Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba3f1070-2e83-3258-ac20-e3dd2e7b70fd.roa
File:                     ba3f1070-2e83-3258-ac20-e3dd2e7b70fd.roa (raw, json)
Hash identifier:          aL0RkuN64oDZLkwppMMl69y8z25n9STJe7bSE/djPvg=
Subject key identifier:   B8:AA:B4:49:EA:14:B3:F0:C1:EC:E1:98:58:43:EE:64:14:7B:F3:33
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B3C51B36E1A88F4C3294B5D40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba3f1070-2e83-3258-ac20-e3dd2e7b70fd.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     215724
IP address blocks:        173.46.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b3:6e:1a:88:f4:c3:29:4b:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=329503b0-16c1-4046-ab31-852b5c2f653b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:43:31:3f:8c:2a:1a:d0:a0:f1:b6:89:9f:
                    43:92:3f:9f:8d:56:13:a3:dc:6f:31:3b:1a:28:16:
                    2a:03:9e:2a:5e:6c:c1:81:cf:fe:8b:93:14:ef:92:
                    58:47:9d:81:f1:e2:24:5e:5d:10:b4:77:9c:a2:28:
                    d5:84:13:84:10:5e:8e:da:da:ab:86:d7:fb:be:1e:
                    5c:e6:bf:26:7b:f6:1b:80:3e:64:f1:42:92:51:10:
                    da:53:b1:94:60:2f:c5:98:bc:ab:3e:15:37:c4:a5:
                    a5:ab:34:28:36:aa:be:eb:54:6c:ea:a0:a6:e1:5f:
                    0d:56:f1:33:65:34:c7:d8:4e:e4:9f:9a:b8:86:ac:
                    a8:49:d9:a0:1b:f7:a9:22:d1:d1:3c:8c:9a:d4:30:
                    cf:a8:c0:ef:98:65:a5:4e:be:cf:54:a1:2b:6a:64:
                    97:3e:06:f2:1a:60:b8:59:ae:d5:09:c8:95:75:1b:
                    67:d7:e3:b9:47:f6:4f:ac:19:91:d9:83:a4:10:2c:
                    be:ef:35:61:d0:e1:e4:7c:4d:90:0d:0b:f3:22:e8:
                    1c:d1:c0:65:cb:70:92:c5:56:3a:83:e2:97:8b:03:
                    0e:6b:d0:66:48:2a:87:80:18:ea:b3:17:34:b4:a3:
                    de:a6:f8:3d:4b:89:c6:6f:3f:59:4b:0f:fd:f1:8b:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:B4:49:EA:14:B3:F0:C1:EC:E1:98:58:43:EE:64:14:7B:F3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba3f1070-2e83-3258-ac20-e3dd2e7b70fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:86:cd:42:5c:07:f0:0f:98:cf:5f:ad:51:a5:57:60:07:f9:
         21:6d:35:6e:0b:e6:e9:77:b6:a5:df:84:bf:6e:07:42:cc:64:
         a8:41:d5:b3:b0:28:6c:be:d2:1b:5d:06:87:dd:34:7c:12:47:
         bf:7b:4a:ed:d1:5b:2d:6c:73:56:6c:cd:46:d5:12:55:b6:da:
         75:39:a4:c9:16:ed:f0:8a:9a:d9:04:93:b1:c4:5d:0b:98:1e:
         04:ba:3f:25:29:6f:5b:ea:cb:f5:5b:5e:03:6b:cd:bc:04:d4:
         89:7a:02:5a:d2:f4:94:66:f6:54:3f:f1:a0:76:72:b1:b3:98:
         7f:98:ee:08:e9:2f:c0:fe:d3:54:3a:5c:54:6f:3c:e6:6c:c2:
         58:c1:b9:d9:78:94:ff:c1:84:4e:06:57:45:7d:d2:4c:0f:36:
         b8:20:bf:66:6a:22:80:32:7e:8a:3e:d6:eb:ad:53:52:70:a2:
         33:1f:17:d6:bd:14:96:43:6b:24:21:5f:c9:92:d8:e9:73:77:
         6e:7d:af:9c:b6:5b:33:fd:0d:c3:4f:65:70:2e:7d:b0:38:47:
         f9:75:21:de:09:43:93:6b:9f:1d:50:18:3a:81:1e:3f:5f:cf:
         00:e7:d6:b0:05:c1:af:f2:89:8d:cb:8d:01:5b:ca:44:0b:9b:
         e9:40:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:36:40 2025 by rpki-client