Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa
File:                     10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa (raw, json)
Hash identifier:          9r/rkZjm/WGB4y8MsxIqbTLOQCV3F3WWDdXpG1vKtGA=
Subject key identifier:   AA:D0:36:12:17:DE:1A:8E:60:47:09:09:26:81:DB:C0:D3:B9:01:9C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B583C7D6B1DB51A523A23EFC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     63025
IP address blocks:        216.122.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:7d:6b:1d:b5:1a:52:3a:23:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=ebc4adcc-e946-4e10-abfa-92acecde65f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:b9:0a:bb:ad:7e:c1:3a:cf:c0:ae:88:4e:
                    e5:4e:34:d7:ed:52:27:7b:d6:c1:34:b1:28:5a:1c:
                    90:b0:09:4c:5b:5e:22:38:1a:81:ff:7e:ee:0e:1e:
                    36:9a:e1:1f:e5:e9:24:22:ec:c0:18:35:52:0a:ec:
                    06:bf:35:31:b3:c9:86:7d:8d:1e:c3:43:44:24:e5:
                    8d:a4:2e:73:62:cd:ba:65:a8:16:49:8b:68:0f:af:
                    89:79:45:95:d7:c0:03:54:bf:00:a1:05:a4:37:4c:
                    f9:6f:4a:46:57:c3:d6:d2:09:ee:ca:bd:31:08:03:
                    f6:75:48:ce:5f:a4:3e:c9:6a:8e:21:f1:16:96:5c:
                    62:1a:1b:ae:88:99:77:fd:79:4e:ac:d9:e3:33:82:
                    de:0d:b9:92:a2:d2:dd:53:eb:35:bb:ca:85:f3:7f:
                    81:30:d8:35:c9:be:86:60:78:fe:46:c2:4b:45:4e:
                    19:a7:8e:20:4b:53:5a:26:d3:e9:88:dc:cb:c9:29:
                    15:a7:0c:33:38:d1:1d:bc:99:71:11:9a:25:38:04:
                    31:cb:76:c6:f9:c0:d3:70:b1:ef:e8:28:e8:63:8f:
                    dd:e6:dd:34:f5:ab:28:27:2a:73:57:af:0a:67:20:
                    de:62:55:88:90:71:b2:8a:f9:ae:02:62:0d:4b:78:
                    a8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:36:12:17:DE:1A:8E:60:47:09:09:26:81:DB:C0:D3:B9:01:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/10b7c0a3-965e-367e-bb05-771e5f5ea29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ae:8f:2e:9b:d8:03:75:d4:f7:21:33:9c:59:e7:75:79:32:
         fb:aa:43:ae:da:6c:94:0d:3d:d6:c5:ea:ee:df:ef:15:a3:27:
         64:ba:73:1e:67:75:f5:af:ef:16:a3:ea:ae:75:08:c6:33:98:
         f4:37:4c:54:97:c9:54:a4:cc:65:df:d8:72:ec:6f:51:b2:d2:
         2f:34:48:27:d8:ef:b7:7a:95:96:a2:33:40:63:01:22:40:5f:
         d1:55:3b:db:00:38:e9:64:37:36:f3:e7:20:50:ac:e5:56:c3:
         11:34:76:d0:c3:95:f7:4a:c4:4c:db:fb:f8:5b:39:d6:56:54:
         56:37:8e:5c:7e:f6:48:7c:01:bb:dd:59:61:dc:b6:d0:65:8e:
         bb:fe:66:01:2c:cf:10:90:eb:ed:e7:59:2d:70:26:fc:13:15:
         86:fd:0e:8c:e3:3c:82:d4:34:a3:7b:3f:ba:bb:a9:63:a1:fa:
         db:cc:51:1a:22:f7:23:2c:1e:ed:40:ef:1a:5a:55:e8:b0:3a:
         2d:cc:b8:fb:23:b3:fc:73:74:21:79:1f:2b:59:90:c1:f2:70:
         6c:45:34:35:8e:f3:84:b4:25:09:6e:48:66:d3:e2:c5:12:71:
         96:5c:55:22:c9:f3:0f:66:f7:e1:72:e2:6e:67:57:28:fb:68:
         10:d1:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:55:47 2025 by rpki-client