Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c7c25a4c-c04a-3923-9c73-65529399b8a1.roa
File:                     c7c25a4c-c04a-3923-9c73-65529399b8a1.roa (raw, json)
Hash identifier:          lDL/bFkp0TcVhdMlZbd39EKpvgA5XaFA2Q9En+I/h2c=
Subject key identifier:   D7:65:04:AA:53:CE:1F:8F:8C:29:63:1C:40:D0:39:91:22:22:48:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D97C684350D95B3508B681A00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c7c25a4c-c04a-3923-9c73-65529399b8a1.roa
Signing time:             Wed 22 Apr 2026 16:48:37 +0000
ROA not before:           Wed 22 Apr 2026 16:48:37 +0000
ROA not after:            Tue 21 Jul 2026 16:48:37 +0000
asID:                     397423
IP address blocks:        216.75.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:c6:84:35:0d:95:b3:50:8b:68:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 22 16:48:37 2026 GMT
            Not After : Jul 21 16:48:37 2026 GMT
        Subject: CN=dca13f2b-7683-476d-926f-807aa0fa8b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d4:07:9f:a1:85:23:70:99:d0:ac:c9:e0:a7:
                    89:ec:69:87:26:6e:4a:c4:cd:e7:2b:17:42:c4:1f:
                    be:97:ca:74:cf:fb:69:25:4d:5b:68:de:f3:7b:b3:
                    fa:2c:e8:39:c4:5d:ed:53:9a:d8:7f:37:0f:fe:ad:
                    95:2c:65:6a:4b:31:2b:62:80:7b:b2:4a:a6:36:3b:
                    31:df:e3:e6:02:dd:97:2c:19:6b:6a:db:78:10:7c:
                    ee:16:20:91:13:5b:59:b8:42:9d:d1:65:80:c4:0b:
                    f7:8f:f6:30:4d:9f:b9:09:a7:f2:48:15:47:8a:b5:
                    b4:50:cb:fb:35:6d:81:59:c2:c3:c0:77:42:ef:f2:
                    9d:31:9f:70:2e:1d:28:2d:b2:b6:16:cf:2d:53:fe:
                    c0:1c:68:6c:84:c3:5b:5f:49:d9:3b:75:21:3c:64:
                    41:68:3d:c6:58:0b:17:5c:69:22:10:b6:8d:f6:ab:
                    00:f5:82:b1:f3:e9:c9:1e:c6:55:49:93:84:08:e5:
                    af:7a:4a:73:da:d4:0c:de:13:70:08:98:05:b9:32:
                    6e:d3:02:16:b3:c7:54:68:be:97:58:39:92:09:6e:
                    ae:10:a0:bf:b2:bf:32:23:0f:0e:87:62:22:10:5d:
                    83:18:8e:8c:14:0c:01:e2:a6:66:60:85:c9:88:3d:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:04:AA:53:CE:1F:8F:8C:29:63:1C:40:D0:39:91:22:22:48:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c7c25a4c-c04a-3923-9c73-65529399b8a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:be:1f:07:dd:42:f9:ee:f6:0c:e3:81:7a:97:84:38:13:
         4f:6a:65:b4:79:2e:71:63:aa:93:7a:b3:72:a2:95:b3:7e:37:
         86:70:94:1c:f6:15:4c:ad:10:04:8b:6e:05:0c:e9:fe:b2:b5:
         e3:bb:63:ee:f9:76:69:80:37:61:60:d1:eb:c8:63:a9:1d:b7:
         f0:d1:e6:fe:f4:d5:a2:23:e7:a9:f7:24:b4:cf:b8:8c:79:e1:
         10:d9:3b:bc:53:f4:b2:9d:16:5c:a5:a9:b4:bd:84:55:4f:ab:
         0b:ad:37:76:2e:9f:c0:95:f7:10:11:aa:cf:c1:88:0c:8f:5c:
         8f:94:c1:97:4d:b5:3f:9f:51:2f:2c:d8:01:53:30:69:ab:36:
         fa:a4:9c:a1:bf:5a:1d:38:d2:35:c2:80:33:d7:00:23:c3:09:
         34:c4:28:c1:c0:eb:b8:3d:6c:28:fa:96:ce:44:1f:9f:24:d0:
         f3:c2:5a:d2:e4:82:78:81:5c:9e:d1:a5:7d:fa:52:ca:ef:13:
         4a:62:80:8d:33:bc:5b:fb:84:c0:0d:5e:86:90:12:0e:2f:56:
         c7:e7:57:30:f0:3c:33:d4:6a:eb:6f:59:a8:e1:ca:52:b9:95:
         56:44:a2:0d:95:91:f1:e5:bc:ae:51:6c:a3:d6:3f:82:65:20:
         79:b0:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 21:43:36 2026 by rpki-client