Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/249d7a73-8371-38af-9b2f-553533abb958.roa
File:                     249d7a73-8371-38af-9b2f-553533abb958.roa (raw, json)
Hash identifier:          RLfX0KJfkNVv8mO0O23XdhCpXjtEIG46uLI2TgQKrTU=
Subject key identifier:   A6:13:BF:E5:CF:0B:1F:F5:AC:17:5A:59:84:91:5D:69:B6:F4:B2:63
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D11726B08DD0C070059CB2780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/249d7a73-8371-38af-9b2f-553533abb958.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     16276
IP address blocks:        180.131.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:6b:08:dd:0c:07:00:59:cb:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=624f7945-0ac2-456e-9d53-f605ac00fd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:48:7e:f7:83:c1:62:ad:95:56:d2:43:11:
                    21:8c:d9:b8:2e:0a:34:e8:0f:a4:cb:2b:12:d3:50:
                    63:1c:bf:20:a6:dd:e0:55:33:70:0c:db:ea:6d:a8:
                    b6:d5:58:0e:56:5b:b4:19:2c:b4:f3:da:ac:21:ba:
                    f8:87:f5:29:06:a7:3f:2a:a3:89:75:f9:70:f7:3f:
                    05:15:28:c6:9f:2d:79:8b:a7:fe:77:bb:ca:84:16:
                    c8:d5:db:07:b1:1f:11:bb:ec:28:f5:12:d6:0a:b6:
                    95:1c:1e:26:1a:e7:5a:da:c4:04:9d:0c:41:9b:25:
                    43:22:52:f9:08:a1:39:16:b0:fd:6f:18:33:20:d1:
                    a0:ee:f0:f1:15:3e:f7:67:3e:50:3d:16:f9:e0:07:
                    34:1f:9c:35:8a:fd:81:da:73:bb:d2:e3:93:74:89:
                    00:e0:29:c7:92:6d:7a:9e:3f:e8:de:c1:5a:42:c5:
                    40:5c:fe:68:f7:98:a2:db:34:a0:7e:ca:6c:2a:40:
                    5b:d1:f2:b4:a5:6f:c5:3c:09:25:5e:81:50:09:84:
                    2a:71:1f:83:9a:e0:2c:7f:a5:46:cf:65:b2:29:e3:
                    4c:34:58:84:ec:7d:52:d1:85:e9:48:e3:af:29:6b:
                    41:e5:3f:7a:01:5e:12:70:13:92:be:58:2b:e6:c2:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:BF:E5:CF:0B:1F:F5:AC:17:5A:59:84:91:5D:69:B6:F4:B2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/249d7a73-8371-38af-9b2f-553533abb958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:7c:62:7d:8c:98:6e:c7:f0:35:f5:32:0f:55:23:0b:19:e1:
         82:4f:28:7a:ee:c1:ce:cc:99:93:26:ad:f3:8d:8d:d1:bc:3d:
         78:14:e0:7d:6b:75:ae:a4:04:4f:2b:8a:18:43:5f:19:b5:92:
         9e:4b:3f:d6:c0:5e:4a:87:95:00:df:e7:bb:57:c0:ab:d9:d6:
         54:7b:ef:82:d1:1a:34:03:56:33:44:d8:ef:f8:75:70:51:14:
         47:71:43:59:a9:61:d8:ed:3a:cb:5b:3c:12:6b:43:b9:96:39:
         7e:c7:d6:f0:71:6b:bf:3a:89:16:71:56:8f:1e:a2:82:04:61:
         d1:ec:90:43:27:e4:b3:8f:7d:85:32:62:cd:fa:b3:a5:68:00:
         c1:fd:19:f6:03:b9:00:f6:c9:c1:01:f4:de:65:04:2e:b6:05:
         b7:a8:06:d2:2d:cd:47:c6:99:b3:b6:c2:53:ee:df:8b:08:6c:
         b5:06:25:33:ac:a9:1f:bf:83:77:17:eb:f4:46:1a:b2:54:2a:
         17:8c:18:ad:d9:27:7a:c5:e4:c3:8e:1c:d8:a6:af:cd:68:61:
         06:13:e7:63:5a:e6:a6:c1:c6:24:95:f7:b6:d1:dc:64:f0:1d:
         8e:73:ef:e3:90:13:40:60:f6:35:5d:c4:80:d2:f7:c9:89:d9:
         62:02:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 13:27:18 2026 by rpki-client