Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25f8ebdd-b6cc-3b6a-b42a-fa7f81c235df.roa
File:                     25f8ebdd-b6cc-3b6a-b42a-fa7f81c235df.roa (raw, json)
Hash identifier:          dY0vhxc6kukZP5Omko1VRpKkGF/7JkLvxQZDiGB6kS4=
Subject key identifier:   3A:B9:49:7F:1F:44:48:7D:09:95:CF:14:92:A2:C9:46:BE:19:D1:76
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DD282CC68E104E282D933B0A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25f8ebdd-b6cc-3b6a-b42a-fa7f81c235df.roa
Signing time:             Wed 13 May 2026 17:44:52 +0000
ROA not before:           Wed 13 May 2026 17:44:52 +0000
ROA not after:            Tue 11 Aug 2026 17:44:52 +0000
asID:                     47007
IP address blocks:        184.174.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:82:cc:68:e1:04:e2:82:d9:33:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 13 17:44:52 2026 GMT
            Not After : Aug 11 17:44:52 2026 GMT
        Subject: CN=c9de4d39-43b7-4f68-8761-3b4f715c298e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:a9:75:fc:f1:b4:6e:9b:59:34:f8:65:34:
                    46:fb:1b:f5:a1:bd:f4:12:ae:18:98:7d:b4:8b:6c:
                    72:90:8b:27:57:98:ba:e5:53:29:32:b4:e3:9f:a3:
                    0f:a4:1b:40:2f:33:cb:39:79:19:95:c8:5e:58:ef:
                    0b:72:db:7b:ab:6e:30:de:ad:b1:30:ba:75:f0:71:
                    04:e7:66:a3:19:a4:ae:f8:4e:99:6c:01:c0:53:13:
                    a3:90:ac:fe:76:40:d2:e7:df:f3:6f:26:bb:1c:fe:
                    7e:8e:5a:76:3f:37:42:f6:65:fe:e7:58:e4:1d:9d:
                    f3:da:9f:39:e6:48:4c:30:cb:91:30:67:76:54:f5:
                    30:de:8a:5a:ad:12:e7:79:63:6f:8d:7c:f8:27:19:
                    95:5b:e5:b9:93:14:a2:2e:a8:1c:30:b2:94:92:50:
                    04:1c:da:08:5c:a4:bf:62:53:9b:a9:a8:34:30:db:
                    9c:86:5a:81:01:c5:ca:de:af:1d:43:6c:59:89:2f:
                    c8:97:cf:c2:6f:c8:77:a3:3a:fe:bd:4a:db:2f:56:
                    ff:ee:99:ab:3e:1d:8b:42:91:0c:54:b6:08:ae:02:
                    47:9f:c9:b9:25:0a:bd:3d:cb:76:6c:75:ba:15:41:
                    75:f1:c8:bc:58:82:7b:22:6d:07:00:22:a8:b6:7d:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B9:49:7F:1F:44:48:7D:09:95:CF:14:92:A2:C9:46:BE:19:D1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25f8ebdd-b6cc-3b6a-b42a-fa7f81c235df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5d:ff:6e:57:d3:18:fb:51:fc:00:68:00:cf:11:d7:70:f3:
         44:84:39:f0:5c:95:a1:a5:2c:e3:cb:26:4e:57:cf:ac:53:e8:
         ef:44:ed:22:88:d9:6f:0c:36:3f:40:0b:1c:b0:ba:b5:b8:c3:
         f8:27:ee:14:86:27:af:9d:71:45:34:2e:5e:ca:c0:60:27:8a:
         f6:38:de:37:44:94:ba:58:2d:85:60:9e:de:ce:a1:f7:37:92:
         20:a6:1b:86:b7:4f:b6:77:17:2f:1f:6a:f1:48:77:a4:ab:58:
         a5:a1:d3:1d:b0:07:ee:61:34:5b:70:2f:ed:65:d3:07:f8:a6:
         a3:af:7c:b2:d2:9e:48:da:80:95:41:3a:9d:21:79:9a:dc:83:
         3c:d2:21:44:f2:4c:3b:c6:0b:9b:f6:d1:e9:0d:09:1c:09:e8:
         ad:a6:5c:26:4a:b6:2d:98:8c:1c:49:44:b5:18:b6:d4:16:7d:
         38:70:14:f0:d3:5f:44:74:ec:9f:c1:93:69:83:62:af:db:76:
         12:f5:e6:ea:d9:0b:19:f1:54:d3:a2:09:57:32:be:9d:77:da:
         f1:cd:29:c7:d0:80:b0:b4:d8:2a:39:99:d2:4d:35:02:c8:23:
         1c:eb:11:1a:44:6f:3d:d5:3b:40:5b:d8:1d:01:ab:b1:cf:cc:
         7a:d1:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 00:26:12 2026 by rpki-client