Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f2a1848d-acb8-3e88-ab85-d84982706e15.roa
File:                     f2a1848d-acb8-3e88-ab85-d84982706e15.roa (raw, json)
Hash identifier:          it7VhxXzeR3yk4LXpC1M3PY6CIQTwOHDfLdgbvOanTc=
Subject key identifier:   89:B6:B6:CC:5D:7A:C2:45:3B:1E:7C:C4:1B:BB:D6:17:73:62:36:8B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AA6F62C0B959A3522FF386480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f2a1848d-acb8-3e88-ab85-d84982706e15.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     214054
IP address blocks:        69.171.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:2c:0b:95:9a:35:22:ff:38:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=cb120a1e-1599-4e65-9174-401065a6650b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:96:e9:ad:76:8e:85:8b:e8:31:70:6f:b9:
                    a4:21:34:a0:3e:01:ae:e9:cb:5e:82:43:2c:5c:2a:
                    92:99:a3:60:17:b3:59:d4:7f:64:ff:1d:d1:26:f8:
                    da:a1:74:c7:95:b1:dc:79:f8:8c:17:84:3b:35:f4:
                    1e:d2:bc:af:d5:aa:1f:fe:a4:78:04:e0:7a:15:67:
                    c0:1f:6b:e4:1d:2c:4c:66:4e:5e:91:44:ba:a4:30:
                    65:8f:85:8e:3f:4f:9b:15:a1:8a:f7:3b:de:4a:dd:
                    c4:17:94:cd:04:17:16:15:f6:15:b8:c9:c6:68:93:
                    7c:b9:e3:84:92:a2:3d:e3:b7:b5:03:c3:aa:c6:e9:
                    ef:b9:1c:96:9d:c9:69:a2:86:79:00:bb:64:d4:ab:
                    e5:6a:35:87:4f:4a:43:45:cf:7b:59:95:72:8a:c4:
                    0c:29:e3:29:69:d1:f0:5b:3f:7a:95:a1:9a:81:92:
                    5c:2b:76:e2:55:bc:1a:30:17:f1:6e:5e:c0:4a:ab:
                    a8:b3:24:39:e3:25:bf:c6:5b:9f:b3:03:72:6b:a0:
                    28:51:69:9d:39:06:76:60:2f:30:35:82:40:8c:72:
                    11:c1:86:78:23:75:46:3b:37:0e:30:4b:22:53:e5:
                    b8:8e:f6:83:ff:74:f3:5b:9b:63:dd:58:db:81:2f:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B6:B6:CC:5D:7A:C2:45:3B:1E:7C:C4:1B:BB:D6:17:73:62:36:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f2a1848d-acb8-3e88-ab85-d84982706e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.171.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:1e:0b:d6:a2:31:a6:ae:05:40:b5:68:1e:79:2c:5b:9d:76:
         2a:3a:2e:b7:98:d9:f6:c8:ad:12:07:a9:d6:a9:51:99:64:b6:
         ed:a4:af:91:e9:07:3b:13:4a:d4:14:9f:fb:78:b6:72:f2:5a:
         7f:9b:64:0e:61:03:b1:0d:f5:cc:63:e2:16:b2:81:2a:8d:2f:
         76:5f:29:47:2d:1c:36:47:c7:fd:60:80:fe:d7:e4:5c:1c:c4:
         b7:29:ef:14:34:99:38:47:2f:c1:d9:5f:54:16:06:05:ef:cd:
         77:ce:f0:fe:27:f9:43:f0:f9:d3:6b:04:52:27:2c:31:35:7b:
         9e:68:f5:58:2d:57:1b:7c:65:3f:e1:d0:aa:2f:ad:2b:79:f3:
         6f:b2:d3:75:c3:a9:57:63:e1:7c:67:51:c2:6d:85:b2:37:d0:
         08:f3:ac:6b:cd:b8:17:e2:db:78:09:2a:93:9f:70:ee:81:09:
         c7:b2:a7:bc:b7:9a:3d:8f:72:80:97:b2:cf:dc:cf:c2:78:91:
         59:e4:27:66:1f:62:39:83:e5:14:f6:1f:8d:c4:fc:fa:95:a1:
         1c:11:a5:59:13:68:6b:be:a7:b5:87:23:56:01:0b:34:15:3f:
         2a:ee:bb:05:0c:12:74:9e:c5:0b:c7:0f:e3:18:6b:f9:45:d9:
         09:52:ad:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:50:06 2025 by rpki-client