Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa
File:                     667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa (raw, json)
Hash identifier:          MgSh6jU2udg+Zu/fS3xxMXp/8qQNjDjalHDMSsCB88U=
Subject key identifier:   21:F4:C2:AB:DF:4C:67:C8:17:E8:C8:E5:24:BA:B1:5D:80:9F:8E:AF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584CC61202AD517E442E5402D700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     14315
IP address blocks:        184.174.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:02:ad:51:7e:44:2e:54:02:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=e5304fad-bed6-4b56-9066-6fb686923f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:82:75:5e:11:81:15:e5:12:12:7b:f9:10:08:
                    2f:5f:aa:de:a3:17:85:29:4f:0c:2c:4c:b4:14:c8:
                    b3:88:c8:3e:c9:0c:64:4e:bf:e9:59:06:82:b6:2f:
                    12:6b:ca:14:6f:3f:68:de:20:18:37:4e:7b:0a:f8:
                    30:79:be:22:c4:b0:ba:16:86:05:bd:04:f2:d3:56:
                    5d:d8:ce:07:f5:a5:7a:a0:a6:3a:89:ba:be:2e:e6:
                    7e:88:eb:a7:f4:50:34:71:8d:95:cc:71:e3:17:2f:
                    13:17:89:fd:46:b0:20:5d:15:15:7a:17:5e:4a:4f:
                    2b:d7:de:34:bf:cf:a2:f9:3a:32:4b:ac:df:1e:6e:
                    09:b8:14:b3:d4:42:4b:cf:1a:ca:1a:18:9b:e1:12:
                    ac:17:89:52:36:66:19:6f:ff:9f:ca:9d:26:d3:cd:
                    66:6c:37:67:88:e8:a6:e3:00:5f:c1:bf:e1:09:d5:
                    7b:be:73:14:ae:29:9d:38:48:a7:6b:7e:16:8c:c2:
                    fb:31:f9:d5:43:69:79:c3:90:8d:b0:80:be:f4:b8:
                    2a:5d:58:06:3e:11:2a:ea:60:1f:88:40:51:d1:79:
                    33:56:b4:f6:58:ac:47:c2:5f:2e:20:54:9f:81:44:
                    a9:b9:8e:7b:5a:57:c6:ba:ec:e0:c9:66:69:c7:17:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:C2:AB:DF:4C:67:C8:17:E8:C8:E5:24:BA:B1:5D:80:9F:8E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/667c237d-c9f2-33fe-a94c-6ee6d1cf6b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:63:93:1f:68:b4:7b:e8:62:96:43:5e:7d:89:76:37:ce:
         e9:78:f6:10:23:5a:f5:75:68:13:cb:f2:90:83:b7:c3:0f:14:
         97:6b:a0:77:d9:94:23:d2:d7:08:e1:c5:85:8c:08:aa:95:0c:
         18:1c:27:3d:51:ad:50:fa:20:65:d6:8e:95:da:80:71:a5:e8:
         01:25:a3:b1:f3:81:f9:db:66:9b:22:a7:d2:59:bf:80:e5:41:
         97:9d:55:af:b9:aa:19:7f:85:fb:e1:dd:d4:83:f5:c7:e3:2b:
         02:91:fb:22:8b:eb:db:8d:9a:0e:36:77:d8:7f:ae:12:75:a5:
         65:13:ad:31:9e:01:d7:5d:da:88:a7:5d:2b:23:ce:47:20:04:
         30:84:d0:4e:aa:3e:fa:7b:0d:13:e3:ce:47:f5:17:c3:1e:02:
         86:e9:33:7e:93:33:f2:66:26:99:06:a5:00:95:c5:93:47:00:
         0a:c0:8f:70:d0:2d:c7:0c:39:08:81:1b:20:74:2e:55:a8:cf:
         ea:38:bd:27:69:e9:a2:81:06:8f:1c:b1:b8:0b:e5:ec:4d:b2:
         04:f2:3a:60:d1:46:18:45:cf:6f:22:06:65:46:9f:ba:7a:67:
         5a:d3:17:80:23:d2:9e:ec:d5:d7:65:1c:a1:68:f5:e7:0a:7e:
         a2:94:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:30 2026 by rpki-client