Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e9a0f60-bbed-3d67-96cf-3e9b4c0a177f.roa
File:                     3e9a0f60-bbed-3d67-96cf-3e9b4c0a177f.roa (raw, json)
Hash identifier:          P4rFxhr/DxRf+F5CAtah4lavPgLE9aqVyw0Lvmh/qrs=
Subject key identifier:   20:DA:19:09:E3:6A:0A:A3:0B:83:F6:8C:C0:0A:1E:A4:E0:06:F2:40
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B68FC95251BA7A6C4FFC86600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e9a0f60-bbed-3d67-96cf-3e9b4c0a177f.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     214054
IP address blocks:        174.140.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:95:25:1b:a7:a6:c4:ff:c8:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=5cd3fead-c0ad-4c06-823f-897537dbaf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:97:0c:e5:c8:5c:df:14:8a:8c:e9:60:77:
                    f7:4b:95:4d:83:66:4f:6e:50:de:4e:e3:64:3a:11:
                    2d:f1:cc:7b:02:ed:75:db:36:fe:37:c6:1d:48:02:
                    55:70:ed:75:b8:29:2c:60:26:83:7b:76:d5:1a:3d:
                    9a:5f:95:fa:49:90:09:79:32:ab:56:cc:f4:d4:79:
                    7d:bf:9d:04:42:4d:c5:27:ec:b8:d5:d3:42:cd:44:
                    87:26:5c:6b:5d:06:aa:47:a5:bf:b1:55:50:fa:ce:
                    5c:f9:02:73:c1:ad:f3:e9:e5:cc:d2:f3:4e:06:34:
                    e0:59:97:cf:ec:8c:1a:ef:ae:13:78:e4:93:12:97:
                    07:cf:4b:95:ca:9d:cd:ca:ea:17:09:7b:87:d7:c9:
                    f8:48:82:90:34:a6:eb:71:43:f3:04:47:64:81:af:
                    d6:11:ef:cf:3b:ac:b7:f7:2d:27:4a:3d:a1:62:6d:
                    0c:3e:8f:09:e4:8c:a1:4e:98:bf:c8:93:e4:7a:77:
                    ad:a6:15:07:70:8b:c6:ed:25:51:60:4e:8d:39:c3:
                    95:f8:61:39:15:77:9c:fc:06:99:82:f7:88:61:97:
                    61:c5:4a:b4:e7:92:da:74:a6:02:25:89:41:7f:2f:
                    12:35:e6:5b:1b:26:54:e1:50:b8:62:3e:f0:c2:57:
                    27:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DA:19:09:E3:6A:0A:A3:0B:83:F6:8C:C0:0A:1E:A4:E0:06:F2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3e9a0f60-bbed-3d67-96cf-3e9b4c0a177f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:dd:a2:75:6a:b1:2e:c5:1d:88:3e:92:c1:4d:93:59:24:
         59:27:15:61:11:52:b5:04:07:e6:61:26:84:32:0d:a7:ea:60:
         52:e7:69:19:35:4a:66:9a:f2:17:38:8e:df:9b:c3:94:6b:d0:
         7c:03:42:a4:84:d3:94:59:3b:67:19:36:cf:64:df:d7:9b:68:
         f9:1e:76:81:28:d4:58:ec:49:1e:0c:2c:ee:96:d8:17:10:d4:
         d0:49:e9:4e:be:23:30:84:9c:1a:62:b3:ba:53:70:1d:58:17:
         16:6b:c9:65:f1:8d:9d:4e:83:17:9a:33:19:21:d4:05:3d:b4:
         89:12:c2:e8:6d:bb:93:5c:ae:e3:bc:e7:9e:a3:72:ed:d5:4d:
         80:75:87:fb:fc:f0:8e:61:c5:e2:dd:e3:e8:05:00:ae:27:00:
         8a:8a:9e:d2:a2:ba:70:23:fc:8b:7d:8e:fb:24:da:9d:30:cf:
         78:5c:d1:1e:7b:52:d4:46:ce:c2:de:05:b4:e2:a0:fd:fa:38:
         18:45:1b:57:90:8e:02:f7:0a:6d:2c:02:0e:4e:6f:66:79:f3:
         aa:3d:b2:3b:e1:e7:a8:be:0f:fe:c7:a6:2b:c3:4e:c2:62:d2:
         fb:3f:11:b1:15:2d:f0:f6:34:dd:fb:96:86:de:8b:bb:94:f7:
         c0:5d:cf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:53:41 2025 by rpki-client