Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c1b815e1-6108-3b45-bc89-a3c16573ed14.roa
File:                     c1b815e1-6108-3b45-bc89-a3c16573ed14.roa (raw, json)
Hash identifier:          hItrvpK12YWxRDdtIncXBM6Y6o/J/FQ6GNuV+iKIl8A=
Subject key identifier:   84:21:F9:C1:7D:AB:CE:58:1C:1D:EB:00:5E:40:5E:E2:97:B4:12:68
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8BE23D2B67DE3995092B0100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c1b815e1-6108-3b45-bc89-a3c16573ed14.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     401199
IP address blocks:        184.174.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3d:2b:67:de:39:95:09:2b:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=24b6b1a4-4459-4aae-9a73-65d3cde7ab9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:71:5a:69:80:cd:d8:62:2d:57:74:93:e6:
                    3c:15:02:3d:d7:e9:07:fe:1c:43:0a:6f:67:51:97:
                    36:1a:1f:19:21:b1:e8:fa:03:0f:60:88:5e:83:66:
                    7d:4d:22:be:e5:a9:7e:10:8c:73:b2:4f:ab:d2:c6:
                    6e:d5:32:fe:c7:99:6f:13:4a:bb:c8:09:bd:26:46:
                    df:55:66:24:9d:e6:8b:c4:d4:92:64:30:c7:77:e9:
                    7c:6a:d6:a0:c1:4f:dc:a9:10:07:5b:98:49:a5:82:
                    61:d8:54:ee:82:82:3a:42:ae:11:c8:99:00:00:ff:
                    f1:e7:4a:80:bb:2e:9f:ef:14:3c:bf:a2:6c:dd:ff:
                    2a:23:26:14:e0:0d:9c:e6:25:28:90:64:7f:b4:50:
                    46:74:2c:8b:3b:c5:9a:37:40:c3:85:ce:56:b7:dc:
                    56:5e:ba:1b:bf:89:44:0c:5f:d4:2d:b4:ae:01:76:
                    f6:d8:e8:ee:81:b0:5a:8e:ec:59:93:99:cb:09:9c:
                    cb:59:9a:c6:1b:15:7f:88:52:5b:66:2e:ce:c1:7c:
                    2a:82:9f:30:df:50:9d:08:4d:26:93:09:f9:27:36:
                    9b:9d:fd:c7:99:60:ee:9e:aa:db:5e:10:24:4e:26:
                    c7:c4:76:06:f1:82:22:f2:9e:64:d3:00:1a:9b:1a:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:F9:C1:7D:AB:CE:58:1C:1D:EB:00:5E:40:5E:E2:97:B4:12:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c1b815e1-6108-3b45-bc89-a3c16573ed14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:6f:ce:15:a4:0c:1c:28:f3:d1:5a:ae:fc:0c:40:49:e1:
         ff:4e:37:d4:0e:07:49:ee:36:b6:9b:b3:20:13:a0:29:11:81:
         27:c0:8b:5a:da:71:38:9f:49:cb:14:d3:f9:a1:e5:c4:1c:54:
         14:42:8f:77:03:df:b5:24:08:e2:7d:dd:8a:8f:64:a0:51:ac:
         c9:05:5e:55:27:83:da:29:82:86:96:11:4c:33:ad:64:4c:50:
         15:66:7f:17:2a:6c:31:64:2b:e6:30:e8:ee:1f:42:4c:b1:e0:
         55:45:f4:5b:7c:12:3a:f8:6e:33:ee:22:d3:1f:d9:99:95:6a:
         ad:c3:99:67:6a:83:a5:d6:ac:95:aa:ef:44:94:2b:05:84:d9:
         75:d2:14:74:0e:f0:29:32:89:82:f3:6b:46:11:0c:f4:8a:c3:
         75:75:4e:0f:4b:2b:18:d3:a9:f5:35:bb:a9:b8:c5:fb:63:06:
         89:eb:38:ca:94:6b:86:ac:fa:7d:c4:85:04:3d:13:72:2e:56:
         46:71:73:a5:a1:1f:97:bd:a8:ab:b2:0f:b7:00:bf:f1:65:29:
         a7:93:b9:65:b0:60:d2:b0:9a:f7:49:a5:5e:c9:f5:67:0b:a6:
         01:95:94:b6:4e:38:6d:67:5c:c6:26:03:58:64:ce:35:23:51:
         c5:2f:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:06:55 2025 by rpki-client