Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa
File:                     78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa (raw, json)
Hash identifier:          imrpaD6e/7ST0elisH2KalAOGyhYMzNmJ5ca5hLdGww=
Subject key identifier:   16:49:8C:04:3A:C9:CF:6E:63:62:40:1E:ED:D4:57:A0:7E:27:0F:CF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D343A1AD93EB2FF9561DB5B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     8987
IP address blocks:        184.174.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1a:d9:3e:b2:ff:95:61:db:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=969358bb-fbb7-4b1d-ae00-48453dc050a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:9e:51:25:c7:f7:e6:52:19:16:57:26:f7:
                    b6:04:fc:d3:67:36:72:ba:c1:d7:37:f1:2e:c4:1c:
                    d5:38:35:ac:1e:e6:9c:10:97:8d:32:7b:d6:a4:13:
                    7d:06:82:82:17:2b:d2:af:99:46:21:f8:07:00:23:
                    ae:a6:e0:d3:d8:cf:a9:f2:96:9e:8f:5a:0f:43:fe:
                    a9:65:05:a5:b8:3c:2e:64:87:30:54:79:d6:c1:a5:
                    59:58:03:9d:61:79:cd:ae:cc:9a:b8:ca:ba:b7:61:
                    50:67:e2:da:21:0d:b9:90:c5:d4:60:26:c8:0b:52:
                    62:8a:f7:70:19:c9:9f:96:36:db:c5:44:bf:1f:82:
                    c5:d4:14:5a:f4:85:8a:02:d8:de:56:ac:57:db:03:
                    ea:17:a3:fe:56:17:94:e3:e7:e2:4f:6c:59:da:8a:
                    0c:f6:52:d4:6b:3c:a7:fd:e1:2e:c6:23:e0:cd:17:
                    9f:b4:b1:24:e6:8c:66:30:2e:7c:0e:f6:2e:3f:8e:
                    41:0c:d8:eb:6e:52:4b:dd:40:d1:fa:85:30:a4:09:
                    81:85:8d:93:19:04:27:1a:bf:89:04:81:2c:8c:a9:
                    ed:5a:c6:e5:ed:1d:32:99:b7:91:6e:59:7a:32:e6:
                    f0:b4:cc:48:4a:23:5a:ab:2d:67:9d:c5:f5:49:c1:
                    7e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:49:8C:04:3A:C9:CF:6E:63:62:40:1E:ED:D4:57:A0:7E:27:0F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b7:d2:41:6f:11:7d:6a:b1:cc:5e:e8:c5:37:c1:b9:45:49:
         4f:7b:7e:ef:ca:a3:be:e6:49:8a:98:e7:30:e3:8c:dd:5e:f8:
         47:24:b9:54:64:dd:0f:6e:cb:7e:7b:0f:0c:7c:3d:65:bc:53:
         9b:cd:31:0c:a4:c6:8f:3e:e9:24:c2:1f:9b:c1:ba:ec:8c:95:
         1e:1c:b3:cb:b3:26:77:56:9c:47:ce:07:52:9c:c7:41:e9:8b:
         7e:d1:a3:82:ee:a1:be:2d:71:1b:f8:cf:86:8e:60:7d:a7:15:
         40:1b:78:f5:64:f3:aa:de:d3:54:67:cc:ca:5f:41:08:47:0e:
         71:8e:b2:5d:60:63:5f:be:0a:cc:14:d4:8a:4a:3d:b7:7a:35:
         93:ce:da:dc:6e:f3:95:f7:0e:28:d5:b5:ba:b8:09:9a:22:25:
         da:0a:17:36:ef:8b:b6:5a:d0:f7:83:04:d6:79:0a:6f:87:c0:
         57:cf:18:7d:35:e2:54:df:c2:e1:88:cd:27:0a:dc:5b:a4:cc:
         fd:83:f6:5b:37:7c:94:47:a9:27:1d:6b:38:8d:02:61:ec:fa:
         bb:9b:c8:00:5b:92:a4:48:a4:b2:9a:50:ad:e3:c6:25:84:23:
         63:84:86:bd:22:bd:23:92:68:b2:f9:02:42:bb:15:4b:33:e9:
         d7:99:c1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:36:03 2026 by rpki-client