Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
File:                     23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa (raw, json)
Hash identifier:          y9m+NrnRt6r/CHeiFCMTIlsXC6NwJ3iadnhcU7XUhMQ=
Subject key identifier:   AC:C2:6E:7E:CE:65:63:4C:F6:4D:26:80:51:7D:55:67:FD:79:8F:66
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849CBCF9E3F7BE0C99F3A0137F0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     5065
IP address blocks:        198.102.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9e:3f:7b:e0:c9:9f:3a:01:37:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=eb18ef25-0bf6-4a15-9ca6-737edab7ddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:74:5f:52:ba:f9:f4:79:48:03:d8:8d:3c:b9:
                    38:9b:9c:85:7e:a1:fb:59:1e:ef:05:e1:68:c9:66:
                    38:a2:4b:44:a1:4d:1e:86:08:f2:6c:92:bd:8b:36:
                    3c:0d:ef:20:2d:9e:60:db:5c:fb:77:bd:7b:48:31:
                    b0:91:c8:62:d8:9c:a1:00:b4:38:ef:d8:59:f2:d2:
                    16:9a:35:74:87:ee:74:21:b0:ad:fe:c8:6f:e4:e9:
                    65:2f:b1:26:65:8d:e4:46:35:cf:c0:e5:ed:0e:77:
                    60:da:6b:7a:d2:b5:03:6b:67:b5:52:9b:e1:69:0b:
                    47:c5:c3:ea:8d:1f:c8:de:0a:42:eb:8d:3b:08:95:
                    bc:4f:0f:04:fc:bf:a8:da:2c:5e:23:08:42:ec:df:
                    e5:6f:51:72:4a:ae:68:fa:fc:f8:85:4b:50:94:fc:
                    74:20:d1:c9:21:c0:b5:d9:76:41:62:2b:54:81:d0:
                    72:8c:d1:06:be:c4:d7:13:de:be:69:c8:9b:48:bf:
                    d0:6d:5e:5c:65:db:13:e4:8b:dd:ea:2a:72:3b:c0:
                    71:59:55:74:01:ea:6b:e4:ce:24:e2:f7:b0:71:25:
                    19:5a:57:18:31:f5:42:39:55:9b:dc:e5:fd:f2:c3:
                    cc:f9:36:ca:5d:65:e2:a4:1b:a1:6f:aa:4b:c6:a7:
                    3a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C2:6E:7E:CE:65:63:4C:F6:4D:26:80:51:7D:55:67:FD:79:8F:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/23dbb8f8-1c85-3727-bf87-9ab83b59a843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:47:0e:51:e0:23:50:4b:72:52:93:3e:e7:84:28:b6:b5:af:
         e5:5f:2c:6c:f1:bb:1d:3e:db:96:b1:9c:05:27:b6:ac:d5:8a:
         3a:4f:29:8a:7e:c7:b4:e0:8e:d1:64:a6:9e:00:1f:bd:4c:4e:
         01:2f:c1:86:87:24:fd:19:db:d4:e1:22:7d:3c:ca:fb:a3:85:
         3e:70:df:51:45:6d:63:f6:7d:00:dd:53:bd:ab:f0:7f:7f:8f:
         76:69:46:34:c9:7d:fb:01:0b:ca:29:01:e8:d6:cf:c8:32:73:
         ec:5c:03:b4:36:fc:45:be:74:4e:3c:cd:e6:3c:dd:17:f7:0b:
         2c:3f:a5:fb:0a:1b:ee:93:f4:8e:5a:4a:16:ee:c5:36:71:19:
         ab:b5:b7:20:5b:f9:9e:2c:44:61:d1:a1:b0:08:86:c4:49:3c:
         c3:fb:91:40:30:d1:78:d0:4e:d6:44:c2:32:7c:8b:a5:8e:8b:
         ae:42:69:a3:b5:74:01:45:1d:36:28:57:63:01:4f:cf:a4:e0:
         a7:24:96:65:35:7f:ea:fe:f8:76:ea:2b:00:2f:5b:fd:36:99:
         5c:4b:68:37:53:f6:1b:6b:a0:6f:1b:2c:30:50:46:dd:27:6c:
         03:21:bb:d1:46:ef:54:b9:7d:c4:d9:5d:18:e6:20:f6:9b:d7:
         96:f9:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:58 2025 by rpki-client