Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a341a76b-225d-3df2-92e9-d614f6d839c7.roa
File:                     a341a76b-225d-3df2-92e9-d614f6d839c7.roa (raw, json)
Hash identifier:          JAxD2HDLrWpxea5XSWNOtiqm/Mkucq7gEIDF64t1Xss=
Subject key identifier:   58:E9:BA:4A:B2:24:5B:55:6F:42:47:A0:D0:BE:FB:0D:CD:12:76:2E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DD27FDD6469E3EEDF6A823800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a341a76b-225d-3df2-92e9-d614f6d839c7.roa
Signing time:             Wed 13 May 2026 17:38:58 +0000
ROA not before:           Wed 13 May 2026 17:38:58 +0000
ROA not after:            Tue 11 Aug 2026 17:38:58 +0000
asID:                     47007
IP address blocks:        184.174.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:7f:dd:64:69:e3:ee:df:6a:82:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 13 17:38:58 2026 GMT
            Not After : Aug 11 17:38:58 2026 GMT
        Subject: CN=7a50ce81-a472-4f7a-8048-852fa2261989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:7f:f3:08:26:a5:d7:2b:24:89:9d:57:a3:
                    19:1b:e4:f7:67:2d:5a:ab:13:a7:00:1c:3e:2d:4c:
                    2e:78:a7:cb:9f:bb:65:ce:6c:1e:c1:56:c4:e0:fc:
                    96:d7:7d:fa:cd:0c:14:5c:02:9c:c9:2c:6d:87:d9:
                    b4:78:db:5b:1d:9f:d7:de:42:4c:ef:2a:77:57:2b:
                    e7:94:3d:29:2c:2a:5d:9a:f5:56:fd:03:bd:f4:70:
                    a1:01:89:42:2a:cf:9b:da:cb:0c:98:71:5f:91:be:
                    0e:96:95:6d:d4:a5:d6:46:6d:50:75:08:19:71:0f:
                    0d:b8:a7:c2:5e:a5:55:ca:7e:f9:ed:cc:b0:4e:a8:
                    5d:00:e1:9f:d3:dd:b1:fe:db:53:ce:1d:3c:29:da:
                    35:fa:04:da:84:5a:d9:7b:2f:ef:69:b8:9d:36:47:
                    ed:11:30:f3:b4:4c:bd:75:df:6c:55:3d:8d:c9:b1:
                    b1:fb:33:cc:ed:b1:6c:03:9c:2a:c1:30:e0:ce:d8:
                    81:7b:23:a4:35:76:de:92:dd:9a:e3:11:a9:49:26:
                    ee:3c:6f:01:d2:61:22:d1:06:7e:e5:21:44:cf:46:
                    01:b6:a8:4a:4d:b6:28:a6:11:47:51:0b:8c:c4:5a:
                    6f:4b:24:3a:02:d7:dc:93:aa:7e:ad:94:50:91:ac:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E9:BA:4A:B2:24:5B:55:6F:42:47:A0:D0:BE:FB:0D:CD:12:76:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a341a76b-225d-3df2-92e9-d614f6d839c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:a1:26:64:3f:2a:d0:4d:71:27:5a:5e:5e:b3:fc:e1:9d:
         c1:f0:53:61:8a:0c:1e:9d:be:ea:04:0a:da:61:8c:f2:6e:e2:
         4e:63:1e:a1:a9:d9:60:76:c8:82:37:d3:e6:6c:7b:55:4a:0a:
         40:c9:79:c5:6c:fb:dd:e8:d7:95:27:96:c8:b4:aa:74:d2:af:
         23:06:7e:5f:17:d0:6e:92:19:1b:46:6e:f7:27:db:8b:7b:79:
         ef:52:d7:ff:73:ce:47:8f:38:cb:43:95:c5:3f:d8:f4:af:b2:
         15:85:e6:ba:3c:d9:95:6a:39:bc:7e:d8:8a:f2:b7:67:03:08:
         02:f7:cd:25:2f:95:fe:db:44:87:dd:25:98:6e:be:19:b2:27:
         5b:29:ab:25:fa:90:25:5e:51:ca:ab:39:94:5a:57:9f:23:4a:
         f0:99:e1:a2:66:e6:8b:ea:3a:ce:1e:38:79:4d:d9:65:cb:9e:
         1a:69:9f:ca:c9:51:88:7c:89:22:99:b4:31:2c:7b:ca:6f:00:
         1d:30:83:74:1c:05:df:16:33:06:95:bc:0d:69:74:03:95:a3:
         b4:db:fa:b0:9f:8b:24:62:52:de:37:fc:3e:55:03:0c:34:d3:
         fe:5f:43:b6:ef:4a:c2:e8:93:aa:b9:9e:9e:9c:50:8e:ed:5b:
         e0:80:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 00:26:35 2026 by rpki-client