Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84eb6d95-7fc7-3e58-bec9-626123c3322f.roa
File:                     84eb6d95-7fc7-3e58-bec9-626123c3322f.roa (raw, json)
Hash identifier:          2XoqOL5TG6Kz0XTrpFhupjhVNiO0odW7Jqy/gzqjYF8=
Subject key identifier:   01:76:33:BE:12:3F:82:9E:E8:EF:D6:B8:B5:4F:49:29:C0:D5:70:01
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B79BCC01258C4DC3D1E0C7380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84eb6d95-7fc7-3e58-bec9-626123c3322f.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     6939
IP address blocks:        180.149.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c0:12:58:c4:dc:3d:1e:0c:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=d86e63da-d320-47c5-ba6b-5b655c0504e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:f8:26:e9:ff:21:cd:00:66:4a:af:2e:46:
                    c4:a1:fc:7d:21:a2:f7:c0:0b:ae:17:47:c0:ed:4b:
                    03:bd:57:1b:d1:d6:15:22:e3:e3:e1:9e:73:c8:69:
                    b1:ef:c6:24:cf:d6:9e:3a:76:ef:61:21:9f:cc:df:
                    85:87:82:82:39:27:d0:5c:1a:81:0e:8f:74:d4:fe:
                    71:a9:01:3d:87:72:bf:89:22:ae:dd:79:95:af:f8:
                    b5:0f:9f:9b:b3:11:21:8f:bf:a7:08:cd:33:ab:e7:
                    9d:cd:c5:29:10:32:26:21:0f:f0:ae:07:aa:89:04:
                    a3:99:34:da:05:94:83:66:8e:8d:f3:70:bb:e6:a5:
                    9a:33:d4:c8:0a:93:58:2e:2e:ff:4f:9c:1e:b6:d2:
                    8c:f0:37:25:51:84:76:92:3f:49:c8:9e:31:aa:88:
                    7f:e3:1a:7c:19:36:5e:f7:b4:0a:69:9d:21:ad:b7:
                    5f:2f:bb:89:c7:b9:52:21:6e:97:5d:57:37:44:0f:
                    ac:91:23:c4:ed:61:e8:9f:ea:9d:27:a7:e9:83:14:
                    01:16:c8:e5:d2:06:05:a5:54:50:e3:da:de:cc:ca:
                    2f:be:f9:d6:c2:64:a3:b2:98:7f:bf:79:dc:d5:11:
                    22:e0:84:87:62:2b:e1:62:0e:f2:b6:e4:b5:27:bf:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:76:33:BE:12:3F:82:9E:E8:EF:D6:B8:B5:4F:49:29:C0:D5:70:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/84eb6d95-7fc7-3e58-bec9-626123c3322f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:47:d6:98:48:c9:77:90:7c:77:5e:86:7a:d3:3b:c5:56:14:
         4e:dc:7d:7a:8f:6e:65:27:99:b7:0f:3e:1b:bc:cb:6d:98:5d:
         0c:3f:01:f5:37:28:70:54:c2:01:dd:d2:32:a0:d6:98:45:cd:
         b3:4f:04:a4:4a:a4:d8:46:95:e4:b5:c7:8d:a9:df:f7:55:ff:
         40:22:fd:df:a0:f7:c1:44:a4:79:2a:9b:d4:d5:f6:a7:9e:67:
         91:01:5d:47:9a:f5:11:85:79:e7:5e:d4:53:7d:0e:11:4e:09:
         76:05:3c:2d:cf:e4:6b:41:74:08:bd:c7:06:5f:db:2d:41:c9:
         11:ed:38:4b:21:7c:1f:28:46:94:cd:90:60:3a:84:bb:88:1c:
         ac:94:c7:43:f5:be:81:0b:16:cd:e3:54:f1:a9:b9:c9:1c:d8:
         2b:6e:f6:21:9e:4b:44:06:a4:a6:1a:3f:aa:37:1f:ba:e6:c7:
         89:0a:fb:b6:71:22:29:fc:5c:d5:f9:26:59:e9:da:f0:13:a8:
         16:fc:c6:97:10:1d:d0:83:58:bb:b9:2d:bd:9c:2e:27:c0:0e:
         c7:c8:05:1a:c5:75:a7:0e:bd:bd:84:e7:7e:53:b1:9d:c4:00:
         89:60:67:3e:31:4c:12:cd:b9:35:7d:18:6d:a5:b6:1d:c9:b4:
         37:59:42:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:59:21 2025 by rpki-client