Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/678d0ca4-f2fc-3897-b2be-061feafe1bf0.roa
File:                     678d0ca4-f2fc-3897-b2be-061feafe1bf0.roa (raw, json)
Hash identifier:          cumK8I755FIcGKF1O+0+BBmZW9z2VeNpyakS1sI2hhc=
Subject key identifier:   E6:F7:8E:48:92:DD:85:69:2D:2B:24:6F:20:0F:2F:E7:D6:4D:7E:47
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D11726B42DF96B534880C4B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/678d0ca4-f2fc-3897-b2be-061feafe1bf0.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     16276
IP address blocks:        184.174.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:6b:42:df:96:b5:34:88:0c:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=97d0485e-bc85-4ee6-8d3d-eda69eb99274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:79:bb:42:05:3f:d3:4e:c0:a3:e1:3c:ce:
                    54:fd:15:e6:da:d4:54:54:34:7c:9c:2c:9b:ca:73:
                    ad:d7:8b:67:4e:3b:dc:29:23:88:36:3f:16:08:22:
                    57:53:21:84:9a:50:d5:34:c2:48:54:4a:78:2f:d3:
                    a8:7c:ca:62:25:1d:27:bf:0b:60:85:74:60:33:1b:
                    1a:59:3c:16:a8:3d:12:de:23:43:d8:95:eb:0f:89:
                    2b:f5:c4:3d:f9:d1:1d:e5:58:25:f4:4d:e1:7a:73:
                    b8:bb:2e:2c:fa:26:4e:7c:cf:b6:b2:40:da:05:f0:
                    4a:aa:75:29:fa:b3:e6:3c:50:3a:f9:c2:23:79:6f:
                    c3:df:7e:62:cb:ed:a5:dd:77:4d:99:02:44:e7:73:
                    7a:f6:b7:97:d0:db:10:d5:27:e3:07:ae:7e:d3:2d:
                    02:f1:08:84:a6:09:f0:3e:34:80:97:da:30:45:31:
                    1f:7a:c0:56:e2:2b:ac:6b:7f:f4:c9:09:45:f0:a5:
                    2f:bd:29:ee:31:79:46:15:02:7b:4a:ea:28:cb:2b:
                    35:8d:67:e7:82:ab:21:3a:53:fe:2e:39:22:1a:a0:
                    f3:fb:49:f6:9a:05:de:da:20:a1:a1:ad:82:72:a0:
                    76:6a:53:6d:11:7d:5d:0b:ef:76:81:2f:1f:17:7a:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:8E:48:92:DD:85:69:2D:2B:24:6F:20:0F:2F:E7:D6:4D:7E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/678d0ca4-f2fc-3897-b2be-061feafe1bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:db:fc:ef:34:c0:0a:1f:14:2f:e7:85:b4:29:df:fe:1c:d3:
         6d:51:35:af:1c:f4:7f:7d:ff:22:28:27:12:47:fb:6f:e6:7d:
         cd:3e:3a:46:3e:65:3f:6f:d6:ae:63:be:fa:09:53:89:17:eb:
         a8:1f:d8:d6:22:ab:c7:ed:bc:8e:d9:af:59:18:ad:3b:40:7c:
         a5:fa:28:7e:49:b2:bc:00:1f:c2:c2:01:ab:31:39:07:be:d4:
         4e:b2:aa:c1:ca:b5:8b:23:7b:71:06:9a:78:23:ca:1c:a7:5e:
         86:e3:c6:e3:8e:85:c2:ff:74:f8:38:5f:56:eb:f4:7c:84:0e:
         64:43:c4:ee:d6:78:eb:f9:3d:68:e0:ae:fb:6d:2a:42:e2:32:
         34:9a:e9:dd:50:f1:39:0e:44:12:10:57:f9:82:ff:7d:0e:82:
         3b:61:68:b2:c3:c0:46:bc:6a:7d:4a:f4:7d:53:d7:ba:12:1e:
         ba:f1:42:44:16:fe:cd:87:ac:00:fa:19:51:75:35:38:88:5e:
         fb:d0:8f:81:d4:5d:ca:51:cb:4c:ca:53:b4:19:c1:0f:8b:f5:
         4f:33:c5:11:04:8a:eb:fc:1c:f5:ac:53:b4:01:7c:a8:a0:50:
         e4:d1:53:57:02:f1:59:2e:c9:f1:f1:c9:94:8c:bc:0d:e6:94:
         f7:e1:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:34 2026 by rpki-client