Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3ece4dd-726c-3de8-9efb-1b9bb6ca9bdd.roa
File:                     d3ece4dd-726c-3de8-9efb-1b9bb6ca9bdd.roa (raw, json)
Hash identifier:          kTYT9ajUialBePU979S7e9+/hje25Q5SBySC8HFF1hc=
Subject key identifier:   98:0D:DB:0B:B0:09:2E:25:17:92:DB:4D:42:34:4C:EC:C7:C5:54:B8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A6C55D490E56ACFF4D688B900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3ece4dd-726c-3de8-9efb-1b9bb6ca9bdd.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     58061
IP address blocks:        216.122.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d4:90:e5:6a:cf:f4:d6:88:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=e1484806-b862-4426-9c93-51e5b22415ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:65:ea:76:8f:a2:8e:d5:86:6f:1c:fd:d1:
                    f6:a5:89:be:a7:89:73:89:06:99:4b:08:32:8e:08:
                    e8:54:db:80:e0:21:20:45:4f:43:35:cf:e6:1b:17:
                    20:b2:b2:36:5e:d4:a9:46:d1:df:93:ea:a9:d8:58:
                    9c:c0:96:95:0e:69:cf:4f:3d:79:78:3c:7d:b8:ae:
                    af:24:67:fd:a4:e1:d7:12:dd:da:c5:25:16:2c:86:
                    93:cf:08:82:c5:aa:95:11:5e:9a:1f:65:06:a1:13:
                    76:ef:9c:84:30:d8:55:c1:49:2e:aa:03:d5:a6:c6:
                    f9:58:64:b5:a0:70:37:58:c5:7f:96:3b:3a:6f:34:
                    b8:51:db:ab:1f:09:43:be:0d:c3:fc:b9:5a:f2:df:
                    7c:89:04:b1:a0:2c:13:e0:a4:59:28:39:07:7f:02:
                    b7:7d:b3:5f:f7:76:ce:93:68:25:22:c3:3a:71:a7:
                    7e:39:cc:f5:d9:32:7f:a0:0d:4e:84:39:2f:89:f6:
                    fc:95:03:e0:75:c0:07:c9:e1:8a:ea:ee:8d:4a:2e:
                    bb:17:05:8c:92:18:30:54:9f:d0:95:e3:53:fd:bb:
                    af:53:4f:fd:f5:07:45:bd:6b:2a:9a:b0:7e:ae:ca:
                    9d:d8:43:1f:ee:6a:96:68:40:e8:12:e0:be:b9:4d:
                    a9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:DB:0B:B0:09:2E:25:17:92:DB:4D:42:34:4C:EC:C7:C5:54:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d3ece4dd-726c-3de8-9efb-1b9bb6ca9bdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:a3:c8:0e:92:c5:bc:d3:61:3a:97:a5:81:af:95:51:5c:ab:
         cd:21:0b:45:5e:ee:38:38:5f:12:94:33:3e:af:61:22:de:53:
         7c:84:bb:7d:38:fd:48:d7:50:7d:de:45:d7:dd:67:06:85:2b:
         d0:c2:3b:bc:08:ad:56:bd:50:6e:bb:3c:f6:6a:6f:0d:9a:9a:
         15:2a:77:ac:72:02:a9:69:ba:de:d6:e7:78:48:f8:7d:dd:a9:
         f2:1a:76:66:f1:a8:b7:75:b2:13:87:30:4d:62:41:09:45:e4:
         88:20:7a:b1:85:c6:46:48:fa:d8:7a:eb:6c:76:56:d5:b6:1a:
         6c:32:d9:3a:eb:70:95:9d:9c:24:e1:38:98:1b:d9:14:8d:75:
         40:db:87:ae:ce:f8:e4:5e:39:c9:ac:fe:fe:56:5b:f4:3e:a2:
         57:a0:ad:2e:7d:a7:78:99:59:92:74:3e:92:af:0f:32:a6:9f:
         4d:88:61:c5:4f:0f:98:50:f9:36:31:53:c4:d1:83:1f:3e:9c:
         b3:67:26:3c:e3:08:db:cb:14:1c:30:91:24:1f:bb:ac:a7:81:
         34:8e:04:01:e9:e0:7d:5e:42:c8:ad:9c:25:3a:cf:33:28:71:
         c6:c1:13:89:75:63:36:d4:74:47:7d:ca:d9:81:38:ea:70:b2:
         7e:b2:da:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:09 2025 by rpki-client