Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/30080fb1-8249-3050-a148-3950aec84e9f.roa
File:                     30080fb1-8249-3050-a148-3950aec84e9f.roa (raw, json)
Hash identifier:          AG1aYN86TQJU1ZEWQ3NfN0iicOtkvrl5eFYLL2ej/ZU=
Subject key identifier:   2F:B6:DD:A5:34:FD:D8:78:67:E4:3E:84:E6:1B:10:36:76:21:2E:27
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B33F1B641A8CD238B6C7D7BC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/30080fb1-8249-3050-a148-3950aec84e9f.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     979
IP address blocks:        67.203.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b6:41:a8:cd:23:8b:6c:7d:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=55d3474e-dd28-4aa9-a7da-34c7d0750911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:4d:83:2b:bb:d4:c7:f3:f4:0a:40:d1:12:
                    1a:93:8e:06:1d:fa:a3:8b:34:66:37:ea:ee:2a:70:
                    b6:ce:91:a6:ec:6b:11:6e:aa:54:83:74:21:b9:a5:
                    1a:fc:df:47:58:8c:a9:cc:b3:e5:32:f7:b1:cf:f7:
                    e2:01:c5:a6:05:26:25:5c:a6:b6:3d:2b:ee:59:90:
                    99:7c:4e:f5:1c:58:10:11:cd:55:94:85:04:0f:51:
                    2e:23:65:e0:9e:18:e6:4f:a6:f4:e9:12:7a:08:13:
                    b9:81:66:92:64:61:3e:92:49:27:b1:56:e6:d1:ef:
                    71:2a:66:6e:a0:30:e3:b6:fd:d2:6c:f7:15:f8:d5:
                    0a:9e:9b:ec:f1:2e:33:80:4d:80:ff:4b:b2:17:24:
                    3e:c5:22:b3:f7:05:d7:26:83:8c:15:f3:f7:4a:57:
                    7f:a3:19:72:fc:0c:3e:76:05:21:4a:32:31:1a:7e:
                    a8:31:b9:a4:45:9f:c8:76:f9:6f:ef:c5:12:9d:18:
                    6f:05:18:dd:68:8c:db:b1:0e:12:4e:f8:f5:19:20:
                    b2:cf:97:d3:9c:03:d2:f9:6c:88:96:8e:b4:95:fe:
                    8e:e4:d2:a8:9a:44:4d:c1:7c:a7:90:66:bc:7a:05:
                    6b:a1:3f:5d:b2:ff:2d:94:3a:61:f8:49:54:ce:e8:
                    c3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:DD:A5:34:FD:D8:78:67:E4:3E:84:E6:1B:10:36:76:21:2E:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/30080fb1-8249-3050-a148-3950aec84e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:af:8e:80:df:55:03:cb:10:13:86:92:b7:b7:d6:98:c2:67:
         fa:3b:0d:7f:80:04:6f:f9:5f:8e:cf:b4:07:8d:ca:e3:90:1e:
         0e:92:92:0b:39:23:e7:f6:0f:b5:57:0d:bc:77:8d:60:da:66:
         ba:b0:13:03:5b:7c:88:92:c2:7e:a2:3b:74:a3:82:c0:93:cf:
         44:55:53:f4:5a:61:bc:5a:b8:78:9d:ed:17:7b:bf:4f:c4:f9:
         da:c8:30:20:5b:f1:76:bc:6f:22:88:6e:7e:a8:c1:fd:40:c8:
         62:ab:a9:a3:5c:3e:66:88:45:33:b9:cc:e4:5a:96:cf:a3:8d:
         82:a5:e6:64:55:ec:f7:d4:1c:c3:05:8e:64:ca:8d:61:69:63:
         33:6f:1c:eb:de:58:aa:9d:a7:1c:84:a6:cc:76:59:3d:8a:bb:
         d7:7c:b0:f6:5e:3d:8e:b7:cd:22:4a:cf:f5:a6:0c:fa:f3:02:
         67:51:a4:db:8b:90:fd:7c:12:f5:ba:4a:f3:c6:92:c5:01:36:
         d2:ac:1c:de:a2:ff:65:d5:00:83:30:df:b1:f2:1a:8b:b4:20:
         94:82:de:7d:db:a0:ea:dc:54:5e:c0:2e:a1:7d:a6:1a:43:f0:
         2c:8d:0b:04:0c:2d:a8:df:16:61:dc:d1:59:47:55:4e:06:6a:
         ba:3a:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:06 2025 by rpki-client