Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8427027-aaae-3f3d-8096-aa48b358686e.roa
File:                     a8427027-aaae-3f3d-8096-aa48b358686e.roa (raw, json)
Hash identifier:          HiUrGsMeZUiyK0W6JKOSiMDyrhk2AxonNhsAEUXkp/w=
Subject key identifier:   F9:3E:FA:7D:99:DF:F3:48:76:57:45:D0:36:7F:ED:0B:BC:78:77:E1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DD285C84E739D6A01C4266E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8427027-aaae-3f3d-8096-aa48b358686e.roa
Signing time:             Wed 13 May 2026 17:50:53 +0000
ROA not before:           Wed 13 May 2026 17:50:53 +0000
ROA not after:            Tue 11 Aug 2026 17:50:53 +0000
asID:                     47007
IP address blocks:        184.174.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 20 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d2:85:c8:4e:73:9d:6a:01:c4:26:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 13 17:50:53 2026 GMT
            Not After : Aug 11 17:50:53 2026 GMT
        Subject: CN=924ae143-7bf0-4f4f-ae90-e68514b80a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:24:bd:46:68:2e:f3:a8:b5:97:1b:0d:76:
                    a0:0f:05:81:de:24:28:8d:24:60:01:86:c2:27:e5:
                    77:1b:e6:21:83:bf:49:e8:b4:7b:10:13:01:dc:50:
                    2f:56:da:ab:40:f6:6e:5f:97:88:f0:c6:10:b9:3c:
                    e7:0f:e2:0e:b0:89:41:56:af:70:79:a1:e8:6b:9f:
                    ca:ed:01:58:69:66:cb:12:da:02:18:ce:a0:4f:42:
                    2a:fb:70:c5:6e:0d:73:da:dd:8a:84:c3:5c:3b:b6:
                    75:72:ae:0d:f0:9b:f1:a3:06:99:78:6f:f7:24:37:
                    9f:bb:7d:05:a3:b1:5c:91:da:b4:7f:78:5c:c4:72:
                    90:4f:6e:80:b4:e0:37:85:e7:b0:1a:58:d5:eb:f0:
                    dc:f6:4c:07:f8:e9:39:b6:c0:bf:bc:aa:b4:71:60:
                    c9:bd:fe:29:a5:59:89:25:d3:59:de:ca:f1:da:f8:
                    a2:75:3b:9a:61:d4:aa:ec:1d:7a:65:3c:4a:4e:73:
                    5b:75:6b:66:08:2e:ad:88:7e:b5:a4:01:d8:ff:c5:
                    3d:77:1c:55:2b:36:8d:2c:0c:ac:75:87:e1:d4:8c:
                    56:73:92:9a:8d:13:ac:64:73:08:ad:7c:91:60:f4:
                    f5:86:cb:93:fa:d3:61:0c:f1:7e:14:e6:4c:ec:76:
                    1f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3E:FA:7D:99:DF:F3:48:76:57:45:D0:36:7F:ED:0B:BC:78:77:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8427027-aaae-3f3d-8096-aa48b358686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:e7:e9:b6:a3:e3:76:45:f9:10:9f:07:7f:e3:4d:53:77:42:
         80:5f:ae:af:3b:5e:14:0c:35:dd:82:70:7e:39:90:d9:a6:76:
         31:0a:7a:49:00:00:ba:3c:c4:1c:be:bc:8b:cb:e3:8d:71:20:
         a0:8b:01:24:5a:d1:1f:54:9f:25:3b:35:08:4c:4f:8b:8a:06:
         60:22:dd:f2:81:11:22:45:88:f7:22:6f:b1:7e:4c:c9:e2:2e:
         aa:90:02:14:54:f2:e5:61:2c:39:30:c0:ad:43:07:86:6c:39:
         1f:b2:22:92:2b:33:51:91:8f:22:7b:5e:89:a3:47:4d:a6:6b:
         b6:4b:cf:e6:5a:7f:39:68:77:50:39:05:3f:aa:6c:19:33:d7:
         8b:11:87:6c:fb:d4:73:7a:0a:4c:fd:b6:2e:91:73:1b:98:b1:
         3b:10:c0:a7:7a:85:09:3e:92:3d:2b:f5:64:d4:01:be:19:b3:
         70:ba:7d:a2:71:bc:eb:23:ad:b7:17:95:33:90:71:7e:1a:d8:
         49:be:c4:09:26:ef:fc:cd:b9:48:89:57:46:b0:92:e0:e4:32:
         0d:0a:a1:21:82:a6:31:49:49:59:af:95:e1:8f:96:37:d8:5c:
         8f:85:ea:b7:97:65:b4:4a:65:63:de:75:2c:a2:3c:79:0b:38:
         4c:8a:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 00:27:17 2026 by rpki-client