Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/047b96ad-5320-33eb-a106-6d610cbe11c1.roa
File:                     047b96ad-5320-33eb-a106-6d610cbe11c1.roa (raw, json)
Hash identifier:          iGNZHc/znjLAcU4PEDMldCwWu74H9b59Hd86DKfBv7E=
Subject key identifier:   C3:F2:44:66:A8:FC:52:E6:5F:44:2A:8B:23:CB:66:B5:43:EA:DA:FF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B41E71826C7371DECEC4EBDA8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/047b96ad-5320-33eb-a106-6d610cbe11c1.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        216.107.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:18:26:c7:37:1d:ec:ec:4e:bd:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=8f71d532-8734-48fd-bded-1c3ad3117b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f7:72:b2:7f:68:6a:f5:69:ed:36:1e:2e:49:
                    f9:f9:86:49:c5:1f:99:b7:89:0c:51:4a:30:f0:ae:
                    98:05:18:a1:9e:14:35:26:9b:67:38:80:04:51:1e:
                    95:17:8d:0c:b4:4c:ca:6b:60:0c:1f:b6:8d:34:88:
                    78:23:28:7e:65:9d:04:a1:30:00:02:76:9f:ed:f5:
                    b4:81:30:ee:0e:84:5b:d0:32:31:ea:d9:11:42:ae:
                    9b:66:7f:7b:21:41:20:89:7e:b1:b4:3a:cc:6c:e8:
                    3a:63:7b:9f:4b:72:bf:14:48:0b:5b:9c:cf:e0:2d:
                    9a:30:ce:3d:20:ae:c8:35:73:da:fc:30:1e:06:48:
                    78:ce:2e:11:c9:c7:bf:4d:1a:03:a4:29:ee:90:ac:
                    51:d9:c4:d1:de:35:e7:cb:13:de:bd:d5:40:1f:a0:
                    0a:96:38:51:99:22:cb:e6:61:ac:c0:82:ce:bb:60:
                    ad:4a:ab:e5:33:01:c9:16:c6:68:47:3f:33:13:72:
                    9d:82:cb:d4:bc:86:bf:08:a1:e7:9e:ae:8a:70:98:
                    41:42:cd:0d:73:6c:9a:a0:47:67:e7:e2:22:f7:99:
                    59:bc:ca:cb:98:6a:d4:bd:60:1d:33:46:04:63:26:
                    ed:bc:5a:99:d2:57:d6:82:3c:31:eb:18:b2:a8:20:
                    d8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:44:66:A8:FC:52:E6:5F:44:2A:8B:23:CB:66:B5:43:EA:DA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/047b96ad-5320-33eb-a106-6d610cbe11c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:35:d5:47:23:13:da:44:f5:6e:3c:fb:3a:1c:a0:b7:01:5b:
         a5:d9:97:6c:83:15:5e:60:4f:b6:06:2b:fe:f8:02:3c:e6:9b:
         4d:c1:c3:08:0c:81:6a:2c:52:5f:6a:99:81:81:bf:2f:c4:cc:
         73:54:04:91:6c:b9:4b:d7:8f:fc:97:4b:59:ab:de:e5:52:4f:
         02:0c:7f:75:53:44:59:65:c2:32:b6:03:3c:18:d6:42:4f:86:
         82:9c:2a:b2:19:26:0e:7c:5b:74:5f:a6:92:d0:13:c7:97:af:
         7d:04:51:81:11:ca:df:a2:a6:bf:bb:79:cd:da:1b:ee:ea:2a:
         13:ed:6d:51:db:68:6f:26:d4:3c:22:47:ea:b9:eb:93:8e:f7:
         98:63:87:21:6c:32:c5:9e:ad:f3:a4:c9:65:98:18:e2:87:ca:
         44:3f:e3:3b:6e:7b:8b:8d:d8:1e:d5:e8:c9:c9:13:08:61:59:
         d3:63:82:1a:54:7e:05:36:74:dd:1d:ee:06:7d:0a:2c:81:73:
         ec:c3:e8:08:6e:32:0e:11:c6:28:2f:e1:a9:77:4a:87:93:9a:
         6e:56:27:62:0b:05:3a:17:0a:b9:67:53:fb:ab:d0:37:af:45:
         5e:e8:68:9b:58:31:97:91:19:6d:47:ae:66:01:47:c4:b0:d3:
         cb:fd:8c:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xgmxzcd7OxOvagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
OGY3MWQ1MzItODczNC00OGZkLWJkZWQtMWMzYWQzMTE3YjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vdysn9oavVp7TYeLkn5+YZJxR+Zt4kMUUow
8K6YBRihnhQ1JptnOIAEUR6VF40MtEzKa2AMH7aNNIh4Iyh+ZZ0EoTAAAnaf7fW0
gTDuDoRb0DIx6tkRQq6bZn97IUEgiX6xtDrMbOg6Y3ufS3K/FEgLW5zP4C2aMM49
IK7INXPa/DAeBkh4zi4Ryce/TRoDpCnukKxR2cTR3jXnyxPevdVAH6AKljhRmSLL
5mGswILOu2CtSqvlMwHJFsZoRz8zE3KdgsvUvIa/CKHnnq6KcJhBQs0Nc2yaoEdn
5+Ii95lZvMrLmGrUvWAdM0YEYybtvFqZ0lfWgjwx6xiyqCDY9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPyRGao/FLmX0QqiyPLZrVD6tr/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMDQ3Yjk2YWQtNTMyMC0z
M2ViLWExMDYtNmQ2MTBjYmUxMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GuJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANA11UcjE9pE9W48+zocoLcBW6XZl2yDFV5gT7YGK/74Ajzmm03BwwgM
gWosUl9qmYGBvy/EzHNUBJFsuUvXj/yXS1mr3uVSTwIMf3VTRFllwjK2AzwY1kJP
hoKcKrIZJg58W3RfppLQE8eXr30EUYERyt+ipr+7ec3aG+7qKhPtbVHbaG8m1Dwi
R+q565OO95hjhyFsMsWerfOkyWWYGOKHykQ/4ztue4uN2B7V6MnJEwhhWdNjghpU
fgU2dN0d7gZ9CiyBc+zD6AhuMg4Rxigv4al3SoeTmm5WJ2ILBToXCrlnU/ur0Dev
RV7oaJtYMZeRGW1HrmYBR8Sw08v9jGc=
-----END CERTIFICATE-----
Generated at Wed Oct 15 16:54:05 2025 by rpki-client