Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/15714327-4b07-3d66-a63a-96b6c203aafc.roa
File:                     15714327-4b07-3d66-a63a-96b6c203aafc.roa (raw, json)
Hash identifier:          8PrCt0gerWVaUT7fglnoCZE6W8NqNGdrF8zsR8uGfQ8=
Subject key identifier:   10:FA:9E:30:16:56:BB:3C:67:5C:26:BA:26:99:91:B0:55:88:1B:F3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A9A662E7214A6498DCD991300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/15714327-4b07-3d66-a63a-96b6c203aafc.roa
Signing time:             Tue 22 Jul 2025 13:01:03 +0000
ROA not before:           Tue 22 Jul 2025 13:01:03 +0000
ROA not after:            Mon 20 Oct 2025 13:01:03 +0000
asID:                     20473
IP address blocks:        216.74.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:66:2e:72:14:a6:49:8d:cd:99:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 22 13:01:03 2025 GMT
            Not After : Oct 20 13:01:03 2025 GMT
        Subject: CN=d9cfa5b9-ff9b-4190-992e-1e677768b38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:77:1f:40:92:d4:66:43:91:49:23:67:e5:
                    d4:75:3d:76:28:5b:e0:1d:76:a2:ec:fa:fd:55:64:
                    bc:6f:ce:71:fd:38:c7:bf:31:50:39:dd:ef:ff:d4:
                    d6:ed:2a:20:68:55:35:9f:b8:a1:d2:82:12:98:6a:
                    c7:77:69:72:c8:85:b4:d1:e5:11:e6:f8:b8:35:e2:
                    a3:ba:c4:bc:cc:8f:5c:f6:73:c6:a5:c4:d0:f2:e0:
                    8c:45:77:9a:bc:94:49:77:c9:0e:6b:f2:cb:f4:e0:
                    f5:44:4a:47:90:6a:db:b9:4e:33:65:8a:57:e6:e6:
                    51:31:45:91:b4:01:bc:5f:db:4c:90:b7:9b:f2:ef:
                    9e:2b:39:59:74:c2:68:dd:be:ac:90:17:65:c5:4a:
                    63:92:0a:c6:ae:bf:14:c9:85:70:46:19:68:65:48:
                    8d:35:49:ba:59:9a:df:17:eb:c6:e6:29:55:fd:ce:
                    32:f6:9e:f7:d2:2b:8b:e0:21:1d:4d:2c:95:2b:73:
                    c9:46:cc:2c:1c:de:7a:8b:dc:e1:33:63:92:1f:bb:
                    c3:2d:fb:69:9a:75:b6:68:ba:10:b5:47:08:a5:86:
                    e2:3a:77:03:b9:5e:48:9e:d9:63:54:0f:77:ad:c1:
                    b8:cd:f1:85:11:d9:d7:94:ec:c5:e2:a8:f1:e1:cf:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FA:9E:30:16:56:BB:3C:67:5C:26:BA:26:99:91:B0:55:88:1B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/15714327-4b07-3d66-a63a-96b6c203aafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:db:38:da:eb:aa:9c:62:b9:f1:df:64:de:31:89:8a:a4:61:
         10:80:c9:f1:11:36:85:24:9b:e6:fa:79:73:07:e2:62:46:be:
         33:cc:fb:15:ee:2f:e7:34:33:78:07:0b:c2:98:f4:38:30:e6:
         4f:a8:a5:68:01:b8:3a:cf:c4:bf:28:a6:1f:72:6f:bb:6b:fd:
         3c:b0:ba:9b:b4:1a:ff:bf:8c:05:21:f8:c2:b3:b6:a5:66:23:
         b7:fd:3e:5d:d7:10:03:37:ee:e8:d8:66:4e:ae:8c:fe:2e:71:
         ba:57:cc:0b:ef:fb:a9:5a:b2:a7:a1:a3:06:95:e8:6b:0a:48:
         5b:e1:9c:48:60:82:5e:bb:13:d5:c5:59:1d:9d:d5:9f:7b:82:
         0e:ca:ec:01:8d:8e:23:85:42:4d:c6:48:10:1a:76:98:7e:f9:
         54:94:17:5c:96:89:c9:b0:b3:de:3c:73:8f:f7:98:03:7d:13:
         f6:5d:f9:92:dd:50:a8:b7:eb:57:8c:6f:11:ff:7e:e0:dd:31:
         71:e4:06:d5:e8:f9:dc:41:9b:eb:a2:50:bd:30:6a:d4:5e:34:
         c3:5c:78:ef:d0:65:51:fd:0c:36:b2:66:07:f8:d1:8a:5e:e1:
         74:c2:37:6b:b0:e4:cb:fa:67:f1:f6:f0:66:ae:8d:1b:55:dc:
         94:f9:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:43:34 2025 by rpki-client