Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10032ba0-0cfb-3a6d-b155-190aa0fbf3dd.roa
File:                     10032ba0-0cfb-3a6d-b155-190aa0fbf3dd.roa (raw, json)
Hash identifier:          V41xjNqINQy9krbLyJ3tPudk6uPQJO+63zRu4DLbY10=
Subject key identifier:   DE:F5:56:28:F6:CD:B3:E7:26:DE:A8:59:FC:64:40:5C:57:AE:12:C2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B4BAC59C2F90279A86CF17A60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10032ba0-0cfb-3a6d-b155-190aa0fbf3dd.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     39600
IP address blocks:        184.174.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:59:c2:f9:02:79:a8:6c:f1:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=36099af2-9556-4ddf-842a-6f1f8121c9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:21:84:05:29:d9:41:78:8b:4d:62:ba:26:
                    5e:48:80:5e:0f:ff:b8:84:26:0c:18:8b:63:19:65:
                    e2:14:11:89:6e:31:3c:12:bd:18:0c:41:02:d7:fd:
                    84:73:a8:64:ea:d5:cc:82:0d:6d:52:26:88:21:57:
                    f8:84:30:a7:4e:16:48:f2:05:25:3e:ea:14:4f:af:
                    bb:60:95:3c:8b:45:43:2b:68:e5:c2:d6:e6:15:5f:
                    e6:81:ab:f8:a6:20:e9:f1:3d:24:25:e4:9a:89:03:
                    d3:2a:bb:81:43:47:87:9f:e2:2e:dd:a9:d2:e8:9d:
                    5a:24:4f:59:13:9c:38:b5:76:bb:63:08:c1:3c:6a:
                    30:95:e7:8a:2d:d0:45:30:b2:0a:4d:2d:45:f3:35:
                    57:9f:95:24:79:a9:bc:be:12:f1:da:3d:16:b3:1d:
                    bf:8e:04:ac:dc:f9:70:ad:72:b9:c8:82:72:fc:5d:
                    61:47:8b:71:be:05:53:85:b2:92:ba:37:36:47:1f:
                    c7:3d:69:63:16:b8:fb:0e:78:a7:10:25:08:0e:78:
                    52:4c:cf:d6:04:f9:3a:0a:32:fe:d4:2e:aa:e8:4d:
                    ed:28:39:9d:40:3c:35:96:1d:1a:df:9b:41:c3:92:
                    ca:08:2c:21:bc:11:a1:81:93:cf:0f:86:b4:b6:58:
                    7e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F5:56:28:F6:CD:B3:E7:26:DE:A8:59:FC:64:40:5C:57:AE:12:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10032ba0-0cfb-3a6d-b155-190aa0fbf3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:67:b4:2a:9b:4b:e1:5a:ad:32:4b:15:23:4d:3e:b3:13:
         49:ad:c8:92:86:b3:da:15:dc:f3:f6:cb:2d:65:f7:40:5e:34:
         aa:27:63:85:42:65:0f:33:e5:d3:f2:38:a0:bf:fb:27:61:06:
         56:f8:23:a6:e7:b1:78:e5:76:98:14:80:0d:58:12:14:11:3c:
         19:e9:0b:db:b9:66:f4:82:d1:9e:06:1f:39:6f:f7:8c:67:33:
         f4:ca:83:d1:fc:bf:4c:80:cc:57:b2:1e:42:7d:ba:b3:43:19:
         2f:af:28:e0:f7:b1:1c:10:dc:24:54:ab:f8:ea:33:84:d6:96:
         0d:ca:d2:54:f6:59:ff:4a:d7:e6:42:8d:f3:c2:9b:a2:6a:5c:
         5e:77:c7:ad:f4:c8:40:78:8a:7a:2d:29:c1:51:f7:68:bf:b0:
         b6:89:3e:5b:eb:4e:10:58:73:d0:44:03:7c:ca:53:52:31:78:
         f6:c4:07:59:a5:b7:e6:25:9a:0a:fa:a3:d2:24:43:70:e7:59:
         3a:d4:a0:14:f1:27:06:2f:d6:6f:79:73:06:86:a0:2c:38:91:
         79:f0:0b:bd:b5:25:8e:7a:5b:2d:5d:9d:fa:86:28:ff:31:6d:
         9e:8b:93:55:c2:a6:68:bf:a6:16:e3:83:1c:9d:1c:9f:5e:01:
         0c:61:28:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:31 2025 by rpki-client