Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b23d08-664f-34d3-ad7a-8d145610502a.roa
File:                     69b23d08-664f-34d3-ad7a-8d145610502a.roa (raw, json)
Hash identifier:          4m7c4u/tWmbc0XOGj5bl1HTCvPs4B37BVwgCa2Mg4LA=
Subject key identifier:   34:13:3F:F0:C6:9D:22:F7:E2:CA:E1:4E:8C:8F:92:21:EB:BA:31:06
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D25299632F905D7EA5AE8AC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b23d08-664f-34d3-ad7a-8d145610502a.roa
Signing time:             Thu 12 Mar 2026 15:30:17 +0000
ROA not before:           Thu 12 Mar 2026 15:30:17 +0000
ROA not after:            Wed 10 Jun 2026 15:30:17 +0000
asID:                     147034
IP address blocks:        205.196.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:29:96:32:f9:05:d7:ea:5a:e8:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 12 15:30:17 2026 GMT
            Not After : Jun 10 15:30:17 2026 GMT
        Subject: CN=7eda791a-d129-46d4-b50f-d42a0747b659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:5f:b1:c9:66:a4:06:ca:51:57:28:74:f7:
                    fa:26:12:48:37:0f:4f:6e:fd:66:a8:d4:5e:d3:27:
                    73:53:fb:e6:f6:ea:b5:8a:10:6c:25:13:e0:68:35:
                    08:b2:03:b5:6c:67:56:96:1b:71:fa:7d:34:ad:c1:
                    7c:16:37:54:10:44:e7:a6:2a:9d:6f:67:9f:91:95:
                    52:34:2f:2a:6b:62:6a:d2:b1:43:0d:46:43:8b:bb:
                    0b:c7:0b:23:18:0a:48:5d:0f:aa:e2:27:0c:80:1e:
                    2c:e2:46:31:7f:f5:e1:0f:c9:2b:46:49:54:5d:94:
                    45:e2:79:87:2b:eb:ec:31:a6:2a:43:63:f8:c3:99:
                    11:94:4f:03:29:06:eb:39:9c:85:da:cd:8d:52:99:
                    2b:d3:a3:5a:00:24:9e:1f:6b:80:2c:3e:31:81:df:
                    39:55:9e:27:36:6f:9c:3a:0f:6b:ce:47:65:e5:63:
                    98:fb:68:66:56:9b:c5:32:59:58:1c:2f:d8:d8:85:
                    a5:bc:65:dd:e7:c1:32:46:02:78:26:08:4f:f1:1d:
                    79:61:45:46:6e:3c:2e:29:18:ce:3e:68:58:09:6e:
                    3b:7f:da:2c:db:f1:da:5b:40:de:70:9a:db:13:3f:
                    c4:a7:78:10:0f:03:36:4f:f7:21:55:23:ff:23:44:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:13:3F:F0:C6:9D:22:F7:E2:CA:E1:4E:8C:8F:92:21:EB:BA:31:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b23d08-664f-34d3-ad7a-8d145610502a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:68:d7:69:4a:a6:f3:af:96:bb:10:9c:60:96:92:53:a7:e1:
         25:62:6b:85:80:16:cc:b6:a7:99:89:e9:a8:14:ef:27:ec:1b:
         88:08:8b:2c:41:6b:51:6f:c5:ea:a2:a1:03:fc:67:22:56:32:
         3d:58:62:52:71:fc:30:2f:39:ea:a0:11:69:98:d4:ac:ac:94:
         e9:42:80:ae:6c:76:e5:60:91:18:fa:95:5b:a7:56:93:81:b5:
         e7:1e:35:2d:2e:b4:a1:39:4c:0c:55:92:7e:f1:8c:19:60:42:
         6c:6b:d5:b4:3a:3f:5d:cc:44:e0:4d:8d:c9:64:8a:2a:99:9e:
         52:e7:2a:32:d2:14:67:87:1a:53:58:37:d6:cd:f0:78:d3:a2:
         87:ae:d1:aa:d0:13:19:7a:67:d7:08:d2:a9:ce:54:53:50:8e:
         27:8b:6f:2a:5b:20:7d:8a:89:ac:34:89:62:5e:87:96:aa:8f:
         99:52:28:72:48:b7:54:64:f4:c7:60:5c:41:d2:18:92:81:82:
         e3:40:05:5f:7f:a2:8d:ff:8c:77:10:1a:9c:06:d3:61:7c:83:
         a8:e9:97:23:fc:0e:21:4c:a8:45:f4:4d:2d:35:5b:27:88:0c:
         b2:8e:c8:53:22:b7:ab:1d:ad:4f:51:c4:27:2b:18:76:15:8d:
         63:a4:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:49:38 2026 by rpki-client