Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa
File:                     c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa (raw, json)
Hash identifier:          c/j935GlIOhjw8g/5XGI2iSJbzir4q3LnBDddOuHFik=
Subject key identifier:   50:71:F7:42:C3:6C:D1:36:86:1E:E7:F2:A3:57:3C:B6:76:1C:33:1B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A8C70D1B0A6AD818C36CB7400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     214054
IP address blocks:        216.107.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d1:b0:a6:ad:81:8c:36:cb:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=53de5541-82e4-4935-9251-77fbbd31fa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:4e:2c:7b:d2:86:f5:6e:1c:d5:c9:e7:f2:
                    42:82:7f:38:38:11:18:0b:57:1e:fe:18:13:b1:3b:
                    22:55:87:fb:01:8a:6a:07:1e:98:0e:fc:c0:83:63:
                    62:c9:93:e2:ed:2f:f9:fc:c6:a3:b4:5a:38:a9:2a:
                    a8:96:fa:0f:fb:b2:ca:08:0d:64:9e:ca:5a:58:62:
                    a9:b4:8e:26:2a:e1:8f:94:50:10:ae:b8:f3:bb:e2:
                    bc:0c:19:fd:25:48:97:c1:3c:10:ab:42:ee:c3:de:
                    d3:3a:6f:fc:44:fe:f1:dc:78:2c:06:14:44:43:88:
                    d9:0b:a0:62:1b:2b:d0:64:1c:34:34:05:ee:a9:b3:
                    a7:b2:d0:2f:93:70:c5:18:39:70:8c:22:23:75:e2:
                    3b:f6:10:07:a6:ed:da:95:b6:43:f4:fc:f0:60:0a:
                    8b:cf:8c:c9:56:45:2a:af:01:ce:ae:fa:ad:3a:e8:
                    5f:01:4e:bf:6a:16:2e:d0:8a:23:dd:7c:af:1d:2a:
                    a2:1b:d5:b0:18:b2:b5:02:c5:2b:53:f1:b0:f4:7e:
                    96:8a:18:c8:32:57:8b:0f:82:8e:8c:32:00:09:7b:
                    ce:b4:e4:0c:4d:84:0d:43:91:91:5a:c3:c1:6e:53:
                    51:94:e9:cc:34:d1:25:3a:64:b4:04:83:9c:08:0f:
                    64:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:71:F7:42:C3:6C:D1:36:86:1E:E7:F2:A3:57:3C:B6:76:1C:33:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:31:13:7e:0a:4a:47:55:a9:7b:14:d7:e3:30:78:f3:f3:03:
         ba:8b:39:3e:3a:60:bd:cb:c8:f7:5b:18:9c:1a:af:ff:1f:0a:
         dc:15:9c:ec:6b:c3:6a:b8:3c:19:5d:fe:4a:c9:1e:6e:dc:95:
         42:c4:35:65:3a:86:f3:ea:b6:00:ae:40:55:82:7e:53:ad:a0:
         f7:48:44:2d:ad:1e:f1:36:8e:d5:99:f3:fc:c0:51:a9:1b:d9:
         0d:93:db:81:6b:79:c2:7f:bd:c2:9b:22:b9:e9:7a:bf:fa:68:
         06:ae:2b:71:43:0d:cc:6a:c9:fe:63:66:6b:9c:79:46:76:37:
         43:04:72:45:64:f9:17:fa:ed:6f:d5:6a:74:63:3b:b9:0f:92:
         1e:4c:9f:14:e5:a3:20:a5:e3:03:5b:8d:0e:78:9d:cc:5a:de:
         53:c7:97:18:07:08:32:00:5b:4b:7a:dd:36:14:14:46:25:48:
         b0:8b:50:36:7d:48:04:4b:3d:2a:ed:99:98:42:fc:5f:44:c5:
         0f:65:24:a3:50:d5:d5:2f:a2:fa:bc:f9:9c:77:62:a4:70:f6:
         c0:75:f7:8c:cd:f5:a9:b3:b0:28:a2:9e:ff:f3:2c:7f:f4:83:
         b0:a6:cb:6e:dc:b3:a8:3c:7f:37:84:b6:b2:c9:1c:ab:5a:0c:
         e6:15:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:45:47 2025 by rpki-client