Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9edae517-5ef2-394c-8d05-e242c809840c.roa
File:                     9edae517-5ef2-394c-8d05-e242c809840c.roa (raw, json)
Hash identifier:          6ySGMYc0lK2N6bLM4LLS9K1SQGkSnXxHYL/+h30xw/M=
Subject key identifier:   20:28:D6:34:5F:B9:FC:0C:53:D6:36:B1:F6:35:D5:99:47:22:95:12
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B2066D180A1AAAD67C95F36C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9edae517-5ef2-394c-8d05-e242c809840c.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     21769
IP address blocks:        104.247.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d1:80:a1:aa:ad:67:c9:5f:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=0606a71c-4319-4f2d-a82b-f7c84847b654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:27:2c:51:20:84:1b:ea:b6:44:41:2e:67:
                    c7:4d:2f:a4:99:80:a4:e7:07:83:f3:fd:7a:8a:c1:
                    35:74:ec:f2:9c:55:3b:60:3a:91:f2:85:05:41:00:
                    94:5a:14:ca:9e:01:47:8e:10:0f:4d:3f:fc:91:c8:
                    14:3d:dc:47:c6:67:9f:0c:0e:6f:bf:79:15:96:80:
                    11:e0:26:0b:91:82:8a:0d:24:19:70:a0:39:8d:db:
                    da:79:41:1a:72:b7:43:8c:d0:4d:be:bc:5f:2d:52:
                    ff:67:ff:37:e7:f1:35:fe:9e:67:c3:f5:43:37:2b:
                    0c:a6:fb:5c:b7:e5:8d:9e:6b:33:1d:fd:66:92:1c:
                    e4:5f:f4:d1:07:05:06:4d:5b:46:4d:38:cb:7e:a8:
                    b4:0b:a1:6c:8d:23:37:fd:3d:a2:4d:b0:c7:22:5e:
                    95:e2:da:9a:78:a0:f4:3f:24:21:c5:0e:9f:23:72:
                    a6:7c:d7:76:58:23:0c:31:ef:e3:d1:1f:00:97:36:
                    91:04:06:aa:8f:e4:e5:46:cb:bb:ee:02:e1:4b:88:
                    80:c5:a1:40:f5:c9:82:1d:6e:38:53:f0:8c:1d:3d:
                    a7:e4:37:80:4c:0e:03:7e:49:86:40:a3:d4:93:5d:
                    b4:81:ff:8b:1a:b9:e5:68:91:8a:5b:0f:6d:96:5c:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:D6:34:5F:B9:FC:0C:53:D6:36:B1:F6:35:D5:99:47:22:95:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9edae517-5ef2-394c-8d05-e242c809840c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:08:b2:b0:98:6c:1f:44:6c:5f:30:d2:c7:e0:85:48:9d:83:
         0f:3e:63:93:98:2b:22:27:37:b7:6d:cc:9d:96:84:53:d9:86:
         1e:5f:25:82:08:bf:b6:68:38:28:12:08:7d:9e:83:09:e2:a3:
         ea:46:92:10:76:1c:a7:ea:5d:56:d2:5f:83:aa:a9:8a:65:34:
         99:8b:61:80:c3:15:d9:b5:d0:f1:a5:f6:46:16:b5:7d:60:9a:
         96:c9:e8:a7:73:d7:93:49:a3:01:22:37:8d:a6:50:79:74:5b:
         c8:3f:7f:b2:62:88:8c:cf:53:a6:b2:9f:c5:4e:47:be:42:c6:
         1c:43:92:20:47:aa:0b:b3:09:02:7d:12:b7:1f:9e:f9:c1:c7:
         78:21:40:e1:4d:39:03:cf:eb:b7:db:f3:96:36:32:4e:e6:e2:
         31:e3:96:4e:d7:4c:d9:7b:76:c0:e8:51:ed:b5:3d:44:a0:84:
         d5:2e:6b:50:be:74:c6:a4:a1:82:06:65:78:5a:a8:f5:3e:bc:
         06:ec:4f:e3:19:43:63:c1:5d:0c:d3:b2:86:b7:ad:67:ed:d6:
         f6:cc:84:f6:2a:91:d1:84:7b:83:36:4d:fe:3f:ed:35:4a:0a:
         2b:b4:32:1a:21:5d:ff:08:f5:29:8c:b1:1b:d7:5e:32:98:26:
         db:90:ac:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 16:56:38 2025 by rpki-client