Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b5f482-1b69-3052-b93c-cd1900fe1402.roa
File:                     69b5f482-1b69-3052-b93c-cd1900fe1402.roa (raw, json)
Hash identifier:          DqKRVqHgpyzQUF5NxhIIUfJTT1e+jAb7XSuaQliRnxY=
Subject key identifier:   16:2E:56:D8:3D:42:12:AC:03:C2:A4:3B:51:AF:A5:6C:C2:E9:DC:BB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B5141F03ABBBBEBF7F6371940
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b5f482-1b69-3052-b93c-cd1900fe1402.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     214054
IP address blocks:        198.89.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:f0:3a:bb:bb:eb:f7:f6:37:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=84d155d8-32ba-4eba-ad17-e4f5e1abbcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:b7:ed:11:14:4c:f7:b9:75:9b:9b:fe:62:
                    0d:e4:26:cd:a7:3a:e6:3f:c8:26:5d:2b:5a:0a:2a:
                    71:46:94:23:7e:f6:46:64:81:f4:e8:ce:7d:91:24:
                    e6:54:87:a8:52:62:28:64:15:c6:90:d3:b0:dd:9f:
                    84:69:b6:0a:a8:7a:10:cd:65:56:f8:75:aa:e5:2c:
                    55:bd:38:76:79:2d:ff:d0:8b:96:c4:78:14:79:16:
                    9d:19:61:32:ab:a1:b3:45:c3:da:2b:b3:d0:38:de:
                    6d:ae:a0:a7:35:9b:4e:68:3e:fe:7b:b2:a4:2d:b7:
                    1c:b3:08:5c:8a:ec:dd:a3:64:6f:54:36:03:00:a2:
                    1c:31:f2:29:c9:cc:50:ea:8d:0c:47:69:ca:10:8f:
                    1d:ab:97:fb:43:15:a1:f2:81:8a:31:c9:75:a6:95:
                    f5:51:5e:26:f5:ae:8d:05:09:b3:fd:38:f7:4d:9a:
                    b2:36:f0:85:3b:cc:c1:87:c4:e4:e0:d6:df:1e:cf:
                    83:41:30:2b:0f:eb:5b:e4:08:18:3a:13:7a:4c:f0:
                    46:96:61:55:67:5b:29:91:bb:03:0f:dc:6b:a7:2d:
                    48:df:39:25:ca:96:41:cf:61:ee:8e:66:72:bb:12:
                    d9:f0:64:cb:92:b6:ac:20:10:46:1d:b1:1f:3b:90:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:56:D8:3D:42:12:AC:03:C2:A4:3B:51:AF:A5:6C:C2:E9:DC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b5f482-1b69-3052-b93c-cd1900fe1402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:58:8e:4e:0c:d6:f5:5d:e2:82:79:9d:b0:67:23:de:f1:
         8e:e3:0e:0c:f7:f0:38:69:57:be:53:1c:1a:60:71:97:38:44:
         03:9c:56:7e:b9:21:6e:1e:ee:2f:06:1a:65:18:e7:c1:9d:d1:
         49:a3:46:22:9b:fa:4f:08:99:c6:0c:84:46:8f:42:e9:c4:82:
         a6:70:df:6e:e7:09:36:fc:dd:fd:ad:93:d7:ad:c7:74:31:18:
         e2:c5:3f:9a:9a:71:dc:fd:52:86:1d:cf:13:b0:cb:a9:1f:3a:
         b4:e7:a0:17:f1:54:15:19:38:1d:9f:9b:dc:da:ac:e1:85:02:
         36:94:09:a3:15:38:04:e5:cc:5c:e2:06:51:27:c5:bf:68:e5:
         3c:fe:6d:ce:cc:a2:82:d0:f2:ba:2c:20:bd:42:42:bc:8f:aa:
         6d:db:ec:8c:5a:b2:cf:74:85:97:d8:9d:79:76:19:ce:84:64:
         14:a0:41:ef:06:11:52:01:d7:38:86:b4:cc:a4:40:69:d4:ff:
         3e:a4:4f:1c:12:b4:ed:4a:cd:67:30:1a:ba:93:e9:9c:e9:ec:
         9c:bd:65:ed:2b:f2:52:60:cf:c3:d8:9a:86:47:54:10:9d:9d:
         0d:15:e6:95:fb:19:2d:73:12:7b:b7:c0:8a:e0:09:56:63:b6:
         0a:cf:7a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:51:33 2025 by rpki-client