Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa
File:                     bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa (raw, json)
Hash identifier:          vdiIa5c+sqPwAH8lBtpjOB5PXm1K5PP4oNkuI2GW1qU=
Subject key identifier:   CD:ED:E9:C0:41:D1:80:09:CF:5B:98:66:ED:08:66:06:E4:61:53:E0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A70F4AEF459413147A3594B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa
Signing time:             Mon 07 Jul 2025 16:44:18 +0000
ROA not before:           Mon 07 Jul 2025 16:44:18 +0000
ROA not after:            Sun 05 Oct 2025 16:44:18 +0000
asID:                     214054
IP address blocks:        216.122.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:f4:ae:f4:59:41:31:47:a3:59:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  7 16:44:18 2025 GMT
            Not After : Oct  5 16:44:18 2025 GMT
        Subject: CN=a9c5f4b5-08be-4a85-9cd7-2b1f70a8d17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f1:fe:80:43:71:32:0a:bf:76:40:d6:67:53:
                    78:f9:bc:1b:29:7b:90:8a:29:79:c2:7b:d9:0a:e4:
                    1f:54:2c:c1:03:ef:0f:62:40:12:ea:e9:6a:3e:52:
                    0e:f5:b7:5f:50:32:2a:1d:41:32:24:d8:7b:da:72:
                    9b:4d:f6:d6:c4:bc:3b:6c:1a:fd:d9:a4:7a:53:bb:
                    c1:74:82:2c:3f:a8:97:ac:f1:29:f5:18:61:d9:40:
                    0b:16:11:2b:cb:63:64:42:9c:aa:90:5d:f0:53:49:
                    db:9b:66:bd:75:ac:55:d9:bf:c6:aa:0b:db:77:b2:
                    25:d0:ad:e4:4f:2b:3a:b1:dd:16:51:1b:b8:d8:d6:
                    34:7d:3e:de:f4:b3:a9:92:41:4f:f4:4d:3a:74:c6:
                    65:34:70:b0:8a:f4:11:74:65:64:a3:ab:7e:ab:1b:
                    22:67:a5:3d:52:5d:60:39:e5:ab:4a:07:b4:98:01:
                    78:94:80:b7:14:ca:10:89:36:d8:7f:f9:af:fa:7a:
                    1f:cf:45:c9:e9:88:36:96:80:be:5d:2b:18:57:ba:
                    ab:0e:0d:ad:c6:ea:76:18:4e:f0:df:c5:f2:2b:a6:
                    46:ef:30:f6:dd:0e:d4:c1:4f:7a:bc:27:86:94:68:
                    e2:cd:d9:20:4e:e1:bf:0e:80:38:8d:39:d9:e3:6f:
                    05:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:E9:C0:41:D1:80:09:CF:5B:98:66:ED:08:66:06:E4:61:53:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bb9b8aa9-f6f1-376f-b0fa-131a7071e16a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:99:68:07:f2:d1:be:57:05:20:d9:e6:d5:dd:39:e9:4b:80:
         98:be:53:61:f1:27:c4:1a:7c:4b:54:9f:a0:3b:3b:c7:25:65:
         32:33:2e:52:b3:a3:e9:8a:82:f8:e5:1f:a2:c5:d1:db:cb:56:
         c8:3a:0e:0c:35:62:99:3a:b8:b2:1f:d3:f1:b9:4d:a4:a0:53:
         e6:96:74:44:eb:98:04:56:0c:e6:b7:a7:30:3a:5a:b8:73:ae:
         6a:41:c4:69:7e:d5:73:ff:37:46:b9:75:d9:18:4a:2a:5e:01:
         67:b0:fc:99:a9:09:8d:d5:80:fe:80:b1:a6:fc:fb:73:90:7a:
         e5:71:8d:0a:ca:1c:aa:1f:af:7b:1d:97:da:6b:e1:90:89:87:
         bd:e4:b7:ad:9a:8b:9d:5b:19:85:a7:a1:cf:03:d1:95:2a:9f:
         cd:0d:39:db:1d:de:fe:2e:8f:71:ed:f3:ba:8c:55:1a:4f:77:
         38:ce:77:6c:1a:86:13:d5:9f:38:f8:5f:1e:e3:e3:83:9f:96:
         7c:eb:75:28:45:b1:01:b7:86:3e:2b:3f:4a:5a:45:0f:c8:78:
         d3:5c:10:0e:67:89:f4:a2:b1:ae:68:5f:a6:bc:b0:e6:83:35:
         ae:85:7a:2b:4d:75:6c:1f:ea:40:4e:fb:ff:9c:c6:2d:92:f7:
         ce:c0:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:41:50 2025 by rpki-client