Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1eab1d2b-50e9-3913-be7b-fa520df95724.roa
File:                     1eab1d2b-50e9-3913-be7b-fa520df95724.roa (raw, json)
Hash identifier:          e3IkqrD86+2eJdbWRpr9brERTl9SgbIUVJNgkSpqAfw=
Subject key identifier:   BA:E4:9F:36:78:BB:CE:FE:90:A9:4A:0D:A6:C0:1A:CC:D2:78:E6:A1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858490CB16D9A60EEF73168FAED40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1eab1d2b-50e9-3913-be7b-fa520df95724.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     212238
IP address blocks:        173.46.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6d:9a:60:ee:f7:31:68:fa:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=6a4b9bf7-dcef-4e93-b7dd-c3b005dc3d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:34:40:27:87:30:15:8d:bd:19:11:4f:7b:59:
                    95:13:b3:dc:87:03:d5:0a:b6:91:79:af:e4:51:f5:
                    eb:dd:a6:34:85:53:59:5e:51:f9:c4:f6:f0:e0:15:
                    ee:74:77:29:34:78:cf:ee:15:0e:b8:9c:9f:c6:db:
                    7b:1e:fd:13:98:8c:45:c5:e3:7b:fe:85:16:f3:01:
                    fd:3d:97:fd:3d:a8:e4:a6:bc:a7:75:22:3b:57:a7:
                    78:7f:a3:68:30:88:6b:34:31:16:74:4c:f9:7e:8f:
                    65:14:f6:f8:95:ac:36:0e:99:ea:00:33:2c:81:15:
                    86:6d:78:bd:dc:e3:fc:e8:ff:e7:f5:70:29:a2:58:
                    11:9b:6b:12:d1:7c:28:a8:00:a8:18:a4:9a:2a:21:
                    a4:67:e0:11:1b:2c:cb:00:18:f0:3a:f0:f4:67:45:
                    69:fe:5c:2c:54:c8:63:82:e0:0f:39:6f:73:88:7e:
                    39:03:15:09:9a:21:7c:1f:41:18:93:c8:b5:4f:50:
                    e0:21:51:5f:7a:64:ea:83:6a:b1:12:df:da:3b:74:
                    8f:4f:52:2e:3f:4a:52:e8:3f:f2:48:fe:b7:12:29:
                    dc:b7:de:e1:34:3c:91:9c:95:1a:fb:e8:ad:57:39:
                    22:6c:12:33:7b:e1:95:e5:9a:1f:14:60:bc:f3:63:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E4:9F:36:78:BB:CE:FE:90:A9:4A:0D:A6:C0:1A:CC:D2:78:E6:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1eab1d2b-50e9-3913-be7b-fa520df95724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0b:10:a8:30:da:01:48:14:7f:d9:d9:2a:40:35:76:a8:7d:
         b1:d2:b3:b4:a4:c1:38:6f:8d:30:5d:9e:46:05:f6:1c:cb:aa:
         65:9b:d6:1c:f8:76:bd:11:a9:cb:68:dd:9a:7b:5b:e9:bd:9a:
         77:0e:60:90:e2:21:c7:4b:0c:de:32:52:e5:5e:01:5c:99:5f:
         e1:34:37:4b:df:af:6a:39:01:7d:6f:bd:fc:27:5c:74:1b:7c:
         8a:1e:0b:90:aa:c2:8e:67:b8:95:59:86:1f:be:66:7f:e2:54:
         1f:22:5d:cd:74:01:ac:d4:6b:a2:e0:eb:81:05:ed:69:6c:0e:
         c9:2c:d6:59:ae:3b:3c:a0:4d:28:ae:54:31:b1:11:b4:78:2f:
         bd:e2:3a:04:ea:06:7f:24:5f:fd:d3:a1:92:e8:8a:97:dc:be:
         67:6c:6a:0b:f6:8a:f7:62:c1:9c:6d:af:6a:09:c9:b0:4e:6a:
         31:ed:b5:fe:be:b7:4f:6c:49:8a:c1:4b:92:90:19:28:05:9a:
         c3:4c:d4:a6:6d:a7:5f:22:29:94:33:eb:18:73:14:81:a6:f8:
         56:36:f2:70:11:09:76:9f:e0:48:b9:d1:81:fd:0d:2d:a3:95:
         7a:e0:b3:66:d9:87:80:f0:8f:25:d1:59:61:bb:cb:e6:a0:c2:
         b9:5d:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:26 2025 by rpki-client