Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa
File:                     10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa (raw, json)
Hash identifier:          sZ4Ni6TZ/ncAcuThGb1tBdrcIi7weVSI9TsOJWP1UP0=
Subject key identifier:   39:87:C3:6F:9A:17:58:6D:F0:67:C0:F9:74:F1:37:7B:43:19:92:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A778081F14038D0A81E351FE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     63025
IP address blocks:        216.122.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:81:f1:40:38:d0:a8:1e:35:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=c5212ff1-8acc-4398-83ae-db7330abd85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:18:93:42:38:37:3e:d3:6d:a9:9f:8d:36:
                    34:07:8f:0b:6f:0a:c7:f6:22:4d:37:c1:8b:72:65:
                    b3:6a:f8:8c:09:79:7c:9a:59:50:7c:be:1c:1b:da:
                    7c:63:79:c4:59:04:21:c8:24:17:83:1c:a2:4c:82:
                    83:c6:4c:75:f8:ab:c7:9a:e6:e5:3c:f4:5e:12:47:
                    8e:8c:35:6b:9d:b3:3c:fb:aa:53:4e:b5:24:5d:8e:
                    b2:53:98:1d:67:33:44:20:bb:8f:08:fa:6c:34:5a:
                    53:f7:05:19:8a:90:21:64:d2:5a:b8:93:b9:db:b2:
                    d2:2a:59:e0:ae:3b:c3:61:2b:3e:94:58:e3:ca:50:
                    b4:cf:ba:50:87:9d:17:b0:4b:9c:de:60:a1:af:1e:
                    e0:5b:2a:f1:d8:79:6f:62:d4:70:ea:2d:b3:33:95:
                    5a:52:28:0f:08:e8:c2:06:85:2f:26:05:36:fc:fb:
                    c1:5a:a2:94:c2:e6:a4:68:11:fd:43:19:ca:f5:7d:
                    78:cd:4d:b7:03:1f:c6:aa:43:8c:4d:56:7d:eb:d5:
                    28:df:7b:aa:76:db:cf:3e:b8:85:90:9e:3a:14:7c:
                    06:71:d9:36:62:40:a9:2c:6b:d1:d8:42:02:c6:cd:
                    b1:db:b4:89:e1:44:1d:50:2f:a8:2e:e2:61:9c:d6:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:87:C3:6F:9A:17:58:6D:F0:67:C0:F9:74:F1:37:7B:43:19:92:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:e8:bc:ed:54:26:0e:49:fe:82:e1:24:13:04:6d:fb:21:f0:
         49:23:70:7d:23:3e:88:a3:c8:1c:1f:a8:1a:27:4d:ef:37:f2:
         07:3c:b8:49:c6:b5:6b:58:1c:06:3f:b7:38:9e:6a:63:9e:10:
         46:6a:c5:7d:fb:6f:9a:23:c0:5a:d7:be:3e:7e:ae:ee:ac:b1:
         2e:4b:c1:60:56:e2:89:4a:fc:a6:64:24:bb:dc:03:e3:5c:03:
         b6:1e:ea:c8:c9:99:ec:5f:e9:c9:09:3d:3d:bf:1c:1c:2f:e0:
         84:b1:06:86:0a:0e:f2:36:86:81:74:df:70:b5:35:e2:ca:4b:
         36:0e:09:b8:33:ed:20:4f:eb:bf:52:02:99:af:cb:ef:02:2f:
         59:b3:25:13:66:be:35:03:ef:2b:75:20:ec:57:68:ba:e5:10:
         72:25:47:d1:f7:96:2b:61:7e:e9:2e:c4:fd:1c:3d:32:e3:34:
         a9:08:03:bc:46:41:92:67:ad:e6:a9:06:87:a0:f6:6e:3d:e9:
         ba:b2:97:9a:fa:8b:40:5b:22:fb:c3:32:3e:32:5b:be:ed:17:
         47:c2:74:9b:9b:98:82:72:b1:92:9f:95:8e:01:40:98:26:22:
         9d:20:75:ae:d9:9d:ea:41:64:d6:7f:f7:b4:2d:af:63:50:1c:
         37:15:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:23 2025 by rpki-client