Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1851748e-5a31-3351-a6b3-0a2f341efeca.roa
File:                     1851748e-5a31-3351-a6b3-0a2f341efeca.roa (raw, json)
Hash identifier:          G0592HeyS8W69b6kzaCU0d3CxyrkEe79ZGIaAFm7MG4=
Subject key identifier:   87:E9:24:2D:52:C4:8F:F6:CB:5E:E9:E9:D2:22:F9:20:4C:31:89:45
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B0FA6B9459876A11B93F17DC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1851748e-5a31-3351-a6b3-0a2f341efeca.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     25653
IP address blocks:        67.227.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b9:45:98:76:a1:1b:93:f1:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=2c441aaa-cd70-4a24-b471-e3609560afc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:db:f5:c9:9b:bd:c2:47:3c:37:39:d6:8b:
                    45:e5:53:03:2d:75:2e:06:80:84:64:0b:f1:09:67:
                    54:52:47:3a:87:94:1e:e3:05:51:33:3b:56:11:ac:
                    31:55:61:42:59:db:ae:4d:34:5a:09:21:96:0b:35:
                    a2:a5:2c:29:0e:ad:3b:44:7e:ef:e0:67:db:71:0a:
                    35:1a:ff:4c:97:a1:88:18:f4:c9:7d:59:90:87:b7:
                    31:45:a8:12:f1:ff:d3:8a:8d:1b:c4:69:2c:9d:f2:
                    28:a0:88:6d:d5:df:2d:e3:c3:e2:a6:f5:49:85:35:
                    ae:37:a7:3e:f8:43:c2:41:ec:7f:16:39:4a:eb:b8:
                    48:61:a1:1f:7d:28:96:4c:a4:ef:2c:b8:4a:57:5e:
                    99:16:78:d6:3e:34:d9:00:02:ef:88:46:51:18:d2:
                    33:9f:2f:64:5d:4c:3b:51:97:26:73:76:62:37:34:
                    e5:be:eb:41:b2:95:2c:d3:b0:de:6d:e2:71:97:b5:
                    62:a4:80:c3:f0:8e:ae:7b:4d:2d:f2:c6:84:2c:d4:
                    fb:d7:1b:bf:d4:64:4d:1d:02:b0:3d:11:97:96:49:
                    fe:8f:25:9a:3d:12:16:62:11:bb:52:d1:e6:43:e2:
                    f3:6b:e3:42:ac:d3:27:51:5f:5c:9c:b2:f7:85:f8:
                    d5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:24:2D:52:C4:8F:F6:CB:5E:E9:E9:D2:22:F9:20:4C:31:89:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1851748e-5a31-3351-a6b3-0a2f341efeca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:eb:5c:6c:ed:78:f8:e2:ed:96:1f:bf:90:19:06:ba:bb:
         ad:25:8a:53:96:8a:68:44:d8:d9:35:5e:03:35:52:4f:30:65:
         8f:4a:d1:51:55:de:32:24:70:33:14:44:bc:12:40:39:4b:ed:
         38:8b:bc:17:33:f0:8a:b0:70:9a:3b:71:ae:32:7f:b6:59:0b:
         91:b5:3f:b7:b6:e8:e0:54:f6:41:ca:10:e6:64:c6:1e:3f:67:
         a8:e5:78:86:de:ee:75:be:57:86:a2:a6:a2:8c:43:8f:d0:9c:
         47:81:76:83:9a:8f:11:2c:46:62:9e:0e:9f:de:60:ab:e8:ea:
         71:08:4c:36:7c:bf:ff:5d:3e:a8:b8:76:5d:d1:d0:0f:4f:e0:
         cd:04:86:c0:64:68:30:3e:b7:7c:87:da:87:10:cf:37:c7:8d:
         5a:d3:42:96:d9:ca:64:b3:b6:70:57:e9:5a:9f:61:ab:f6:89:
         86:09:cb:6c:4f:bc:c5:bd:a1:68:48:cb:6c:27:7e:42:2f:69:
         ad:7d:a0:42:5c:75:ff:4d:15:1a:f2:9c:15:eb:1e:e3:3a:a4:
         46:bb:d2:ef:01:d8:84:65:32:6d:2c:f8:12:3d:dc:11:54:32:
         dc:a0:1b:b5:21:75:57:15:58:03:d1:e1:63:33:3f:04:07:a8:
         7f:42:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:59:20 2025 by rpki-client