Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dd4a578a-b712-39e4-acd1-030521534f35.roa
File:                     dd4a578a-b712-39e4-acd1-030521534f35.roa (raw, json)
Hash identifier:          3UHUr2ZuHxK9GMHIr5yG5YXdzejFZP36XztF10vKNEo=
Subject key identifier:   70:35:38:E6:30:E3:91:94:0B:99:4B:96:EC:04:7F:69:83:95:07:74
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D2529D97D49629CA807EA3D40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dd4a578a-b712-39e4-acd1-030521534f35.roa
Signing time:             Thu 12 Mar 2026 15:30:48 +0000
ROA not before:           Thu 12 Mar 2026 15:30:48 +0000
ROA not after:            Wed 10 Jun 2026 15:30:48 +0000
asID:                     147034
IP address blocks:        205.196.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:29:d9:7d:49:62:9c:a8:07:ea:3d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 12 15:30:48 2026 GMT
            Not After : Jun 10 15:30:48 2026 GMT
        Subject: CN=058b0fdf-2ebb-41d0-9946-648b0ed520ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fd:29:10:2d:d5:97:8c:d7:05:f4:8c:98:f9:
                    39:74:0b:c3:d5:a6:55:e1:ff:2f:63:e6:66:3c:46:
                    19:c4:01:bd:e6:21:e6:69:79:97:f3:52:1b:42:d3:
                    26:36:52:47:c2:b1:d0:ae:c2:e0:e5:77:0d:74:cc:
                    7a:6c:8d:3d:32:a4:9c:47:19:bb:32:db:1b:73:e5:
                    fa:c8:71:86:fa:98:d7:f6:46:56:2d:f8:e0:e4:e9:
                    24:9b:e6:18:48:78:bb:df:91:5c:13:81:b5:17:2b:
                    ee:38:73:ca:9d:dd:9d:00:29:74:8d:3a:5c:18:7b:
                    76:c8:5b:c3:86:d0:95:9f:b9:e9:01:5a:f5:90:57:
                    a0:e1:2d:7b:a3:7e:de:dd:29:f4:be:89:e7:45:52:
                    24:d3:65:df:93:bd:46:dd:a9:7c:00:26:6c:fc:bc:
                    0a:fe:cb:cb:a4:2d:46:38:0d:60:72:bd:d3:f4:63:
                    83:3f:69:94:96:f7:9c:22:3e:95:11:85:15:cb:d1:
                    8e:49:17:ef:9c:53:12:5b:a9:be:0a:c8:b1:e6:be:
                    79:61:b1:a8:94:e2:a5:5c:30:e6:d0:cb:5c:63:4d:
                    f6:1b:eb:20:79:02:77:1b:67:77:72:df:6c:0b:a3:
                    9f:17:7b:ab:bc:0e:9a:36:ea:fe:c4:f3:97:ff:f7:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:38:E6:30:E3:91:94:0B:99:4B:96:EC:04:7F:69:83:95:07:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/dd4a578a-b712-39e4-acd1-030521534f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ca:c3:c7:ac:39:ad:5d:ae:4b:d8:3f:d7:12:93:a1:c2:ab:
         37:38:f5:8e:56:48:40:86:9c:a8:44:cb:93:be:96:a7:49:af:
         f8:71:6a:7b:ac:36:97:da:a6:21:a1:66:1b:8c:41:00:12:cb:
         82:2a:6f:3b:69:49:26:ac:80:77:53:f7:0e:40:ae:3d:b7:38:
         c2:0e:7a:fb:32:5f:c6:4c:3b:34:d5:af:e5:de:ba:5b:af:3a:
         6d:f5:dd:d0:4a:c2:f5:3c:8f:96:44:e2:f8:68:3c:a2:4a:ae:
         b2:61:ed:9c:c4:0c:d5:8d:34:c8:e5:1f:d1:83:b8:6b:00:e3:
         cd:1a:db:7e:61:b3:26:9f:aa:a8:48:c9:3f:62:21:9c:f6:63:
         f2:27:0e:bb:b0:35:8c:51:41:f0:7d:56:2f:a2:dd:a5:95:71:
         6d:1e:a8:ea:fe:cf:c7:19:9f:bd:e6:0a:72:15:67:c3:76:ec:
         d9:05:b6:31:c7:eb:48:5b:23:c2:c2:33:27:4f:a9:84:78:48:
         27:07:a5:b2:7c:a2:00:09:c5:eb:f3:99:79:0b:06:16:0d:7b:
         71:45:01:09:6b:52:3f:eb:a1:92:6c:39:3c:51:1f:5e:00:dc:
         0c:ce:e9:fe:86:eb:3a:ec:34:e9:43:3c:2b:d9:a5:58:bf:f4:
         65:9f:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:49:37 2026 by rpki-client