Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f64e470e-29ab-3a98-a58e-5026fdfc1537.roa
File:                     f64e470e-29ab-3a98-a58e-5026fdfc1537.roa (raw, json)
Hash identifier:          yezR1Ms0ynmibUjjYEqr+KdcEkG5R4d0y7BZYALspuY=
Subject key identifier:   9A:EB:A6:01:22:F7:39:7C:F3:16:38:CB:AF:94:E7:63:47:FA:AF:1D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D47281EE8D86AE5E82D2657C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f64e470e-29ab-3a98-a58e-5026fdfc1537.roa
Signing time:             Tue 24 Mar 2026 19:44:48 +0000
ROA not before:           Tue 24 Mar 2026 19:44:48 +0000
ROA not after:            Mon 22 Jun 2026 19:44:48 +0000
asID:                     40676
IP address blocks:        205.196.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:28:1e:e8:d8:6a:e5:e8:2d:26:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 24 19:44:48 2026 GMT
            Not After : Jun 22 19:44:48 2026 GMT
        Subject: CN=fa3f7676-f08c-4672-9e9e-67a153cb080b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:26:d2:9b:2c:8b:57:dd:5c:40:e1:0f:62:
                    05:42:a3:13:51:59:b3:0f:da:fb:5f:a3:b1:c2:d3:
                    7e:be:03:23:63:bc:07:38:47:e8:25:95:64:37:5a:
                    b3:d5:2d:db:e7:4d:a7:40:1b:63:41:f6:be:56:a5:
                    6a:5b:b4:f4:af:62:d8:84:81:90:fb:3d:41:d6:8b:
                    d5:50:5d:9e:c6:d4:25:2a:ae:c5:da:2f:bd:a2:fc:
                    9c:04:5c:15:a0:9c:5e:0a:b3:f4:f3:91:7f:a5:11:
                    d4:ec:6e:c4:79:2a:5d:0c:79:d5:61:26:11:f6:eb:
                    08:3d:c3:df:b3:84:e3:18:a2:72:6c:70:26:c4:dc:
                    e6:db:c0:1b:b1:c7:a8:16:30:0f:62:b3:15:4e:32:
                    70:76:ef:18:ee:7e:3b:48:d0:a8:6f:bf:ad:63:e6:
                    bd:9a:2c:9b:bc:71:5c:25:9d:31:a3:74:ad:ab:92:
                    57:e1:ea:27:38:16:b7:c0:ef:3b:db:f3:03:01:16:
                    a7:34:af:c7:e0:2d:d3:6e:33:fb:fa:c5:ff:92:8e:
                    2a:a4:5e:02:df:56:96:97:be:59:8d:64:ae:d2:39:
                    a7:3a:4c:a5:72:b8:a5:8e:65:35:f5:11:3c:03:b8:
                    e7:ef:cd:9b:f2:76:e1:86:86:60:e8:83:0d:1b:60:
                    2f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:A6:01:22:F7:39:7C:F3:16:38:CB:AF:94:E7:63:47:FA:AF:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f64e470e-29ab-3a98-a58e-5026fdfc1537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:8e:ee:fb:c2:f9:30:61:43:84:18:5c:07:5a:87:03:46:
         0f:76:ac:3d:93:a6:b9:82:2d:2b:ad:c5:68:9f:90:35:f9:72:
         0a:02:b4:da:5b:b2:4c:da:1f:c2:08:f5:e5:05:16:87:ca:ac:
         ff:7a:11:c7:ea:da:a8:cb:4c:a1:a8:ca:51:5b:b6:61:46:96:
         9d:70:34:09:83:8f:75:2c:99:6e:dc:8c:7f:67:67:d4:f2:11:
         96:83:dc:31:98:42:df:b3:74:db:4b:62:05:44:f7:f7:cf:9f:
         4c:cb:e1:d6:08:34:66:45:ac:19:67:e3:a1:6f:36:8a:ae:aa:
         b2:96:82:02:62:52:9a:03:62:75:7a:49:2a:cc:71:86:63:6b:
         40:04:a0:82:48:1c:32:48:3a:1c:f7:3b:0b:aa:97:4a:63:a7:
         29:9d:89:ce:28:80:2f:e7:c7:13:58:9d:6d:1f:bb:6a:9b:a9:
         64:6d:1a:50:fa:98:c4:1a:ff:e3:a2:3b:63:8d:ad:4b:ab:d5:
         cf:79:18:76:15:5f:95:c9:eb:0a:c0:51:22:87:59:6f:76:36:
         a2:e4:23:df:cd:9d:10:c0:bc:73:8f:57:87:a9:75:7a:c1:54:
         fe:f3:87:7f:ee:15:19:be:f1:47:70:18:97:0a:e8:80:31:11:
         7f:a5:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:35 2026 by rpki-client