Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c01b580-63e4-3dfc-84cc-3284d057ef07.roa
File:                     9c01b580-63e4-3dfc-84cc-3284d057ef07.roa (raw, json)
Hash identifier:          6PU1MvudaPXfb8tvjeBW0FFOvNkzhw+fi1gdAw5wzaw=
Subject key identifier:   46:87:AC:5F:E2:D7:45:03:CD:75:6F:79:EB:5B:DD:8C:7A:A4:70:D9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B4081DF4BCCA99AF437194340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c01b580-63e4-3dfc-84cc-3284d057ef07.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     142111
IP address blocks:        216.122.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:df:4b:cc:a9:9a:f4:37:19:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=0434b279-db09-4c5e-bb2e-1a2247e7ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fc:c0:d1:2d:cf:a5:cd:80:7f:71:90:ac:f6:
                    57:e0:40:79:21:2b:52:0d:ec:46:ee:f6:78:23:94:
                    2e:94:77:f7:a8:76:84:e1:49:e2:8f:16:65:6d:cc:
                    f2:6f:41:a9:f3:8f:6d:99:1f:5e:93:e6:52:e8:c6:
                    e7:9a:18:a8:ce:1d:1d:0d:de:c1:83:3b:3e:bc:07:
                    5b:35:e5:e0:ae:5c:67:cd:a8:d3:ad:bf:9b:23:6e:
                    b4:07:63:23:d9:84:a5:ed:f6:c1:42:9a:b5:f8:8b:
                    f4:50:f3:67:47:d3:90:ce:28:8b:db:6c:b8:f0:1c:
                    8f:a4:0c:00:3c:c9:3d:12:7c:44:c9:69:53:6c:7e:
                    95:7d:d1:23:85:32:d7:36:05:28:26:9a:8e:20:61:
                    05:2e:9f:da:bb:4d:d2:96:44:24:e5:c7:64:9a:97:
                    bd:0f:a7:74:31:23:f7:d8:4a:f6:a6:16:6f:7f:49:
                    23:e9:5e:7f:59:02:80:2f:4e:74:96:28:81:cb:2f:
                    d0:e6:4a:8a:b0:d2:a9:27:3f:b7:35:83:ff:ac:23:
                    ec:f4:01:d0:f8:c1:22:75:d8:a3:62:52:cd:08:d6:
                    8b:61:1c:55:83:89:5c:e5:d6:53:3c:4a:e1:13:1a:
                    87:95:5e:1f:f0:8d:6b:a7:b2:f3:f5:b2:c3:74:e7:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:AC:5F:E2:D7:45:03:CD:75:6F:79:EB:5B:DD:8C:7A:A4:70:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c01b580-63e4-3dfc-84cc-3284d057ef07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c6:e2:8e:0d:b9:8f:ee:9d:79:f5:82:db:28:d0:7e:2b:50:
         81:e9:ac:96:04:af:0e:f7:e7:ac:33:8f:7d:d3:dc:a8:a6:23:
         e0:9f:b6:f3:b7:d7:14:4b:e9:64:b1:90:68:26:cf:fd:e7:f4:
         97:d0:44:ad:87:e0:7f:5d:0e:3b:6e:2e:82:4c:58:c4:be:fe:
         28:75:44:df:0e:98:91:d7:47:37:6b:60:ab:09:38:9e:fe:1d:
         12:34:4a:9b:4d:bd:91:fd:9c:50:10:65:b0:6c:ea:99:69:8b:
         07:16:51:64:6b:f9:b0:76:ee:40:a9:3b:9d:ed:d3:f9:e3:84:
         c3:1d:da:4d:fd:72:4a:d7:c6:8f:e5:54:c9:60:ff:ee:c2:c6:
         94:06:67:c3:77:76:ac:89:f8:fb:04:48:00:13:20:df:09:2a:
         fb:1b:0a:67:94:b0:d4:b2:0e:5f:14:34:63:0d:db:9b:f0:0e:
         f7:9b:70:05:71:32:bd:e5:45:da:ec:c6:14:24:19:19:d0:33:
         99:f6:1b:9a:3b:2c:fc:c5:9e:e0:53:22:f5:39:47:2a:5b:65:
         79:3b:93:27:0f:ec:7d:d1:48:25:bf:b1:f8:f3:58:49:6d:25:
         8d:cf:41:88:c3:73:32:13:b9:de:8f:4b:15:5b:b0:ae:57:e2:
         18:87:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:59:20 2025 by rpki-client