Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ccf7cfd4-42f2-3a43-8dbf-486c80efc1a5.roa
File:                     ccf7cfd4-42f2-3a43-8dbf-486c80efc1a5.roa (raw, json)
Hash identifier:          xFWpCacn4AYUrcoL04WhOrI1WokK1/PInmixC8+JxgY=
Subject key identifier:   99:BF:53:5F:31:9E:AF:43:4F:33:38:41:DD:FE:E3:0E:B1:0A:C2:64
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B8BE23D4D8FAC56BD67AFDC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ccf7cfd4-42f2-3a43-8dbf-486c80efc1a5.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     1426
IP address blocks:        184.174.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:3d:4d:8f:ac:56:bd:67:af:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=88b1d497-e783-429b-a3f7-2a11da47a5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:2b:76:a1:f4:4a:54:34:76:ce:77:41:2f:
                    f4:3b:8f:74:cc:5c:6c:68:9d:61:94:6d:93:33:7c:
                    47:a7:9d:90:7c:f2:e4:a0:43:b7:30:ff:64:ec:c2:
                    f0:e0:eb:ff:d0:f1:57:9c:80:a9:57:78:f4:80:56:
                    10:7d:b1:51:fe:bc:20:1a:3d:7b:46:f4:e3:d8:2f:
                    8e:7e:1a:29:5c:7a:ef:8a:0f:8a:e2:1b:23:d7:f4:
                    a0:71:46:c3:53:e8:ae:58:eb:5a:0d:db:75:b4:0f:
                    2d:88:ee:be:c5:a4:7d:45:95:07:6a:63:85:3a:76:
                    23:6d:99:3d:fd:6d:4b:ec:ed:15:06:d1:c5:42:fe:
                    99:f9:76:8d:3b:59:75:4f:36:f5:a8:d5:18:4b:2b:
                    9c:24:7d:dd:5d:ef:02:da:7a:a8:8b:b5:22:f5:c2:
                    73:d7:d0:e7:d0:41:38:04:7b:59:a9:b7:20:3e:a1:
                    3f:c8:2e:f9:f4:1b:1b:43:c9:20:8b:6e:92:50:04:
                    0b:d3:a8:d4:b5:10:44:d0:6b:46:2b:c6:2e:e4:a4:
                    88:25:c7:4a:cb:01:ee:39:de:9d:bb:08:90:67:12:
                    3f:2d:7c:2a:19:2c:6b:49:48:f6:93:a4:c3:68:86:
                    88:03:25:55:7c:53:37:ed:66:61:c4:0b:08:22:10:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BF:53:5F:31:9E:AF:43:4F:33:38:41:DD:FE:E3:0E:B1:0A:C2:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ccf7cfd4-42f2-3a43-8dbf-486c80efc1a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c7:89:94:6c:e8:8f:f5:12:f1:80:43:4b:d7:c4:22:7d:22:
         49:95:12:16:13:1b:e6:fa:bb:23:fd:fd:b7:11:87:e4:3e:16:
         b3:32:ac:e3:45:af:9a:c5:12:c5:62:54:98:ad:66:75:4a:32:
         4e:b6:98:15:7f:37:5a:ff:e6:ef:07:d0:b4:30:f0:9f:b6:03:
         63:cf:62:8a:ad:9e:f5:77:82:32:84:d3:e6:81:27:29:83:7a:
         94:07:ab:41:02:4c:70:a2:14:34:43:65:a7:bc:f9:dc:fd:58:
         1b:d2:a2:2a:95:32:16:5e:9c:dc:20:b8:dc:ce:d9:a7:2a:b7:
         f7:4d:b5:74:01:33:c7:3a:05:1d:fd:2d:54:7f:22:a3:e9:9a:
         7a:84:e2:23:8a:1b:06:e3:70:4c:2c:29:9f:01:46:a1:7c:bf:
         82:59:4a:07:01:bd:e6:ff:8b:b7:55:e1:18:df:e6:4e:b1:df:
         af:18:cf:43:09:30:cc:e1:41:e4:84:42:ea:21:8b:0c:c2:05:
         eb:83:b5:d0:e6:82:de:8f:33:bb:12:8f:69:ce:94:09:ed:f3:
         81:99:20:b1:b2:7d:e6:6a:c7:48:a4:f4:f0:19:49:dc:2c:0e:
         77:b8:e2:43:5f:17:c1:ef:c5:3a:ad:7b:7c:f2:94:25:67:b1:
         80:bc:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:34:43 2025 by rpki-client