Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa
File:                     5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa (raw, json)
Hash identifier:          HstY5ZubGxbBCjneOQXxDWlXaVeAzFxDcb42jYnN+2Y=
Subject key identifier:   BD:A2:6C:97:A1:57:C5:DC:03:3A:17:BA:43:EA:DC:38:90:E3:36:9C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B9E07D62DDDC30D694FF14A20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     11427
IP address blocks:        216.122.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:d6:2d:dd:c3:0d:69:4f:f1:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=3cf02717-724f-49e8-a088-3f7e28ed9ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f1:10:8a:27:b5:35:d3:68:07:f1:2c:e2:c7:
                    9b:55:93:bb:71:b2:02:3c:49:df:9b:65:5a:8a:fc:
                    44:a1:ca:0d:99:3b:6e:30:44:38:78:68:f0:cf:a2:
                    30:59:1a:e8:db:50:10:53:15:f7:50:16:71:eb:7a:
                    cc:93:36:98:29:ae:d9:6e:ff:54:a5:6e:5f:ce:c4:
                    ab:f6:ef:2e:00:ad:f9:79:85:ff:95:20:1c:d1:5c:
                    d5:fa:5c:cf:d6:6d:ab:68:f9:61:36:e6:6f:48:f1:
                    ed:3c:53:2a:25:ee:95:de:08:ce:5e:7b:8c:9d:26:
                    65:4a:db:6f:66:23:97:cf:2b:79:9a:be:4c:bd:cd:
                    d5:cd:c1:a7:bd:3e:fb:45:b3:db:12:c3:ad:8c:fd:
                    6f:7b:c9:b3:df:9e:7f:dc:02:a0:12:17:28:30:79:
                    ba:88:bb:e1:a0:07:bd:46:6c:44:81:7a:80:eb:59:
                    e6:72:e2:e6:87:24:92:1f:a1:96:ad:fb:9c:c0:d9:
                    0c:70:ee:fa:cf:b3:1a:55:ca:e3:b8:2a:0f:e5:a3:
                    0a:3c:fd:03:5c:b1:97:cb:89:66:49:db:ee:ad:c0:
                    33:72:83:6c:1c:ce:79:2d:76:67:66:30:00:97:52:
                    54:01:15:df:d5:d7:36:7a:84:18:2c:08:14:23:76:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:6C:97:A1:57:C5:DC:03:3A:17:BA:43:EA:DC:38:90:E3:36:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:5a:87:88:57:57:c0:98:93:53:31:2e:71:6d:0b:bd:04:16:
         0b:b9:c5:63:b9:d3:b8:5e:74:a7:42:0b:7e:b4:a3:e0:c1:07:
         ae:39:5c:01:50:71:02:c9:91:d6:cf:35:17:73:ac:ce:b3:97:
         3a:d0:ad:dd:f9:c3:a2:94:76:50:86:f8:cb:47:7d:84:f7:5a:
         3f:95:b1:8f:2d:ad:c0:53:20:ee:0f:f9:48:b4:cc:42:06:27:
         35:18:88:43:23:df:ff:3c:0e:d8:35:dc:12:4b:77:8a:4f:49:
         d1:dd:e0:ff:27:fb:79:8c:cc:fe:96:7f:bc:fa:79:9e:f0:36:
         e1:08:59:1c:98:cf:d6:8f:e3:53:53:7c:57:f7:76:ff:ba:be:
         22:f3:e6:b3:2a:20:a8:24:28:44:90:20:38:e3:b3:7a:59:26:
         8b:0c:af:6a:6f:e3:d2:34:84:2a:69:7a:3c:55:c7:f1:e5:6b:
         b6:aa:b2:3c:aa:1b:a3:68:fd:0a:cd:39:89:61:89:84:ed:8c:
         82:d6:17:9a:2f:cf:2b:40:58:23:95:dc:e4:6e:18:bb:9b:a0:
         d5:0c:e9:b6:d5:32:84:cb:86:b8:d1:0d:63:0e:1b:30:e4:6d:
         39:13:7d:1f:de:86:f6:3e:8d:db:8f:66:88:fd:ff:43:30:c2:
         b6:80:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:41:02 2025 by rpki-client