd:
         ef:63:3a:b3:37:b6:4d:09:e1:4f:5d:6e:d2:55:49:a0:5d:4a:
         d7:ee:34:b2:65:bb:6f:6b:cf:28:c0:2b:5d:7b:20:fa:2b:4c:
         d4:a6:9d:5f:9c:83:96:d3:3f:9c:e0:11:30:36:5a:ee:72:40:
         3e:f8:80:0d:f9:1f:92:f2:c0:84:ff:d3:f2:6a:21:d2:7b:69:
         fd:de:06:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:20:15 2026 by rpki-client