Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa
File:                     683f5d66-eaff-3067-96b9-4bcce2c49736.roa (raw, json)
Hash identifier:          0DEhDk/an89iCvVOjyQG+UQO50AHlLOH+w2yIy8jNjQ=
Subject key identifier:   F0:E1:CC:38:E6:73:E7:95:45:34:89:25:75:3A:4A:8C:A8:F9:BD:BE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B0B76BAF9EF0B90988694BB80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     21769
IP address blocks:        67.203.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ba:f9:ef:0b:90:98:86:94:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=62f80ebf-f7b1-450a-8119-188ce03032e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:bb:0f:38:85:1d:10:0c:4f:a1:51:3d:ed:
                    01:37:82:e1:30:e6:30:9d:01:53:b2:ab:69:81:91:
                    90:e9:ea:46:ba:e7:21:8a:5f:87:4c:2d:5b:43:ff:
                    d4:b6:6c:c5:f5:86:bd:26:ef:98:61:b7:99:88:11:
                    bb:46:ed:60:c0:3d:0a:97:9b:a5:16:f7:27:64:d6:
                    ee:2d:6c:5c:4c:bf:c0:bc:49:32:db:46:e5:85:33:
                    7a:ec:a3:92:5a:78:8b:d1:ba:0f:7d:ea:44:cb:4f:
                    72:da:6f:bc:0b:bb:b1:a7:8b:2d:47:63:04:23:e1:
                    52:76:43:be:7d:a5:b1:df:92:07:d9:6e:1b:c4:1a:
                    d4:3c:ee:32:8b:c0:bc:dd:64:39:01:95:90:a5:f7:
                    63:e0:ec:8a:97:d9:08:5b:93:a2:c3:0a:93:88:42:
                    a7:f5:31:38:d1:df:b3:9a:9d:9e:81:bc:0d:54:11:
                    9a:5b:54:e9:62:48:89:cb:d7:ab:8f:48:f0:59:ba:
                    9b:ff:0a:48:77:36:06:80:2a:f6:44:4b:86:81:1f:
                    f3:0e:76:5d:4b:ec:a6:e1:8f:7b:5f:f0:f2:fa:c0:
                    9f:c1:e2:ac:ad:47:49:b6:84:ef:1a:27:78:b2:93:
                    7d:e6:20:1b:8a:da:3f:a8:f6:ff:3d:f1:c2:e5:5b:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:CC:38:E6:73:E7:95:45:34:89:25:75:3A:4A:8C:A8:F9:BD:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:11:1a:54:cf:82:b5:e5:09:27:f0:d6:7a:f9:97:f4:02:02:
         d9:46:09:76:56:ac:d0:b3:09:93:42:37:c7:80:6b:51:52:33:
         24:01:a0:a0:37:97:fc:98:3f:42:6f:2c:f7:e7:cf:8b:fa:e7:
         b6:60:ef:e4:fd:1e:3c:ca:f8:1a:11:8c:f0:48:a8:c0:cc:6b:
         11:95:06:14:b8:53:cb:70:8c:e7:65:0e:9c:bb:77:02:7f:95:
         12:8e:6d:0b:ef:96:56:42:5d:ab:d0:e2:e7:be:02:5b:73:a3:
         ef:54:fc:c7:c7:6a:5f:d1:22:a1:51:50:15:9b:63:6b:f1:2a:
         d3:10:bf:3c:0d:f4:44:1f:ab:4a:e2:2f:14:f5:11:30:65:7e:
         4b:88:9f:e3:21:ff:9a:53:0f:a8:20:b8:ef:9b:7a:1f:e0:7f:
         d9:af:67:c5:a5:af:0f:0f:58:fb:60:08:52:b5:65:6d:0f:8d:
         a5:6c:6b:05:10:fe:81:dc:e3:c8:33:b9:ec:dc:5b:20:4e:5f:
         2d:94:59:19:13:67:2b:b9:b2:65:a3:84:c0:dc:73:ff:9e:f1:
         e8:c0:b3:3e:91:8d:03:b3:95:fe:29:b1:df:ab:fb:45:26:34:
         7f:ae:35:4b:8c:9e:f9:ee:03:90:75:6e:42:d2:e5:19:d0:95:
         1f:76:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:51:30 2025 by rpki-client