Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/36d5f919-05aa-3692-b698-19404fe4e2aa.roa
File:                     36d5f919-05aa-3692-b698-19404fe4e2aa.roa (raw, json)
Hash identifier:          RmECX6Evtin+AUMDiluZlmDijyye668zN5g52IdZ8ik=
Subject key identifier:   B8:90:61:0F:F7:C4:50:2B:20:C9:83:01:23:AB:FB:CE:A6:42:00:A0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A66C0747B5AB5CB21835402C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/36d5f919-05aa-3692-b698-19404fe4e2aa.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     396163
IP address blocks:        216.10.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:74:7b:5a:b5:cb:21:83:54:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=57c1d029-39f4-44e7-b3c4-064e5d2bc335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:3a:d4:c9:64:fd:3a:b6:aa:ee:dc:27:b6:
                    08:0f:f3:8a:e4:28:62:71:d4:f2:09:0e:65:7b:ef:
                    8b:5d:6d:f7:c4:51:52:0f:72:87:5c:f7:8d:1d:5d:
                    1a:56:46:19:c7:12:f7:6c:48:32:12:0b:49:55:96:
                    d9:47:3a:33:1e:08:6b:fd:78:4a:96:79:28:d4:f5:
                    24:1f:92:ae:9b:3a:06:f6:bb:84:fe:57:ac:de:d0:
                    18:73:ee:91:25:02:39:84:ee:2f:2a:b6:c7:d8:0d:
                    28:0c:a8:2a:30:f9:fb:48:b6:30:da:0d:ee:d9:7e:
                    e1:b0:bb:22:c7:f5:c3:dd:d4:84:bd:00:d8:a0:94:
                    c5:97:5a:21:b3:7f:08:6a:d3:62:52:0d:d7:df:4d:
                    9c:1c:18:ee:5c:41:17:13:d3:70:33:3c:e5:5d:9d:
                    78:ca:4b:c6:14:a7:1d:7c:a3:04:3e:ee:06:c6:57:
                    31:d2:41:99:15:a3:86:8c:78:8c:09:ee:f0:55:55:
                    f0:20:23:b5:b0:1d:36:cc:09:c1:4d:e2:21:8d:70:
                    ad:8b:11:3b:37:a3:8d:e9:5d:97:d3:30:89:df:22:
                    08:9f:d8:17:e2:eb:f9:56:f8:83:f6:cb:fa:e7:e9:
                    81:44:fc:b2:53:e3:80:fa:45:50:60:42:9e:b8:78:
                    9b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:90:61:0F:F7:C4:50:2B:20:C9:83:01:23:AB:FB:CE:A6:42:00:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/36d5f919-05aa-3692-b698-19404fe4e2aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:4f:1a:3e:47:2f:00:34:47:e1:28:df:6f:f4:f0:4f:2f:
         fa:b3:01:81:c6:36:6e:55:3c:63:49:87:3c:81:ac:af:4d:df:
         16:f5:5b:8b:8c:ba:ae:35:a8:52:2c:95:ca:68:6e:d3:9a:89:
         cf:e1:97:f5:ce:e3:92:d0:7a:ac:d4:6f:84:01:bd:3d:e5:58:
         74:c3:98:39:6d:d6:1b:e8:6e:cf:36:97:e6:f9:e7:a4:b3:ea:
         db:53:88:d8:7a:40:a9:c8:c7:a1:02:e4:00:e1:4e:ae:3e:60:
         b4:e6:4b:7a:fc:0e:3b:c0:67:1b:1a:d3:01:3e:07:44:d0:f4:
         99:0b:f1:6a:8b:06:94:46:e5:16:66:27:44:ed:f4:25:70:61:
         75:37:0d:eb:2c:c7:86:43:a6:0d:76:bf:00:60:39:84:d6:28:
         64:9a:5c:2e:84:cc:a6:35:64:d5:38:c1:ff:94:8c:83:e0:e9:
         01:12:f8:dc:6c:68:4e:e2:26:10:f4:ef:82:ec:d7:9c:73:10:
         86:1b:8c:84:aa:79:be:62:c2:6a:8d:92:72:59:05:a2:9d:31:
         b3:68:ae:51:f8:67:1b:ba:d0:d1:01:86:75:d8:f8:0f:5b:11:
         6e:6c:51:f9:fb:77:24:8e:25:e9:1a:93:7c:94:5e:4e:36:25:
         10:b0:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:24 2025 by rpki-client