Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/33a51fbe-d4b9-3224-b36f-f35fe177c743.roa
File:                     33a51fbe-d4b9-3224-b36f-f35fe177c743.roa (raw, json)
Hash identifier:          XZTmGRAkACz47/z9G/TSlfem/kccWeMAx5iUUd1B+n0=
Subject key identifier:   BD:EE:55:43:4A:DC:4C:5C:89:14:AE:9B:9B:E2:79:FC:C6:83:A1:13
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E059C83D80A8B3F312D20FD60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/33a51fbe-d4b9-3224-b36f-f35fe177c743.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     134135
IP address blocks:        205.196.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:83:d8:0a:8b:3f:31:2d:20:fd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=84f00fcf-31f3-495b-ab27-e5301790c29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:dc:aa:d4:4b:16:30:1f:09:6d:ef:4b:83:
                    b7:94:a9:c6:93:1e:0e:c9:0a:9e:1a:ab:8d:a6:3d:
                    09:58:a3:b0:e7:60:28:e9:eb:29:b7:39:31:96:83:
                    c8:4e:7d:b1:de:76:fb:89:08:94:03:35:11:fb:48:
                    93:d0:90:7c:50:80:d2:fa:45:37:f9:40:bf:bc:27:
                    36:83:59:70:80:c8:e1:bf:39:0e:8d:0c:4b:8a:6b:
                    56:8c:42:33:8f:de:14:7f:bb:cc:10:03:c2:80:79:
                    1a:70:2a:99:ff:51:dd:15:5d:26:1d:70:75:1d:ae:
                    b9:a0:25:b8:ce:6d:a6:5c:74:ee:2a:a6:f6:2d:20:
                    c0:ae:5e:e4:56:ae:5b:32:51:a9:f7:f3:9d:f8:e1:
                    6d:8d:58:b5:27:fc:ea:66:26:7f:d6:36:26:61:61:
                    04:de:29:ef:b8:c3:fd:c5:40:3b:bc:90:52:86:3e:
                    d7:a1:ad:30:6f:5a:bb:8a:ac:39:32:eb:69:33:bd:
                    61:34:ef:a0:3a:42:62:1c:cc:3c:e3:dd:ad:de:bf:
                    f3:6c:fa:1a:03:ae:59:4b:b6:16:e4:26:32:7c:a0:
                    54:b6:05:34:9b:3c:01:57:c4:94:63:e4:85:d3:ed:
                    17:f0:50:64:6d:54:54:53:50:56:35:9c:9b:d9:e0:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:55:43:4A:DC:4C:5C:89:14:AE:9B:9B:E2:79:FC:C6:83:A1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/33a51fbe-d4b9-3224-b36f-f35fe177c743.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:98:90:0a:f7:7f:0a:56:e4:ee:4c:59:25:52:1c:a0:7d:fc:
         89:96:a9:51:86:4c:e9:ba:bc:00:7f:df:d6:75:bb:c6:d8:f9:
         22:94:ea:c1:4d:83:08:4a:3e:ab:ff:d2:c1:4d:5c:05:1a:eb:
         0c:ec:32:e4:0e:76:6e:71:84:9c:a4:71:89:4e:50:ca:78:fe:
         18:a2:be:5d:1b:e1:00:96:41:00:7b:c2:13:b4:ae:80:ef:05:
         56:e8:6d:30:eb:d5:75:eb:b0:34:86:63:2d:3f:74:b9:5c:5e:
         ce:e4:b3:98:ce:f4:e0:29:53:72:9b:74:a0:ba:a0:f8:b1:2b:
         0e:7a:45:09:e6:8b:ba:74:9a:17:84:ca:0f:bc:e7:92:a4:4a:
         b2:d9:c6:71:7e:ab:82:5e:30:bf:9e:d4:73:30:7e:94:c9:34:
         35:0a:64:d5:41:74:97:57:ea:41:c8:17:44:a3:24:59:ae:1b:
         99:8f:75:18:60:43:5b:55:9c:57:fc:53:8a:0b:e9:ce:d9:d6:
         3c:b1:a6:50:d9:0c:c8:e4:31:cc:86:31:a7:6c:05:c6:fd:03:
         f0:89:e4:3c:89:cb:63:d9:a1:ed:ec:38:58:e8:30:18:50:ac:
         64:c0:2f:47:08:d7:94:84:29:6c:73:cd:8f:30:32:d9:f5:bb:
         36:ec:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:14:25 2026 by rpki-client