Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08c599a0-8f40-381f-998e-7192d78f2b7b.roa
File:                     08c599a0-8f40-381f-998e-7192d78f2b7b.roa (raw, json)
Hash identifier:          ugB0uJBTLxLEKW6jNMFHkEld9k1nExZnuKbVctInkd4=
Subject key identifier:   A5:51:D3:42:E3:1E:DD:4E:A7:9A:A1:FC:14:7E:62:4B:95:D7:33:CF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AAC68B3BDD4FDDA443BE17300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08c599a0-8f40-381f-998e-7192d78f2b7b.roa
Signing time:             Mon 28 Jul 2025 23:50:46 +0000
ROA not before:           Mon 28 Jul 2025 23:50:46 +0000
ROA not after:            Sun 26 Oct 2025 23:50:46 +0000
asID:                     1426
IP address blocks:        216.107.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:68:b3:bd:d4:fd:da:44:3b:e1:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 28 23:50:46 2025 GMT
            Not After : Oct 26 23:50:46 2025 GMT
        Subject: CN=14045311-6411-4f84-b208-e7fe8d8b4ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:e8:eb:35:75:1b:37:55:6e:99:c9:93:94:
                    40:08:2d:58:fb:60:42:51:9a:c0:74:69:e8:50:0a:
                    4b:00:e1:4b:43:34:ba:10:72:43:d2:1c:10:e6:2d:
                    26:86:28:4a:24:a1:cf:bf:24:67:e9:2e:ce:85:94:
                    87:52:1e:43:45:35:20:70:2d:eb:a4:2d:25:9b:a2:
                    88:f8:f8:6b:c3:8e:f1:df:0e:e9:4e:80:f1:5c:db:
                    43:09:4b:1c:48:a9:dd:a3:75:3a:fb:a3:98:9d:0d:
                    fb:e1:ca:0c:0d:b8:2e:e2:74:7e:bb:0a:b7:9a:ce:
                    e0:71:fc:d2:ea:7f:b3:83:c8:4d:ff:10:52:10:4b:
                    dc:33:53:6d:66:df:0b:df:48:91:52:de:82:46:e9:
                    a1:fb:23:b9:2e:16:ae:66:e6:06:5a:17:28:b9:34:
                    94:e4:fc:0a:18:82:f6:a3:a6:bf:10:0c:8d:be:9d:
                    b4:b3:22:44:0e:40:af:0f:94:da:da:3c:e3:9f:7b:
                    80:95:ee:f4:29:53:1a:fc:4c:8d:c4:86:29:42:a3:
                    31:12:af:64:7f:ae:c6:3a:84:bc:eb:ef:0c:4d:09:
                    96:1a:31:62:26:36:bc:93:f5:d2:d6:22:80:30:1a:
                    23:36:48:4f:5f:e7:0f:10:01:e1:86:a9:86:e5:70:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:51:D3:42:E3:1E:DD:4E:A7:9A:A1:FC:14:7E:62:4B:95:D7:33:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/08c599a0-8f40-381f-998e-7192d78f2b7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:db:96:9e:80:3c:70:40:5b:0f:cb:86:37:af:a3:a5:47:73:
         20:16:0a:e4:42:d7:0f:3c:0e:9e:96:72:33:3e:8f:53:cc:5a:
         a5:d4:c8:c3:13:31:16:7c:ec:e9:a5:2b:e7:fc:c8:60:9d:e1:
         ff:f0:86:ec:73:d4:c2:2c:48:64:c4:94:30:66:67:34:83:ae:
         75:6f:fa:f0:1a:e4:af:43:79:0c:76:d7:de:51:a2:f6:98:8f:
         b5:fe:fb:fe:42:40:96:b1:d7:b6:1f:b6:d4:0e:36:ba:58:37:
         e3:8e:c3:93:47:67:9d:53:e4:63:95:63:82:2f:47:6c:59:7f:
         e0:04:6b:38:d3:61:0e:09:0b:23:c3:d3:d8:dd:92:fc:d1:7a:
         6f:49:c3:27:bb:7e:13:ea:63:84:5c:36:f3:07:af:7c:c1:8f:
         d8:8e:eb:38:22:33:1f:d3:30:0f:cb:e8:78:cf:4d:7f:8f:45:
         18:c6:29:94:74:0b:c3:ba:aa:1f:ae:0d:f4:f9:79:d2:a8:13:
         2e:d5:bb:69:cc:84:e5:86:9d:fd:49:1b:a2:86:2e:97:f3:63:
         01:29:fd:33:96:cc:a7:68:bd:43:68:58:08:fb:37:51:17:9b:
         81:96:fd:32:45:50:59:ab:49:1e:d3:a1:aa:62:90:43:70:66:
         88:e0:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:24:22 2025 by rpki-client