Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ab563bca-9d33-301b-a905-f1dafd60ddba.roa
File:                     ab563bca-9d33-301b-a905-f1dafd60ddba.roa (raw, json)
Hash identifier:          7p1FOXDOobwxIXBkOoYoiCiZEcVSGSI+j9VUubq2xXI=
Subject key identifier:   4B:1E:15:96:14:FB:E5:70:8E:FA:6D:C6:B1:A0:B2:5F:E2:03:A4:56
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8BE23DD9F5448C72425B1E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ab563bca-9d33-301b-a905-f1dafd60ddba.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     1426
IP address blocks:        174.140.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3d:d9:f5:44:8c:72:42:5b:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=113049e7-2506-4fe3-8880-9cc7952b0406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:8d:5c:29:52:8e:57:56:b6:2d:2c:4c:87:
                    42:bf:3a:72:36:6f:b8:1d:f6:ea:e8:bf:c5:a5:77:
                    a6:fa:4d:8c:6b:0d:a5:6b:a3:d1:9e:59:1a:85:29:
                    ab:27:48:2b:85:1a:3e:2e:34:f9:45:ad:b6:00:b8:
                    36:8a:21:e9:21:47:54:17:e7:d7:fb:b4:89:23:9d:
                    ad:9c:d6:d2:8d:da:ec:af:14:e1:6b:4e:8c:9b:d7:
                    a4:07:b3:48:50:cd:5b:cc:2e:b6:36:c4:e1:47:5d:
                    ea:bd:e8:d7:0c:c8:49:a3:65:00:0e:81:97:b0:01:
                    0d:c0:a9:c8:88:1d:f0:f3:af:ea:eb:58:cd:2c:c0:
                    b5:bd:79:fe:9c:21:19:d0:a7:5e:6e:c2:2b:f8:6e:
                    ae:ef:7c:72:87:f1:7b:13:b5:82:55:ca:45:a6:8c:
                    d8:65:64:61:e5:17:25:ee:1f:26:e1:ba:cc:92:ea:
                    e5:92:b4:07:bb:90:af:d5:3c:70:aa:79:4b:ae:7f:
                    f0:42:de:6b:d7:89:4d:50:77:47:3a:88:2a:7c:c6:
                    7e:3d:44:9a:e4:06:82:77:b8:1a:a9:3f:0e:77:f8:
                    00:00:96:19:5c:0c:63:b2:85:88:15:31:a1:11:c1:
                    c4:96:88:92:2e:80:e6:27:c5:3e:3f:50:4d:dd:f6:
                    66:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1E:15:96:14:FB:E5:70:8E:FA:6D:C6:B1:A0:B2:5F:E2:03:A4:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ab563bca-9d33-301b-a905-f1dafd60ddba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:82:a9:25:66:bd:ca:68:9e:ff:1d:7c:e0:99:e3:41:19:14:
         4c:d0:6c:17:51:c7:bc:e7:e7:1a:dc:7c:b5:84:23:88:df:9d:
         7a:d2:b1:b8:24:7e:d9:cd:2d:68:cf:90:a7:01:60:2f:3d:59:
         84:3a:ae:42:c7:3f:17:19:2a:b3:95:0a:fe:a0:3e:56:be:a9:
         90:ce:f8:32:04:16:04:94:12:d2:ed:bd:17:6f:bc:b2:e4:bf:
         60:09:c2:90:bd:24:34:71:a8:30:12:49:49:51:78:11:cc:58:
         f0:09:d1:ac:24:79:3d:03:52:33:7e:4e:c6:fb:af:82:98:6e:
         f2:2c:22:1c:e5:9d:4e:89:38:4a:7c:1a:e4:28:60:9a:92:ff:
         d5:17:99:c0:86:a8:8d:6f:f3:7b:ce:c3:79:17:ee:ea:bf:01:
         1e:55:d9:cc:6d:d5:8f:87:43:78:0d:6f:c4:9d:b2:0f:26:2b:
         62:59:f4:65:a6:37:44:17:a6:d8:7c:61:90:d3:62:a0:0c:c1:
         ea:62:1d:7c:f3:3a:4e:87:54:7d:eb:01:e2:9c:c9:52:a2:ca:
         fa:52:53:46:64:af:ea:50:d9:08:ae:60:8e:29:38:2e:2c:57:
         1b:3f:18:53:66:76:49:2d:61:e8:48:be:f8:95:f8:ac:91:13:
         49:87:bd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:01 2025 by rpki-client