Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c20047de-e31d-3cec-99cd-fda1250a60ef.roa
File:                     c20047de-e31d-3cec-99cd-fda1250a60ef.roa (raw, json)
Hash identifier:          K5RT0e86oVgI2ddCE+LLig8o2mbHVTxZz8Ff7zQEM5c=
Subject key identifier:   BF:04:E2:FE:8F:68:9D:4D:11:A2:7F:1B:5E:BD:E3:E3:FB:16:C8:33
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D143D4D97F2886F7E41CA8F40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c20047de-e31d-3cec-99cd-fda1250a60ef.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     395374
IP address blocks:        180.131.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:4d:97:f2:88:6f:7e:41:ca:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=83f26902-55ae-449d-b9fe-0fec77a5d9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:68:87:71:3a:9d:ff:3a:3c:50:91:4e:64:
                    bc:85:ee:ee:1e:41:4a:8b:94:b5:c6:a9:a8:11:39:
                    ae:c0:86:da:b6:54:0d:b3:05:47:e6:ba:26:03:a0:
                    15:da:40:ce:c1:16:b9:fa:24:e4:8e:bd:02:43:d3:
                    28:45:cb:18:e5:33:25:8d:6e:7d:7d:5e:d0:f0:2d:
                    df:1b:40:86:94:db:da:8c:01:96:95:c7:1e:be:e7:
                    e1:e6:06:bf:49:3e:d0:e4:4d:bd:2c:a0:46:95:e6:
                    f6:f9:4b:c1:ff:1f:f8:8b:5f:3d:11:4d:ad:f0:8a:
                    f6:c4:a5:b4:97:ac:63:0b:f9:06:26:bf:82:7f:c3:
                    1c:ac:d0:db:6b:cd:71:8a:ea:0b:e8:29:87:95:2f:
                    a8:25:b2:10:2b:05:61:37:13:36:70:6f:cc:e2:da:
                    93:ce:90:da:70:8b:36:ff:28:14:c6:23:de:f5:4f:
                    5e:c7:4b:7c:f2:ef:4d:e8:04:e5:32:cd:35:c0:60:
                    29:c7:08:4d:d3:20:f3:7b:f3:c2:8b:62:8a:e2:89:
                    48:fe:5e:c3:35:40:5a:38:b7:80:eb:82:cf:c4:aa:
                    70:c6:cb:67:bb:c0:8f:da:6c:2b:0a:01:f6:4c:6b:
                    d6:60:84:9c:54:49:b2:ba:c0:70:ba:ad:05:07:2b:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:04:E2:FE:8F:68:9D:4D:11:A2:7F:1B:5E:BD:E3:E3:FB:16:C8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c20047de-e31d-3cec-99cd-fda1250a60ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:2a:06:6b:a9:7f:83:37:7e:0c:3f:7b:e6:a3:11:c1:88:28:
         4c:71:f8:a5:19:c5:f3:92:1b:a1:01:3b:8b:09:06:fb:19:fb:
         f9:82:5b:99:ab:ab:3f:b5:e3:47:ed:cf:2d:8b:1e:dc:c9:47:
         ee:67:23:1d:df:27:3b:9f:5c:e8:c7:1c:e7:99:91:91:f1:96:
         00:55:a0:6c:e5:1e:9e:e7:1f:9a:70:1f:d8:42:27:11:0d:b2:
         c2:e8:15:97:ba:71:f4:fa:11:45:02:83:c6:7e:09:3e:35:42:
         b6:6e:de:16:e2:60:10:a5:3f:d1:e6:6f:c7:7e:13:b4:04:c3:
         d8:88:88:f1:17:63:f3:58:1e:f3:d8:53:34:1c:c2:0b:de:24:
         00:b1:05:fa:b9:38:58:15:cb:47:5c:fd:87:61:93:64:16:f9:
         3b:ae:4e:a8:43:d9:eb:a4:6c:1d:73:86:45:77:a4:c7:35:62:
         0c:d3:84:aa:89:32:12:c1:30:b3:0c:24:0d:29:6e:dc:02:e6:
         76:64:4d:70:9b:f0:da:06:0c:18:fa:d2:02:c2:5a:19:0e:b1:
         c0:a4:44:aa:85:e9:97:56:1e:7f:13:1f:67:f6:4d:8c:0a:4f:
         6e:4d:66:74:91:fc:5b:3e:c3:f4:70:96:1a:2a:f7:43:5f:59:
         c4:78:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:01 2026 by rpki-client