Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/627cc841-3dd3-34d2-b697-1f5ce654b448.roa
File:                     627cc841-3dd3-34d2-b697-1f5ce654b448.roa (raw, json)
Hash identifier:          C+p7klL3PfLp4pgQS0p4Oy5M3XKa8fzfPGOtz2/cViY=
Subject key identifier:   09:14:95:C9:27:79:BF:97:5F:CC:0F:F3:42:80:F5:68:C3:A8:D7:E1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AA2C644B0725A193DA01CE6B0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/627cc841-3dd3-34d2-b697-1f5ce654b448.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     834
IP address blocks:        216.74.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:44:b0:72:5a:19:3d:a0:1c:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=93b851d9-5053-44b8-90df-c022d95a9bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8d:31:d2:cf:35:e2:73:99:d7:8b:b8:2e:1b:
                    38:61:67:ad:76:0d:e4:56:62:85:a0:0d:72:c9:25:
                    05:4a:cb:6a:ce:47:43:a3:29:4e:81:9b:be:79:af:
                    5a:86:bd:62:cd:0a:5e:fd:aa:fd:ad:d9:76:f4:c1:
                    97:3c:b9:6d:fa:c8:3a:b2:69:c0:f9:60:bd:ec:1f:
                    a6:76:39:ee:78:0a:c3:72:47:ef:1a:36:c8:30:a0:
                    90:82:5b:99:3c:c8:60:ad:a6:0d:48:21:17:b5:a3:
                    ca:45:3d:0f:66:92:34:09:19:c4:f2:61:47:15:33:
                    df:23:9b:27:0b:e1:ce:b1:e5:b6:00:63:b2:72:16:
                    b9:04:4b:ca:c7:0e:1e:76:06:be:7c:91:08:0e:33:
                    ff:03:6b:07:b6:43:37:a1:91:06:06:53:0a:54:0d:
                    05:8e:0c:3e:ce:b4:b2:71:8c:f9:77:d8:0a:e0:97:
                    d3:b5:02:8e:0f:c0:95:3a:29:ea:2b:6b:cc:7f:8c:
                    d5:63:76:25:aa:e5:33:f2:3f:ed:53:b0:3c:5b:1c:
                    d2:c4:ff:27:60:f6:dc:85:5d:cb:a8:0c:1b:0d:11:
                    1b:b2:96:0e:72:b2:99:5f:2e:0c:54:41:3a:11:f2:
                    15:0d:90:d0:d6:f1:f5:4d:d0:b9:06:4a:5e:95:08:
                    84:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:14:95:C9:27:79:BF:97:5F:CC:0F:F3:42:80:F5:68:C3:A8:D7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/627cc841-3dd3-34d2-b697-1f5ce654b448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:b6:eb:96:c9:76:0d:a1:11:84:4c:f3:70:a6:60:5e:4d:
         a9:7b:c9:9e:43:42:09:a7:b7:84:a0:05:b7:37:d6:07:ac:50:
         60:ba:1b:2d:22:d8:b3:83:3f:53:ae:fc:19:4d:9e:0e:65:5b:
         ae:fc:97:4b:1b:73:65:00:d4:18:e1:34:35:50:58:86:da:72:
         0b:5e:d1:e9:38:19:72:0b:24:b4:b7:4a:bc:b2:bc:21:42:ac:
         34:53:c3:2c:f0:77:ee:27:2c:a1:e9:62:79:05:c0:d3:7d:39:
         0e:93:a3:3b:81:b8:8b:7c:b9:a0:61:fe:b7:1d:fd:4c:46:a2:
         3b:87:ca:3e:4d:2c:a4:f3:d0:6f:ab:88:fe:6b:86:a0:a5:a8:
         a4:4c:4c:23:2d:a4:64:f7:62:fc:01:a8:ab:9c:a6:a0:79:36:
         57:59:4c:93:07:04:db:3d:99:4e:64:78:89:86:a7:97:7d:2e:
         7d:a0:94:13:d1:3d:9a:dc:b6:dc:1c:03:e5:2a:fe:40:1b:4d:
         a0:c1:9e:aa:21:dc:9e:d7:b8:42:7c:64:90:c8:76:5f:c9:fa:
         bd:12:c4:c4:29:02:5c:35:59:1e:c4:8f:9c:37:25:18:8e:c3:
         a0:20:9f:40:27:c7:78:58:ae:02:92:af:90:15:75:20:9f:86:
         19:6f:d9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:33:49 2025 by rpki-client