Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa
File:                     640105e2-5210-3ad1-96b1-5e4188a93a9d.roa (raw, json)
Hash identifier:          a30CW8Nqh5Q25GvtI3Ar54eNbvzkc01fI+ev+1vo1r8=
Subject key identifier:   5D:AE:E1:00:66:B6:DA:75:9F:1A:71:6C:8A:0B:97:DE:C6:C5:28:6A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A2ABADE19F9EF833071B65AC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     16611
IP address blocks:        216.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:de:19:f9:ef:83:30:71:b6:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=c7708942-2508-46ea-893e-01a9278d12a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:29:c5:44:51:37:64:79:ec:4b:64:71:df:d1:
                    e1:de:7d:d0:a4:0c:90:b9:fa:c7:6e:a7:ca:5f:b9:
                    b6:00:9d:5c:eb:f0:2d:8b:51:20:21:e6:71:35:69:
                    8d:08:9e:dc:58:ac:b7:ed:31:72:00:3c:46:95:c6:
                    8a:ac:7e:dd:3e:68:a0:60:c1:6d:a4:a6:fd:e7:5b:
                    bd:64:a5:72:3c:a7:84:bc:fa:69:32:35:bf:43:33:
                    b1:aa:d7:be:fe:c5:ed:f2:66:de:f6:23:24:37:4b:
                    55:f2:86:c7:96:b1:3d:33:c5:ed:4e:54:3d:95:bb:
                    e3:5f:93:50:01:7e:32:27:2c:55:20:42:12:4c:12:
                    72:d7:5d:fd:bd:94:d8:d3:e4:a1:aa:ca:cb:b7:8b:
                    3b:bb:fe:68:78:f0:b7:b8:7c:3f:ee:db:50:4b:99:
                    95:8f:7d:c6:ba:f3:f2:71:d6:4e:49:3a:0c:fd:25:
                    e9:9b:92:7c:25:c9:05:c6:a6:4d:9f:32:36:26:37:
                    85:c4:ed:f3:a9:14:03:97:7e:d7:a6:ab:c4:70:81:
                    84:a3:29:3d:fe:c4:5e:c2:73:16:30:40:c5:99:a4:
                    e5:a8:28:f5:73:48:5e:6e:a2:60:dd:dd:f8:aa:2b:
                    45:86:3d:07:82:24:26:ff:57:e2:25:60:31:f6:21:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AE:E1:00:66:B6:DA:75:9F:1A:71:6C:8A:0B:97:DE:C6:C5:28:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:56:18:cc:33:b1:72:21:c7:aa:c1:59:23:89:92:29:25:4b:
         a9:b4:8d:77:fb:70:06:7f:3c:4d:95:1b:1e:b9:47:f1:29:33:
         c1:3b:10:78:fb:3f:b2:23:c8:c1:8c:4a:fb:1e:29:c9:c5:3f:
         ab:dc:5c:b3:ad:dc:3a:4c:71:0c:03:ed:f4:3b:58:70:1d:4c:
         7d:66:b3:7b:b3:f8:54:6d:2d:0d:9f:d3:42:bc:df:50:0a:63:
         ee:20:db:cc:44:27:25:88:2c:01:43:1a:06:3f:f3:79:1d:b2:
         36:bf:9a:c0:83:63:f4:d0:11:8d:d9:32:8a:ce:01:71:0b:e9:
         31:52:9a:ba:9a:95:81:d7:5f:74:36:b7:fc:2a:a6:9a:04:98:
         1c:d8:56:6a:08:68:fa:9f:e6:82:50:ec:ff:30:3f:b8:25:fd:
         65:a3:81:2a:09:60:2f:17:41:d9:2a:b6:4d:f4:25:7c:15:48:
         8d:7b:ec:8e:e6:91:e5:51:15:f6:fa:95:b6:fc:f5:53:23:66:
         11:33:06:f8:68:31:7b:9e:af:9a:86:9e:ab:be:52:35:da:18:
         16:c0:bd:c4:e0:cb:9c:57:b2:d9:b6:c5:a4:80:80:cd:c4:f3:
         a6:81:5f:20:0f:72:0c:91:de:04:97:c9:32:3b:19:69:eb:ff:
         6b:49:b9:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut4Z+e+DMHG2WsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
Yzc3MDg5NDItMjUwOC00NmVhLTg5M2UtMDFhOTI3OGQxMmEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SnFRFE3ZHnsS2Rx39Hh3n3QpAyQufrHbqfK
X7m2AJ1c6/Ati1EgIeZxNWmNCJ7cWKy37TFyADxGlcaKrH7dPmigYMFtpKb951u9
ZKVyPKeEvPppMjW/QzOxqte+/sXt8mbe9iMkN0tV8obHlrE9M8XtTlQ9lbvjX5NQ
AX4yJyxVIEISTBJy1139vZTY0+ShqsrLt4s7u/5oePC3uHw/7ttQS5mVj33GuvPy
cdZOSToM/SXpm5J8JckFxqZNnzI2JjeFxO3zqRQDl37XpqvEcIGEoyk9/sRewnMW
MEDFmaTlqCj1c0hebqJg3d34qitFhj0HgiQm/1fiJWAx9iGxNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2u4QBmttp1nxpxbIoLl97GxShqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNjQwMTA1ZTItNTIxMC0z
YWQxLTk2YjEtNWU0MTg4YTkzYTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EpsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5WGMwzsXIhx6rBWSOJkiklS6m0jXf7cAZ/PE2VGx65R/EpM8E7EHj7
P7IjyMGMSvseKcnFP6vcXLOt3DpMcQwD7fQ7WHAdTH1ms3uz+FRtLQ2f00K831AK
Y+4g28xEJyWILAFDGgY/83kdsja/msCDY/TQEY3ZMorOAXEL6TFSmrqalYHXX3Q2
t/wqppoEmBzYVmoIaPqf5oJQ7P8wP7gl/WWjgSoJYC8XQdkqtk30JXwVSI177I7m
keVRFfb6lbb89VMjZhEzBvhoMXuer5qGnqu+UjXaGBbAvcTgy5xXstm2xaSAgM3E
86aBXyAPcgyR3gSXyTI7GWnr/2tJucs=
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:37 2025 by rpki-client