Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c34e4dc5-3a77-3f9a-8665-4969e482175f.roa
File:                     c34e4dc5-3a77-3f9a-8665-4969e482175f.roa (raw, json)
Hash identifier:          3cLR35l3/SzvtamepBOulgDF2yNeVJHAAjoILi5wQ6s=
Subject key identifier:   36:73:19:5E:80:EA:BC:55:8D:AA:6C:A4:CE:E9:1B:02:1D:28:FF:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584BB88D2A56A6FDD1973F5A0080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c34e4dc5-3a77-3f9a-8665-4969e482175f.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     852
IP address blocks:        173.211.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:2a:56:a6:fd:d1:97:3f:5a:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=451ebab5-e422-4590-a635-7be1dfe67cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:3c:1c:75:e2:d1:2b:ed:03:77:2b:92:2f:
                    35:98:95:24:e0:63:da:c5:e8:8d:82:95:85:ec:c8:
                    d8:2a:63:bd:43:77:36:47:cd:70:34:af:dd:e1:90:
                    dc:a7:d6:3e:50:46:75:94:35:a9:c7:dc:32:26:cb:
                    da:5f:ac:0d:21:79:9f:18:04:4b:1c:2b:a2:fd:38:
                    f6:fa:3d:2e:41:19:ad:03:1b:00:87:71:f9:be:ad:
                    2e:46:d7:a4:6e:51:a3:ba:2b:4f:6d:43:c5:61:ac:
                    3e:65:13:f8:20:87:bf:08:fc:a5:88:30:f9:ad:8d:
                    2b:f4:a6:cb:a8:aa:fb:fd:ba:ea:13:d2:dc:66:df:
                    72:eb:b5:e4:bc:f9:5c:3d:73:b0:72:b5:df:5f:a8:
                    61:db:44:45:45:63:c3:08:9e:cd:c9:17:4d:96:7d:
                    e9:63:00:12:ee:b5:d3:ee:a6:1c:c2:e6:29:25:9d:
                    0d:92:10:53:45:67:6d:7e:e1:5b:86:a1:4a:5b:fa:
                    d2:8e:75:0c:9c:34:e2:45:97:81:dd:2c:b6:88:5b:
                    e2:99:94:31:a9:ca:a9:73:1d:77:12:d4:59:86:ea:
                    b7:0e:e7:0e:de:7d:d2:a9:74:35:38:b0:17:4c:09:
                    26:ae:12:25:01:f1:f1:16:99:89:c0:14:90:d5:39:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:73:19:5E:80:EA:BC:55:8D:AA:6C:A4:CE:E9:1B:02:1D:28:FF:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c34e4dc5-3a77-3f9a-8665-4969e482175f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:07:6d:14:58:8a:3e:f6:03:8d:0a:6e:41:42:fa:53:0d:41:
         ac:a2:aa:1b:aa:2c:17:cb:c0:c1:03:5b:96:a6:16:b0:ca:9e:
         72:63:28:9d:37:39:ca:48:e8:8f:b4:2b:b6:6c:c6:f0:92:e6:
         f0:8f:34:57:a5:e6:d0:1c:2c:08:3f:2e:1c:18:b2:90:08:93:
         e2:29:3a:87:6b:3b:e4:17:4a:df:74:36:3b:c6:73:3f:f3:ad:
         6e:15:01:c1:d9:89:ff:5a:40:8e:72:fd:36:fc:e9:5f:b7:13:
         46:82:35:49:44:48:f4:29:57:15:c2:4a:16:01:ae:4a:88:c1:
         16:56:74:67:3a:52:6e:8f:b7:ca:0c:24:91:ff:07:6c:31:bf:
         15:c4:84:c3:f1:d2:2a:ad:5c:ad:c4:41:4c:d1:07:84:d7:f5:
         30:54:c1:1d:fd:2b:24:78:f6:fa:e6:87:c9:90:36:e5:18:ef:
         9d:57:4d:89:1c:3d:fd:23:af:08:e2:57:cc:ff:d5:33:7d:de:
         58:cd:47:a2:6c:1f:46:3f:02:bb:ad:2e:c5:44:cf:06:cf:26:
         03:9e:48:b4:af:64:49:e5:1e:e4:52:ff:75:0c:42:7e:6f:21:
         f3:b6:6f:97:f6:6e:b6:db:61:30:83:57:4c:40:be:4a:97:f7:
         a0:91:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:01:27 2025 by rpki-client