Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3fb85fd0-ec3d-3e0f-8091-754a1dfc320f.roa
File:                     3fb85fd0-ec3d-3e0f-8091-754a1dfc320f.roa (raw, json)
Hash identifier:          pWUyCMDjm6OxU1rfDw4269Cacp7SZYDNIBZTDlOkaek=
Subject key identifier:   50:0A:66:A1:55:B9:87:DC:6B:4D:A2:B6:E5:2F:B4:EF:F4:97:58:62
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D4728410480A49F8C922F6C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3fb85fd0-ec3d-3e0f-8091-754a1dfc320f.roa
Signing time:             Tue 24 Mar 2026 19:45:04 +0000
ROA not before:           Tue 24 Mar 2026 19:45:04 +0000
ROA not after:            Mon 22 Jun 2026 19:45:04 +0000
asID:                     40676
IP address blocks:        205.196.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:28:41:04:80:a4:9f:8c:92:2f:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 19:45:04 2026 GMT
            Not After : Jun 22 19:45:04 2026 GMT
        Subject: CN=3eb50732-f509-4330-bdd0-ed078fbfa11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c6:45:7d:90:03:88:cb:1b:fd:a0:48:c1:ad:
                    df:47:b0:2f:59:9f:44:e8:10:0f:ce:7b:42:bd:bd:
                    d2:63:a4:8f:86:0f:c0:5e:68:cc:06:1e:fd:43:38:
                    5e:8d:ee:75:de:39:a8:24:da:5b:f2:fd:da:c0:76:
                    30:45:a8:c5:14:ba:3c:5b:44:0d:ff:aa:cc:77:3c:
                    28:88:62:91:fc:ca:f3:61:8b:28:fb:71:1c:a5:2b:
                    3c:5f:c7:b2:7c:b2:73:60:d0:0e:f1:49:8d:1f:63:
                    f0:9b:1f:c9:3a:e4:f4:01:2d:5b:cb:3d:6f:0c:1f:
                    3e:64:da:7d:00:ee:7e:40:8a:cd:1c:9a:57:63:46:
                    27:c2:62:ee:ef:1a:c9:7f:4e:1a:3a:41:db:2f:9b:
                    5f:ab:ee:ca:04:6c:b1:92:04:82:ca:2c:38:5f:0b:
                    61:ef:14:75:3e:c2:0a:d6:96:b0:1a:24:30:94:f2:
                    17:a0:7d:cc:88:52:d6:d5:fd:e3:42:e3:bf:c8:38:
                    09:08:d1:f9:0b:6a:4c:79:23:38:b4:8b:e6:96:c4:
                    71:44:fe:db:66:8c:b7:80:be:f6:0c:b3:f0:38:b6:
                    db:a5:c2:f5:d1:5f:9a:09:08:d2:82:92:52:5e:e7:
                    6c:93:ca:ee:74:48:69:be:70:63:9c:21:67:0d:c3:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0A:66:A1:55:B9:87:DC:6B:4D:A2:B6:E5:2F:B4:EF:F4:97:58:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3fb85fd0-ec3d-3e0f-8091-754a1dfc320f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a9:1a:de:94:d7:44:64:52:37:38:ed:c5:15:d1:ec:58:50:
         9a:0e:8b:d3:ae:db:72:fb:6b:11:01:12:4c:ab:6a:13:a4:1a:
         42:c7:08:8e:27:a8:63:f1:68:6b:3f:9e:2e:69:6c:aa:a5:3c:
         20:a3:08:20:5f:f6:6b:53:8f:98:40:e4:54:97:9c:2b:2c:47:
         ae:e7:6c:be:e1:26:06:fe:d5:22:61:71:7e:6f:12:49:3c:41:
         81:01:9f:75:10:de:9e:4b:52:85:98:82:0a:26:2d:9a:60:13:
         cf:1d:b3:25:ea:1e:7c:7f:c7:7c:58:03:61:3f:f8:6a:f4:fb:
         8a:4d:bd:e0:2a:3e:c9:0c:e8:2b:f3:cc:96:58:19:bf:0b:65:
         84:71:a8:db:3d:3a:88:79:e2:86:da:f7:68:33:64:35:b0:ee:
         ba:a5:f3:38:a3:11:b5:63:32:41:9c:44:44:63:00:0a:94:b2:
         01:d2:0c:13:f8:b7:1a:80:8b:4f:d3:ed:d5:f9:da:cb:13:90:
         16:ed:09:e2:a2:2c:51:f5:81:6a:7b:8b:71:65:a0:fc:d1:d3:
         ca:58:d1:f2:3e:ec:8d:d1:26:26:45:3c:c6:8a:1a:6e:ea:b2:
         cd:d9:a4:f7:60:f2:c5:8b:e7:3e:a5:49:10:a8:81:69:a9:87:
         bb:0a:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:40 2026 by rpki-client