Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8f39d23-491b-318d-969b-d9e7c38fba0e.roa
File:                     c8f39d23-491b-318d-969b-d9e7c38fba0e.roa (raw, json)
Hash identifier:          qrj1rvakPsA0yCa+H3kXdY8vWqBb5Ws7UPDhWMMAgv0=
Subject key identifier:   DB:E1:FE:FD:42:C9:EB:90:71:88:46:36:75:39:00:15:B7:08:F7:25
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B583C88F9EF230C4569B7C900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8f39d23-491b-318d-969b-d9e7c38fba0e.roa
Signing time:             Sun 28 Sep 2025 13:00:41 +0000
ROA not before:           Sun 28 Sep 2025 13:00:41 +0000
ROA not after:            Sat 27 Dec 2025 14:00:41 +0000
asID:                     60439
IP address blocks:        216.122.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:3c:88:f9:ef:23:0c:45:69:b7:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 28 13:00:41 2025 GMT
            Not After : Dec 27 14:00:41 2025 GMT
        Subject: CN=c8e56a87-4f07-49a5-8268-89392815a037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8a:66:d2:c8:48:65:39:dc:fb:ca:39:b7:80:
                    fb:b1:f3:02:6e:bd:32:b2:a3:c6:11:fe:85:8f:42:
                    07:ab:e7:e3:b8:1d:4c:28:da:77:09:4e:d7:eb:da:
                    57:0a:d8:a0:88:12:15:af:5c:d9:13:35:34:50:54:
                    c5:30:13:f1:c7:d2:1d:83:ce:f0:20:fe:c9:bc:fb:
                    58:ac:5f:40:27:6f:30:2c:52:2d:48:70:0c:85:72:
                    f8:fa:9f:47:b7:e3:ce:eb:b8:3e:f6:ce:6a:5e:1a:
                    5f:cb:4b:a5:4c:93:4a:01:10:ec:2e:89:09:ee:8c:
                    b7:ef:9b:b0:fc:cc:c9:74:8a:36:16:d8:47:59:49:
                    dc:2f:b4:29:1a:8d:de:35:70:be:01:c3:da:2d:a4:
                    ed:af:af:b4:e1:91:14:0f:ef:9a:ea:1a:52:37:d0:
                    08:f1:68:36:fb:3d:37:2e:5e:dc:86:38:1c:56:6b:
                    ee:1b:20:c1:3d:59:96:72:b0:d0:77:06:ae:08:98:
                    55:69:ce:8b:73:ad:73:df:1f:8a:61:f4:57:6b:48:
                    f4:47:45:4e:95:b9:39:09:5e:ab:cd:3b:72:85:56:
                    ad:58:f3:2d:d7:76:93:e6:63:07:56:7a:f6:da:d0:
                    68:01:56:9c:68:4a:db:ba:3e:32:3d:de:28:68:d1:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E1:FE:FD:42:C9:EB:90:71:88:46:36:75:39:00:15:B7:08:F7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8f39d23-491b-318d-969b-d9e7c38fba0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:48:01:ea:31:e5:f6:fc:88:b2:6f:77:aa:1d:38:a5:ba:23:
         be:43:26:54:90:10:69:1f:90:d9:c0:65:52:f8:26:35:8a:32:
         a1:e1:82:f1:33:7a:26:1d:cd:9e:97:c2:23:9b:21:02:af:0e:
         3e:1f:b9:80:78:f1:53:ca:00:5a:e8:13:cc:9a:3c:27:12:9b:
         18:55:79:fc:e4:be:eb:08:91:96:34:d0:e2:ac:74:3c:d9:ce:
         75:d7:8c:72:f3:d6:bc:89:a9:5d:51:45:7e:89:3b:94:ea:1b:
         82:97:61:ac:2b:22:96:4b:30:0a:e7:5b:20:11:4c:a9:e6:92:
         19:5a:65:9a:83:d1:7c:61:07:67:ea:cd:7b:0e:c9:de:66:f8:
         41:27:3d:2e:71:b3:6c:31:e4:89:df:bb:10:2c:3e:90:62:7d:
         64:3d:83:f0:42:eb:5a:17:07:fa:d1:f5:f1:c3:3e:7f:fb:99:
         cc:77:7a:1e:b6:4f:f2:4e:0c:d2:e2:35:c2:80:2b:6f:65:08:
         2a:a1:67:d9:90:d7:68:a6:8f:76:a0:f7:3b:63:d6:73:b4:b4:
         fd:18:4e:00:1e:47:c0:b0:d1:16:6f:46:bf:42:6b:f8:34:f1:
         22:c9:c9:de:fb:5b:74:72:e0:c3:2e:aa:04:ad:0e:08:70:a7:
         c3:5e:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:57:08 2025 by rpki-client