Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa
File:                     49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa (raw, json)
Hash identifier:          LqG9z95ZOkOT61K+Kl6F81VrgPv/oGSMUjh1MNmYeUE=
Subject key identifier:   B1:64:C6:3B:4B:86:C9:8D:AE:81:3F:BA:79:70:11:8B:F6:18:58:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D4A8FBB2157E352168432CB40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     12029
IP address blocks:        184.174.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:bb:21:57:e3:52:16:84:32:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=4d63ddbf-1606-4fb5-94e2-56abcd794c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:22:cb:d2:b9:f1:2c:1a:bb:13:9c:1c:02:
                    48:e7:25:db:d2:47:a1:4e:9f:5d:3f:28:f7:31:ae:
                    ef:2c:c0:4f:5a:aa:15:a7:c7:42:f3:d0:09:6d:bb:
                    00:51:74:2d:c3:39:b3:ca:c6:26:a6:d5:8f:1d:ad:
                    9e:95:17:6d:73:1f:d4:4d:ac:5b:cb:3f:98:88:e0:
                    0b:29:35:02:65:f0:bf:dd:8a:7a:43:7e:74:c1:0c:
                    72:bb:ea:0e:ab:82:3d:2f:13:c6:15:24:c4:56:47:
                    71:fc:af:7a:45:9b:09:6e:6c:a3:24:c3:7c:83:ce:
                    89:a0:8d:af:37:96:e2:b8:91:4e:25:60:ee:a5:b7:
                    fd:4c:09:ff:7f:dd:65:99:b5:67:b7:a6:39:65:fe:
                    a4:e1:ac:6f:be:89:bd:3d:90:13:3b:47:3b:04:e6:
                    c8:79:40:77:74:24:ce:5c:35:64:3f:f4:d9:df:31:
                    87:58:88:95:38:f3:be:81:8c:41:8f:f7:e1:04:8e:
                    08:86:8e:07:a1:92:85:32:9c:10:6e:ab:92:a9:82:
                    15:a5:c1:a9:33:54:ea:bf:c5:97:c5:38:57:0c:3a:
                    a8:3e:20:53:f6:1e:f6:b8:8b:e2:96:8c:a5:1e:b8:
                    e2:e7:8c:8d:d2:af:08:d3:1f:0f:4d:7d:88:4e:ad:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:64:C6:3B:4B:86:C9:8D:AE:81:3F:BA:79:70:11:8B:F6:18:58:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:ed:55:6c:fd:cd:c9:64:06:01:74:0b:6d:af:ca:85:8e:0b:
         7d:b5:a3:78:4f:8b:5c:2b:a9:04:da:87:a9:82:54:da:dd:29:
         2e:6c:3e:c2:0e:4f:b1:98:80:91:05:bf:8e:18:97:1a:0d:40:
         5f:f1:51:5b:43:c7:5d:55:18:da:b4:27:14:3f:f9:ea:fc:bb:
         6b:3a:bd:15:53:64:ec:88:c9:cd:40:4a:36:c4:8d:87:69:09:
         2f:c4:d6:39:8e:6f:a7:a4:e9:d3:ef:86:c9:b9:51:62:8b:f3:
         54:ae:fa:77:ec:66:d8:b7:24:b2:ff:13:2c:41:7e:f6:f2:4d:
         f9:69:06:f7:d0:21:58:fa:28:58:88:70:fe:aa:39:cd:62:5c:
         f8:d2:cd:f6:cd:55:ce:27:08:0c:06:fa:66:a5:43:24:08:37:
         9f:93:d6:4f:b0:b8:b0:d1:57:74:41:90:d8:96:56:cf:c4:b4:
         b3:22:59:72:f2:fa:04:36:26:df:76:12:e2:ca:2b:6d:6a:4d:
         d7:2b:46:23:a4:b9:01:54:c9:3a:dc:2f:9f:05:54:81:4d:32:
         b7:bf:a3:f0:fc:4b:9a:53:5c:51:79:77:25:dc:3e:e2:b9:df:
         1d:ae:17:46:3e:8c:57:41:e0:8a:ac:28:fc:2d:30:f0:17:ab:
         58:40:56:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:41:16 2026 by rpki-client