Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d321bac4-d4cc-39ea-b908-b394af5a1713.roa
File:                     d321bac4-d4cc-39ea-b908-b394af5a1713.roa (raw, json)
Hash identifier:          QCHH/YAdcfBfbKMjbsD/sDjnwgwG1fAhfDiiYvFr48Q=
Subject key identifier:   85:B3:F6:E2:89:97:F7:6E:76:F3:AC:9E:B9:80:AA:A4:61:63:AD:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584DE580865D04D8091DA49F8580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d321bac4-d4cc-39ea-b908-b394af5a1713.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     214054
IP address blocks:        173.211.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:86:5d:04:d8:09:1d:a4:9f:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=1252c425-a984-4429-a018-d0822b39282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:9e:33:ab:3e:e5:d5:46:1d:f9:94:b1:f4:
                    19:dc:d2:7b:dc:c7:66:20:ca:d7:36:77:68:93:3c:
                    e5:23:34:85:d4:9a:fb:d3:21:33:5d:7a:3e:5d:25:
                    46:e2:8c:00:34:94:f8:df:d4:3b:3d:8c:29:b3:94:
                    d0:09:c3:e3:bb:fa:ae:94:3d:91:ca:4b:d7:18:77:
                    ba:35:c5:14:66:68:f9:dd:e7:b7:d9:4f:67:61:16:
                    0e:90:b2:98:82:71:35:1c:b9:3a:a0:b6:25:2b:96:
                    05:2e:8d:54:4e:b6:fc:6d:59:80:d4:84:9e:ed:8d:
                    af:c1:65:04:74:fc:4b:87:66:b7:02:a1:8c:e9:16:
                    cc:c9:ca:13:1f:73:0a:f0:de:f3:07:77:57:4f:67:
                    14:7b:da:2e:f9:57:bc:2d:8b:f1:8f:4b:c3:f9:cf:
                    25:29:7d:8b:90:78:c6:f5:48:c7:d7:88:36:ef:66:
                    f7:08:1a:24:f4:6b:a6:af:b9:13:05:f5:18:3e:ee:
                    e3:16:c0:cf:9d:e0:d3:8e:9f:b1:b8:df:54:17:af:
                    60:9f:f0:98:fc:b6:d8:28:bb:f3:a9:3f:30:15:8e:
                    ae:6d:90:e6:d3:a2:bc:56:06:db:de:4d:ad:1a:4a:
                    c5:f0:81:3c:dd:79:1b:fd:a4:29:15:ee:84:11:c0:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B3:F6:E2:89:97:F7:6E:76:F3:AC:9E:B9:80:AA:A4:61:63:AD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d321bac4-d4cc-39ea-b908-b394af5a1713.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:d8:28:5a:8d:21:1a:8d:83:54:a2:69:9b:46:d2:67:8d:97:
         4a:28:48:a1:78:68:6c:86:b6:f8:24:cc:37:36:9a:f3:f8:36:
         40:24:e8:63:fd:9f:ea:8e:ad:0f:19:44:8b:9a:4c:67:6f:e4:
         2d:88:b6:3b:c4:5e:5d:4b:75:85:50:73:72:49:47:48:88:44:
         1d:97:e5:ec:91:6a:bc:1b:0b:29:b7:ae:07:ca:59:bc:68:c7:
         c2:e7:12:57:60:61:88:d2:27:f9:5e:71:9a:76:f9:55:b3:03:
         56:72:89:27:58:46:bb:f3:c6:fa:bc:80:d5:30:23:f9:5a:09:
         91:81:5b:30:d3:c8:6b:11:66:42:7f:94:96:44:55:ee:d1:0c:
         fa:25:74:54:6e:bc:cf:1a:04:26:42:31:95:62:8e:b3:04:f1:
         18:73:72:5a:71:ce:53:7a:be:28:33:c4:15:24:4d:d4:30:71:
         48:3e:39:29:e7:88:54:94:4d:5e:e1:ee:e1:8d:4b:4e:92:79:
         22:2b:9e:ef:20:17:b5:ce:64:6f:1c:4a:e1:f8:00:50:f9:9d:
         ff:d0:fb:32:03:0f:54:4b:3d:22:16:f8:9c:38:1a:10:87:f7:
         ec:68:d3:67:71:7d:b1:ee:44:c6:55:0e:b9:73:e6:ff:9e:28:
         0b:7e:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:31:15 2026 by rpki-client