Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/52387256-4165-3679-b221-94e22a64ece4.roa
File:                     52387256-4165-3679-b221-94e22a64ece4.roa (raw, json)
Hash identifier:          5rvRbh6BoI3fV09XVJ032YsMUEoBaAqh0iKVfwOVnUg=
Subject key identifier:   35:E9:F2:D8:B2:BE:F1:FF:15:56:47:DF:D4:1E:11:6C:D4:67:22:AA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B1C3751BC975E79CD49503100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/52387256-4165-3679-b221-94e22a64ece4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     151373
IP address blocks:        184.174.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:51:bc:97:5e:79:cd:49:50:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=1967e7c2-63bc-41ac-a3b6-f45c82e54208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:f7:b2:72:3b:49:ad:ac:f5:b7:65:b8:62:
                    e1:12:91:b8:fc:81:ce:7e:76:7f:f5:5a:a7:b6:29:
                    84:43:db:85:c6:3e:36:91:73:6b:65:18:bd:90:5a:
                    56:85:4a:b2:9e:b8:9a:f5:05:c3:83:21:a2:35:53:
                    68:c0:ad:de:61:6c:25:cb:ac:9f:2d:a1:b2:69:9f:
                    eb:28:d4:76:de:cb:ba:d2:6a:67:8c:33:52:15:09:
                    02:d5:eb:d7:b0:16:87:3a:73:f1:09:8a:bf:4c:95:
                    19:ac:4c:b8:1c:37:82:02:11:9f:16:1c:08:fd:a5:
                    ce:3f:63:5f:94:7b:a4:83:41:15:18:5b:24:62:e7:
                    cc:fa:aa:d8:dc:49:af:0a:8d:59:56:b8:1e:04:6f:
                    6d:44:c6:25:dc:b7:97:b0:ff:e1:09:98:76:e2:be:
                    20:af:9a:ca:01:4c:01:e6:62:4e:4a:b8:0e:3e:ed:
                    3c:e0:d2:c4:41:dd:5d:bb:0b:f2:a6:4c:b6:c0:67:
                    46:b4:57:4e:13:e0:b4:18:be:9f:19:fb:c9:8d:18:
                    15:86:23:9b:59:84:94:57:57:b7:40:67:39:be:9d:
                    8b:ef:10:77:3e:04:a4:9d:ae:5f:ec:da:d9:0b:a7:
                    a5:87:9c:b9:58:aa:82:97:9a:3a:df:ae:21:9f:2b:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E9:F2:D8:B2:BE:F1:FF:15:56:47:DF:D4:1E:11:6C:D4:67:22:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/52387256-4165-3679-b221-94e22a64ece4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:f4:52:30:38:af:d5:fa:37:46:5f:f9:04:b7:62:66:7b:81:
         57:8c:05:d5:ac:b9:f5:56:f8:39:34:d4:b1:72:2c:a0:30:64:
         08:85:d6:68:ec:2a:87:60:7e:f4:08:65:87:55:e6:9c:86:f4:
         32:2d:31:64:98:bc:9e:7b:8a:71:83:69:d2:40:97:35:f5:fa:
         bc:53:82:5a:6a:45:6e:c8:fa:75:3e:44:3c:9b:bb:18:a8:2d:
         44:f4:f7:5d:1b:6a:a5:09:dc:41:2e:cc:ca:26:3a:2d:16:4e:
         b8:66:0f:fc:37:4f:fa:5c:24:10:38:7a:90:a2:73:a1:76:29:
         61:2e:13:39:d4:63:72:80:d1:72:52:08:e8:d3:74:56:68:cd:
         d1:d1:88:22:f3:e0:fc:5f:7e:0e:f3:f2:77:f5:ea:35:0c:7f:
         e7:d1:e4:7d:2c:94:4f:bf:01:a0:68:2f:48:21:07:9e:b1:4a:
         a2:4f:cb:25:f8:0f:21:66:86:90:ab:98:0f:f9:e7:4f:fc:78:
         a0:59:7c:5e:29:b9:2f:1f:a2:92:08:fd:41:aa:87:4b:de:d1:
         6e:14:68:72:f5:b8:28:41:90:b2:f4:52:ee:ee:c1:24:3f:29:
         ab:f7:52:41:f5:35:85:21:9e:45:7c:1a:7f:de:e2:12:d1:12:
         ec:20:2b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:56:37 2025 by rpki-client