Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa
File:                     f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa (raw, json)
Hash identifier:          LeRqsauzZg5IGmjwkIAUmWcUZxlLpOTN3B87qynDV7A=
Subject key identifier:   86:91:D0:A0:4E:88:73:16:47:D8:31:A8:98:95:3D:5C:A3:CE:64:D7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B4E7715F228A467635AD42DC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396356
IP address blocks:        173.211.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:15:f2:28:a4:67:63:5a:d4:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=68b24d43-8007-4c70-9fca-7ff7303f13cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:49:66:ba:9d:1b:e6:9b:09:dd:d7:e4:27:
                    f2:cd:14:55:84:e1:f5:09:db:13:04:d5:50:82:0b:
                    49:8d:aa:8a:b5:a6:73:1a:8e:90:31:54:02:2f:e9:
                    0f:f0:15:04:2f:17:f9:02:d1:fe:77:69:16:c9:37:
                    3a:59:17:97:44:ee:d3:c8:d3:d5:73:2a:26:0d:af:
                    57:2b:19:19:0f:05:2d:1b:23:52:3f:74:ba:92:1b:
                    ee:7a:b4:24:48:67:11:78:0f:b5:c2:7a:cd:f1:3a:
                    24:fd:87:69:1b:63:c0:d2:cb:a0:51:99:82:d5:d4:
                    b7:2d:4e:cc:3c:87:e7:74:d0:2a:90:f2:2e:80:97:
                    ce:38:8d:57:7e:71:e2:4a:cd:73:e1:e6:2d:49:1f:
                    80:a4:5f:7a:af:67:68:11:8e:3d:cb:71:49:38:51:
                    21:a1:31:0d:36:60:f5:d7:3b:a0:18:13:b3:aa:06:
                    96:16:7c:45:5c:b0:0f:7a:5e:09:84:4b:03:7f:b6:
                    8b:e9:58:41:d9:92:a6:a1:e8:e3:da:76:7c:9b:18:
                    17:60:7c:89:83:d0:2d:78:7d:1e:93:b2:da:eb:95:
                    eb:2d:88:27:8a:19:ee:17:33:f7:d6:87:47:60:0f:
                    7b:b9:23:14:c4:58:ae:86:ab:3c:f3:fe:b5:84:55:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:91:D0:A0:4E:88:73:16:47:D8:31:A8:98:95:3D:5C:A3:CE:64:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:41:a5:5e:a5:c6:db:0c:c6:6c:e7:e3:5f:70:ff:1c:29:
         0c:21:f8:a3:bf:6a:c7:7a:bb:e7:55:04:f6:f7:aa:d2:6a:87:
         54:a0:46:84:78:55:90:8c:80:df:ae:74:04:12:b0:38:8a:35:
         03:48:22:42:dc:8d:38:18:b6:11:07:cb:22:98:f3:91:46:36:
         c6:e5:98:9b:3f:d2:3d:ea:8a:65:1f:e8:b7:ba:23:54:2e:ed:
         20:9c:a4:3d:74:cf:98:5a:e0:2d:fa:a7:df:f6:e7:5b:81:a2:
         14:06:d7:50:c2:6a:3e:f2:cd:bf:a3:2b:c1:63:84:a7:7c:ae:
         8f:43:6f:fc:58:b3:76:be:19:69:6a:3b:f8:97:21:9f:1d:f2:
         e0:ac:6d:46:7b:c0:39:56:0d:26:18:44:a2:13:a1:93:49:42:
         22:82:a5:c8:9d:b2:53:c8:a8:ee:45:86:0d:0d:42:1f:e5:30:
         5d:27:59:e9:67:e9:aa:fd:0c:74:4e:6c:c7:8d:49:9c:45:80:
         9d:3a:4b:8f:f2:b9:ba:d3:a0:0a:cf:2d:01:33:5b:8b:06:31:
         bb:60:4e:de:b5:e6:09:e3:46:e3:9c:a3:9a:ca:b3:8e:c3:99:
         e5:e1:d0:05:49:9a:8f:37:8e:fc:70:d5:3b:c2:f7:96:75:cd:
         b5:dd:a8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:31:35 2025 by rpki-client