Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/32ff6399-6ce4-32e9-aa2f-a6ef57f6a5ab.roa
File:                     32ff6399-6ce4-32e9-aa2f-a6ef57f6a5ab.roa (raw, json)
Hash identifier:          J2phJytWoTAMbOBBBoqd3mrZfCy4VCKXGUjkOimTe6s=
Subject key identifier:   5A:56:BE:E3:F7:25:1A:DB:75:2A:9A:45:8F:C7:D2:2F:88:FA:0E:C8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B89177433921C751DCB3CF440
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/32ff6399-6ce4-32e9-aa2f-a6ef57f6a5ab.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     1239
IP address blocks:        216.74.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:74:33:92:1c:75:1d:cb:3c:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=2a958390-c9a4-4e9f-91ab-c8aa201b5db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:5c:57:5d:46:8d:da:5b:7b:2e:f5:01:9a:
                    fa:28:4b:00:cd:ed:0f:1b:df:99:ef:b1:bb:36:13:
                    0a:c3:46:43:c4:1e:72:46:2d:00:35:d9:c5:74:80:
                    bc:41:e0:0b:d9:ff:8c:79:e4:4c:d1:e3:a1:ff:c4:
                    35:81:4c:2a:64:4e:87:64:8a:fb:17:01:1e:22:0f:
                    dc:2d:f9:e1:b9:55:03:94:8b:c9:0b:8d:9e:b8:c7:
                    fb:c7:84:d8:7d:da:ae:83:67:2b:df:4e:f1:97:7d:
                    f9:ca:26:da:25:56:f2:45:e3:d9:05:07:4d:01:4d:
                    d9:a9:45:3f:b6:20:0d:75:8f:0a:5c:c6:0a:a3:a8:
                    ee:27:d8:de:85:1e:06:b2:43:da:2b:30:1b:1a:ba:
                    ab:a0:d4:68:0b:54:e5:fa:c4:7f:be:eb:48:b2:56:
                    21:7a:19:b5:e0:6b:1b:b9:ba:68:0d:e8:51:c0:28:
                    58:ac:ef:c7:31:df:41:5a:1a:52:4c:32:79:42:cf:
                    a6:81:f5:63:07:12:16:3e:07:d4:1d:21:43:35:ae:
                    c5:f6:87:d4:d8:34:af:3f:cc:71:25:dd:00:04:80:
                    f4:b0:05:98:95:30:e9:05:fc:4e:37:1e:4a:6f:bb:
                    23:6d:21:4e:31:90:ec:97:8b:65:7c:e6:8a:2e:7d:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:BE:E3:F7:25:1A:DB:75:2A:9A:45:8F:C7:D2:2F:88:FA:0E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/32ff6399-6ce4-32e9-aa2f-a6ef57f6a5ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:ed:86:51:1d:d7:f9:94:44:c4:2d:54:5f:4d:83:b6:e6:
         e2:73:4f:fd:2b:23:51:ce:c2:26:af:5e:7b:00:06:00:2c:d4:
         25:69:6e:05:86:3c:1b:47:7f:64:aa:8c:c9:1a:b4:0a:07:70:
         15:f9:12:64:d2:90:45:5f:ff:61:aa:a6:fa:52:d7:a2:e6:26:
         a3:9c:39:83:c6:00:65:3a:a6:3c:f9:c0:39:dd:d4:a4:0c:e6:
         7a:8b:4f:cd:b3:7c:87:9a:44:70:5b:7c:ae:dc:75:1a:dd:e8:
         83:cf:24:a8:b6:af:d5:c6:da:f0:5c:22:a7:b2:21:15:ce:36:
         e7:44:77:9a:b1:8c:21:d0:8a:55:f4:50:3b:87:c6:77:ee:ef:
         58:36:da:5f:d5:87:d4:af:c0:3a:70:84:c6:df:be:31:87:bf:
         8f:54:77:da:c0:7f:8d:89:28:69:57:81:ff:4b:cd:c5:d4:c2:
         0f:7e:37:13:59:6f:cd:30:69:3c:22:c8:be:d2:06:d7:bf:15:
         18:14:dd:26:cc:31:93:7f:39:21:b0:a7:28:91:c4:6a:f8:07:
         40:84:43:72:22:e4:cf:94:c4:ef:cb:7f:66:54:67:df:a5:e7:
         0b:df:bd:a3:39:fc:dc:56:1c:5a:13:4f:70:38:aa:a6:d8:0a:
         20:31:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:20:14 2025 by rpki-client