Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9634f211-d370-31fc-98c1-67859ff14f1f.roa
File:                     9634f211-d370-31fc-98c1-67859ff14f1f.roa (raw, json)
Hash identifier:          uKIis3ymRfn074mNtNlXivOgNY3Ewq9dOWI7phQj/xc=
Subject key identifier:   D1:C1:E7:F3:FF:88:62:A1:DE:19:85:60:3A:3F:08:B7:1A:86:27:3C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B3DB6F4BB8ABD3ADF161F24C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9634f211-d370-31fc-98c1-67859ff14f1f.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     19437
IP address blocks:        216.122.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:f4:bb:8a:bd:3a:df:16:1f:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=b56d3a85-6343-462e-8f39-996c298d6bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:df:a3:56:a1:d3:2b:12:bc:e4:9e:8e:af:
                    22:75:5d:e4:6a:91:84:64:39:35:bb:5f:29:d7:c6:
                    3a:f3:fb:7a:13:29:3d:b6:2d:27:8d:7f:b3:31:c2:
                    17:69:3f:86:ab:74:d0:8d:a4:39:3a:9c:78:ec:55:
                    07:32:1b:0c:77:d7:2d:f4:fc:c3:ab:69:fe:50:f9:
                    86:b9:91:e5:2c:d5:15:ad:15:ca:b6:b9:eb:77:fa:
                    5a:9b:f9:d2:cf:34:0a:2d:84:06:98:ea:bd:ac:58:
                    02:03:46:66:56:f2:16:22:02:c7:fc:df:65:19:a4:
                    a1:d9:7b:57:df:74:d8:04:da:ab:ed:b1:8e:54:63:
                    81:37:20:e9:bb:28:73:ea:bc:59:32:32:ac:43:bb:
                    9d:34:6f:56:9d:df:5f:67:96:77:43:80:51:49:e8:
                    85:b5:07:40:28:9e:09:3d:d3:2a:07:a4:8f:02:01:
                    d0:cd:b1:7e:2d:5f:9d:66:90:ca:f1:71:a1:bc:de:
                    71:cd:0e:44:b2:be:4c:9c:bb:c4:79:30:bc:23:b3:
                    26:85:fd:b3:d4:74:b4:2c:f4:cd:80:64:93:9e:11:
                    0b:6f:a3:a4:07:bc:a2:1c:1b:26:1a:44:7b:37:8c:
                    a1:04:5a:ed:1e:c4:26:a0:c0:6a:56:5b:68:79:0e:
                    e1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C1:E7:F3:FF:88:62:A1:DE:19:85:60:3A:3F:08:B7:1A:86:27:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9634f211-d370-31fc-98c1-67859ff14f1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:5a:8e:35:9a:35:eb:ee:f8:dc:4a:23:45:3d:b6:f0:f4:05:
         e6:76:08:36:10:1e:7e:59:5f:bc:15:45:48:f6:00:eb:61:4f:
         49:c4:f5:0b:84:a2:74:30:9f:9d:60:d4:95:32:cb:74:c8:1f:
         c7:85:db:ee:3d:e9:b9:22:b6:10:f9:df:25:64:ba:6b:12:a6:
         54:02:03:5e:28:52:f3:83:bd:f1:1b:9a:cc:e6:7a:0c:68:cf:
         13:de:da:1d:ad:b1:2a:98:7b:f6:a3:85:66:a4:ac:d0:b7:0d:
         df:28:86:df:0e:f4:9c:41:c7:12:21:f6:c6:b5:60:a8:3d:bc:
         2f:00:5b:fb:c5:5d:98:98:ac:c7:51:29:87:38:09:98:b5:15:
         fd:3f:27:7e:8b:df:d4:7f:df:27:05:b3:75:ec:9c:b5:67:2b:
         72:4c:3c:77:39:e3:23:b4:13:04:5b:24:59:02:43:d5:73:36:
         85:39:a8:2c:40:d9:ed:9e:42:c0:76:9a:0d:ee:03:5e:16:2c:
         6d:47:87:84:28:08:2d:41:db:4d:9f:31:b5:5c:80:62:61:aa:
         63:80:94:11:80:00:43:13:2a:1b:af:90:d6:e0:60:f4:65:a5:
         21:b7:0e:ff:26:65:f4:a8:94:71:1b:5a:8e:3a:a7:06:38:17:
         17:4b:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:32 2025 by rpki-client