Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa
File:                     49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa (raw, json)
Hash identifier:          ehG7u8AR8QbUvKvo8HVJ3trqrKeDJijYADNSTNV/aGw=
Subject key identifier:   C5:3D:3E:53:ED:31:81:0C:70:91:99:C2:B1:26:F0:77:21:0B:C2:89
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8BE23D5F6F4C44C377577040
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     12029
IP address blocks:        184.174.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3d:5f:6f:4c:44:c3:77:57:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=18f3ff4a-1705-4756-b24d-0f151559da34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1e:22:c3:21:56:2d:57:15:a8:ff:ad:f3:74:
                    c5:60:65:f8:b2:4f:7b:ca:5b:55:78:25:30:f1:dd:
                    55:e7:62:12:bf:5f:89:f7:a1:15:1a:45:16:5e:ab:
                    74:da:64:f0:96:bc:ab:7d:52:5a:5f:58:0b:12:04:
                    34:6e:ae:d0:53:f1:6b:b6:65:4e:b5:7e:fc:b9:bd:
                    ea:a7:26:12:eb:ac:9c:d2:77:65:c3:43:b6:c1:55:
                    d0:7c:92:48:01:8f:93:f7:09:1b:9c:62:65:8b:08:
                    96:30:2f:cb:34:53:4a:23:6c:5a:82:d7:32:83:ad:
                    c6:fe:c5:8b:52:32:51:43:f2:99:22:63:2a:df:74:
                    62:c7:b4:03:a7:77:f0:04:03:80:b8:4b:87:a4:37:
                    cc:1a:89:82:39:55:49:60:c6:2c:93:39:fb:af:8f:
                    06:8c:57:ff:44:4d:70:25:70:cd:98:df:cf:5a:90:
                    4e:49:b8:07:13:73:67:5a:a8:89:4c:46:d5:62:38:
                    4d:10:1e:18:ee:ac:e1:ae:bf:66:55:59:c5:b3:dd:
                    bf:f7:f2:39:8d:39:43:aa:38:b2:0c:99:4e:03:a9:
                    49:c2:d9:26:6d:6f:bb:4b:50:6c:47:98:f2:c5:33:
                    d5:2f:3f:f0:ce:30:ad:33:7f:ab:53:9d:1d:57:51:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3D:3E:53:ED:31:81:0C:70:91:99:C2:B1:26:F0:77:21:0B:C2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/49f7c46a-3d8f-3861-a8ac-b87b763b4830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a6:20:a4:68:76:0a:47:c7:43:3b:ba:5d:ce:ab:0b:a6:ba:
         7c:2b:ba:71:43:27:63:8e:16:a9:c1:c8:e2:70:9e:44:a6:65:
         bb:dc:e0:f1:08:e6:ef:88:e5:75:8a:22:0b:56:94:86:5c:61:
         97:3b:fb:95:ef:12:f0:da:4e:08:20:a9:78:3c:b9:67:fa:64:
         54:50:ab:bc:7b:99:70:01:6c:b5:ea:6b:e0:9e:29:51:b5:0b:
         c0:26:6b:75:eb:ff:dd:0c:64:c6:d7:2f:65:f9:d4:a4:aa:56:
         21:7a:95:9f:15:72:37:48:89:48:f6:44:ea:91:30:e5:16:44:
         79:76:63:83:f6:6d:99:b8:e4:58:02:4a:91:d0:5f:b4:eb:4a:
         9d:81:5e:e2:ed:50:5d:58:45:62:36:04:fb:52:1b:87:a9:a5:
         56:12:b2:2d:49:00:23:ed:c9:4d:ce:eb:86:e8:16:b4:64:56:
         83:4c:17:da:61:50:a5:fb:7e:17:c4:d7:bb:62:94:59:8a:0d:
         88:46:ee:8b:02:65:3c:fa:db:5c:64:bc:50:e0:20:1a:8d:dd:
         53:d4:8c:32:bb:2c:37:c9:9d:36:cc:5c:c1:b0:a1:3e:79:13:
         74:5b:f5:25:20:96:14:c8:67:87:20:69:75:f2:36:0a:c6:f2:
         57:4e:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:48:18 2025 by rpki-client