Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca78e312-e5d6-3328-8414-0b49596f88fe.roa
File:                     ca78e312-e5d6-3328-8414-0b49596f88fe.roa (raw, json)
Hash identifier:          mOcy8NsoC0aBF+np7pijjgRhWClXx7eNyWBsuDS77fU=
Subject key identifier:   E0:D7:47:F4:4E:FE:AF:E9:D7:D8:F4:35:18:4A:94:47:F8:58:53:DB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D1DE4915390AC189A3614B340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca78e312-e5d6-3328-8414-0b49596f88fe.roa
Signing time:             Tue 10 Mar 2026 01:00:31 +0000
ROA not before:           Tue 10 Mar 2026 01:00:31 +0000
ROA not after:            Mon 08 Jun 2026 01:00:31 +0000
asID:                     834
IP address blocks:        180.131.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:e4:91:53:90:ac:18:9a:36:14:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 10 01:00:31 2026 GMT
            Not After : Jun  8 01:00:31 2026 GMT
        Subject: CN=355ee103-e882-475c-997f-1f37156d56f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:58:69:08:3c:6b:91:f0:16:3d:d0:b7:56:
                    3b:ae:ca:b3:90:5a:85:1a:07:ef:d1:da:8e:56:7a:
                    0e:58:e8:b0:a0:13:8e:a2:a9:d7:fc:bb:72:14:86:
                    24:7b:3e:6a:7d:9d:4d:c1:37:7d:cc:a7:00:79:5d:
                    77:05:4c:7f:68:26:04:8b:09:ab:2d:93:cc:e9:4a:
                    ca:0d:7c:b6:a3:b7:da:71:6b:66:d0:8f:d7:a7:1a:
                    18:8b:4f:ed:7a:f4:4c:b0:b9:20:49:14:1a:b4:18:
                    d4:96:99:3b:7d:4e:cc:8a:70:31:68:eb:0c:bf:cb:
                    7a:bd:05:fd:df:af:48:ae:ad:38:96:bb:74:36:49:
                    1b:c9:80:da:bd:61:6c:34:b6:28:5f:36:79:2e:d4:
                    7e:b7:d7:7b:b0:68:41:88:93:52:9b:1c:cd:03:63:
                    0f:0c:2b:2b:2c:80:63:96:5d:83:6d:ad:4b:ae:38:
                    7f:90:1d:a2:19:3b:b4:1e:01:97:c6:cc:83:9d:6b:
                    c4:7c:5e:22:c5:0e:3e:b3:68:99:8a:04:b8:4a:0e:
                    6d:24:5a:ed:e5:cc:89:a2:b9:1f:f4:44:44:9b:80:
                    5a:cb:a9:3d:5d:e5:8f:69:d6:12:a9:ff:43:eb:68:
                    9a:09:b4:97:93:6a:aa:28:4d:8e:27:d3:17:e2:8f:
                    39:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D7:47:F4:4E:FE:AF:E9:D7:D8:F4:35:18:4A:94:47:F8:58:53:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ca78e312-e5d6-3328-8414-0b49596f88fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:46:e6:af:01:c6:aa:69:6d:dc:ca:a9:9d:30:f5:b2:4a:
         69:7c:84:ea:77:50:98:16:ac:83:54:c4:3d:2d:13:a1:d3:71:
         0e:f7:19:cf:f6:75:59:9f:1c:db:1d:13:7a:c8:ca:d8:48:7b:
         7c:4a:66:54:af:e6:c7:53:63:ed:ac:9b:12:9a:81:fb:38:05:
         50:06:e9:dd:bd:82:7c:7b:95:5b:01:28:30:24:f2:a3:00:e3:
         e2:23:75:f3:93:96:36:18:63:2f:1d:d0:fe:df:1d:37:e6:a6:
         bd:60:54:cf:f0:b7:19:be:c1:8b:84:62:7e:d6:23:69:29:1b:
         c4:d0:d4:33:6c:15:5b:8f:5c:3c:de:54:02:30:59:04:cc:be:
         55:68:ea:80:ff:19:16:b5:05:a4:75:07:af:7f:92:4d:97:96:
         5d:a8:ee:37:ca:25:f8:8d:07:d2:2b:d3:87:2e:9e:77:d5:92:
         4e:c0:6f:ac:d3:95:f6:2d:75:94:81:12:32:47:0a:9c:ad:cf:
         7f:2c:ba:e8:17:e7:cd:27:d8:4b:45:f1:9a:ad:da:7e:1a:25:
         93:3c:ce:ea:34:d3:44:50:a9:99:0f:19:02:8a:d1:01:d3:ce:
         24:9a:cf:c1:05:65:f7:78:81:a7:e9:60:4c:ec:2c:f4:2e:cd:
         f5:ae:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:59 2026 by rpki-client