Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa
File:                     538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa (raw, json)
Hash identifier:          UV++Vh0PsqpSe7iBjq44mFYzPXDv/7exo9AsJpI7Vg8=
Subject key identifier:   AB:28:15:19:B9:5A:13:54:9A:39:4B:09:B3:9D:04:7A:15:AB:3E:6A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CEBC22FA2CD76871AD6EF6E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa
Signing time:             Fri 20 Feb 2026 02:00:32 +0000
ROA not before:           Fri 20 Feb 2026 02:00:32 +0000
ROA not after:            Thu 21 May 2026 01:00:32 +0000
asID:                     21769
IP address blocks:        174.140.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:eb:c2:2f:a2:cd:76:87:1a:d6:ef:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 20 02:00:32 2026 GMT
            Not After : May 21 01:00:32 2026 GMT
        Subject: CN=58135f3e-284e-4777-831b-f8c2297e27bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d1:f9:b7:74:b3:12:ad:f2:e7:47:cc:16:13:
                    fb:92:37:6c:21:97:5e:dc:56:2c:e1:51:7c:ca:d3:
                    d5:14:f9:ea:eb:2a:dd:03:93:48:03:45:3c:b1:50:
                    17:87:b4:ca:73:fe:ef:5f:49:58:46:f5:c3:be:37:
                    97:22:9b:de:bf:0f:bd:3c:f7:64:0a:09:93:e1:43:
                    cf:41:9f:40:e1:fc:4c:b0:1e:b1:76:32:ac:be:78:
                    82:11:af:cc:db:c6:2c:13:fb:79:01:43:a6:a5:40:
                    09:da:99:61:87:4d:51:e1:87:2f:13:33:d4:86:44:
                    8d:c4:3a:ca:ae:c9:ae:bd:7c:44:b4:a8:c7:7b:17:
                    e3:75:46:51:54:27:a4:09:51:1a:de:c2:f5:67:e3:
                    5a:03:fd:03:d8:e2:b2:11:fc:7c:45:89:6e:c8:9d:
                    84:ee:50:a1:07:82:f1:74:f9:19:87:c1:48:6c:9d:
                    9a:88:a5:1e:09:b4:0b:1d:5e:6e:19:82:98:44:ea:
                    55:38:8a:5e:57:92:80:be:2e:a8:5c:43:d3:1d:c9:
                    dd:30:b0:40:57:aa:97:a9:e2:e2:58:11:ea:ed:c2:
                    64:03:83:8c:51:d8:a9:48:8a:20:6e:da:3f:c2:fc:
                    4b:0f:c8:b5:b9:10:01:99:14:a7:99:55:85:b2:b0:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:28:15:19:B9:5A:13:54:9A:39:4B:09:B3:9D:04:7A:15:AB:3E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/538e7ec4-b64f-3b40-a455-016a1d1fb49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:5e:a1:26:58:c2:7f:5b:3c:3b:f9:b7:86:39:bd:24:03:34:
         28:58:18:8a:3e:29:86:6d:d9:00:69:86:52:91:85:40:1e:54:
         d7:66:71:7e:c0:fd:69:a6:62:9a:a4:f1:f1:4c:55:54:e4:e8:
         11:f4:65:2a:d2:38:e6:17:fa:01:f0:9a:de:06:ae:b9:4c:67:
         e9:7b:06:be:fc:9a:09:b7:d8:04:ee:25:db:dc:30:8b:ff:a3:
         39:66:90:c3:45:5c:a8:1d:4a:71:9d:4b:cb:52:1e:38:fb:01:
         e4:65:84:49:32:18:4b:f0:11:f4:15:35:24:33:19:85:b0:eb:
         4f:7e:fe:59:53:14:50:da:da:3a:e7:3e:79:97:a9:5b:96:bd:
         53:15:68:2a:0d:e6:2f:7e:9d:39:1f:3c:4b:eb:df:6e:fc:43:
         dd:8b:08:3f:36:b8:06:f4:85:bc:e2:a3:21:de:eb:6e:3b:11:
         df:c7:e2:d5:3f:0c:b8:be:8e:7e:9d:6b:61:10:1d:7b:e1:91:
         1f:3e:78:3e:3b:fd:cb:c6:5b:cb:45:59:f0:3b:c2:4a:41:28:
         00:5e:80:3a:5e:c2:6a:32:de:41:b6:68:4c:4b:ea:21:e0:e1:
         71:05:7a:aa:6f:8a:70:68:86:09:55:6e:6a:1d:96:3b:01:05:
         7d:02:c8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:17 2026 by rpki-client