Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f2080c21-0fd4-3934-9359-0d3030e05720.roa
File:                     f2080c21-0fd4-3934-9359-0d3030e05720.roa (raw, json)
Hash identifier:          RzlyOjivyLhr2FzGG8PFeziEnbr71MzSxOgezchhsOA=
Subject key identifier:   23:8B:0F:CF:3C:E7:26:89:DB:94:39:DD:29:66:73:28:DE:F1:9A:C0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D49AB27800FC97DC414AD9500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f2080c21-0fd4-3934-9359-0d3030e05720.roa
Signing time:             Wed 25 Mar 2026 17:20:26 +0000
ROA not before:           Wed 25 Mar 2026 17:20:26 +0000
ROA not after:            Tue 23 Jun 2026 17:20:26 +0000
asID:                     55201
IP address blocks:        216.75.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:ab:27:80:0f:c9:7d:c4:14:ad:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 25 17:20:26 2026 GMT
            Not After : Jun 23 17:20:26 2026 GMT
        Subject: CN=9a589b14-c215-4214-bc2e-4ebfbd274c2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:d6:af:fe:16:5d:41:dd:14:b9:90:87:38:
                    0f:ce:91:2b:f3:51:79:07:d2:1b:fb:3c:3f:87:e4:
                    c5:50:60:70:85:e3:22:33:be:8e:15:1f:29:da:0d:
                    e9:81:92:b2:29:9c:66:5d:8f:81:7e:a6:63:db:4b:
                    ec:49:33:eb:cf:8d:82:b6:9e:40:d6:b0:55:c1:97:
                    c2:63:80:39:55:1b:64:eb:4e:64:9d:55:aa:c1:42:
                    dc:12:9b:d3:3a:10:17:fd:05:f8:c4:50:33:96:b9:
                    f7:56:67:78:bc:b1:97:bc:fe:84:5a:cf:47:5a:71:
                    33:15:b8:a3:2c:fe:7f:b3:da:1a:3f:3f:6f:eb:a1:
                    15:3e:76:4a:b0:ac:cf:4a:5d:39:73:5e:81:f1:28:
                    bb:15:f7:f1:13:6e:82:b9:1d:84:c4:96:0f:5d:17:
                    95:57:ec:52:81:1d:f6:24:f1:92:59:59:ba:5e:54:
                    62:c1:0c:cb:07:04:73:1f:0d:71:05:8a:50:11:ac:
                    0f:87:33:1c:8c:55:a4:9f:b2:88:d1:1d:2e:b6:8c:
                    61:30:a5:00:cf:5d:13:6a:b1:9c:49:3a:b3:66:40:
                    8f:5d:d3:f6:3d:2b:a0:51:cb:09:8c:e1:7a:34:23:
                    29:be:b9:31:54:21:d1:d7:0b:d7:a4:20:36:ce:31:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8B:0F:CF:3C:E7:26:89:DB:94:39:DD:29:66:73:28:DE:F1:9A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f2080c21-0fd4-3934-9359-0d3030e05720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:5d:b8:37:c8:97:57:e8:37:ad:6f:25:08:98:86:bc:11:65:
         f4:8a:bd:1d:54:f4:c6:a2:7f:86:c0:a7:81:3a:cd:12:3a:d6:
         cb:2a:2e:69:dd:9c:75:3b:4c:38:62:e4:5f:0f:3b:8f:76:a0:
         93:ca:85:61:eb:16:7b:8b:e9:cc:81:55:05:3f:27:e3:67:e0:
         14:47:47:1a:7a:9d:f2:85:9d:e4:a5:55:ac:88:63:3b:fc:de:
         7a:a4:2e:43:43:6f:c8:39:b2:1f:b7:33:81:ac:54:1f:0b:ab:
         1f:8a:46:9e:f9:83:fb:ca:dd:1b:bc:8c:08:93:fd:79:cb:21:
         1b:87:25:8a:81:1b:a7:48:08:92:fb:df:6e:e8:d5:c2:d3:68:
         e9:87:47:20:d1:57:83:92:14:ef:91:a0:bb:b8:f4:af:0e:2c:
         f0:cb:c8:95:c2:79:7d:2b:7a:10:fb:01:07:99:30:60:9b:aa:
         5c:0a:15:cb:1a:5f:63:6e:2f:0a:be:19:7d:9a:0e:1e:3f:97:
         54:da:08:b5:c8:ac:f8:7a:b6:fa:f4:a5:61:55:dd:99:5e:a5:
         dd:a8:e3:70:19:f5:a0:3e:b8:b0:0f:66:11:fb:02:d9:e3:6c:
         3e:a2:16:27:ec:1b:c8:83:e7:79:0f:4a:0c:b8:17:ed:a7:9b:
         58:8e:45:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:01 2026 by rpki-client