Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa364d71-f0cc-3e57-88c3-19010301bd7f.roa
File:                     aa364d71-f0cc-3e57-88c3-19010301bd7f.roa (raw, json)
Hash identifier:          1nnQ7LByTemIlUrFxVEBxVw9vohWrvayTia+47kUbfY=
Subject key identifier:   3F:27:4D:D7:0A:CE:11:92:E1:8E:EA:EF:85:CA:5C:15:6C:FB:B7:61
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A602DAFAF1CF76505DF7E7790
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa364d71-f0cc-3e57-88c3-19010301bd7f.roa
Signing time:             Tue 01 Jul 2025 16:30:25 +0000
ROA not before:           Tue 01 Jul 2025 16:30:25 +0000
ROA not after:            Mon 29 Sep 2025 16:30:25 +0000
asID:                     142111
IP address blocks:        173.211.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:60:2d:af:af:1c:f7:65:05:df:7e:77:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 16:30:25 2025 GMT
            Not After : Sep 29 16:30:25 2025 GMT
        Subject: CN=9d8d9ae6-fb28-48b1-8ce4-88ed32e2cefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:03:fe:ac:bf:aa:46:18:62:58:93:24:8d:
                    f8:f7:10:77:b5:2a:da:eb:fb:08:ae:1f:0c:08:26:
                    c2:a7:9f:d8:fb:97:33:e6:9a:b7:50:ef:e0:1a:71:
                    df:8c:55:b6:6d:aa:c6:af:24:eb:10:ed:18:a6:28:
                    89:2e:5c:d2:18:1e:ec:fa:58:96:49:05:e9:95:21:
                    d4:3c:d6:ac:81:f8:98:50:da:e4:5e:30:f3:49:39:
                    46:07:97:0c:9d:1f:12:79:f8:7a:3a:ea:c4:bd:43:
                    17:0f:23:9a:ad:55:41:fe:53:70:d4:2d:46:e7:66:
                    93:63:b4:f8:17:12:24:46:49:89:22:f0:be:9a:e8:
                    ea:04:fd:c3:d6:9c:fc:fe:77:8f:c1:26:bd:69:f5:
                    8a:4b:4f:1f:a1:60:74:e1:59:38:b3:19:0e:78:af:
                    99:1a:4a:f3:cf:d6:23:c2:d0:4a:ef:90:a3:d8:5f:
                    47:f6:b1:9e:16:87:f6:31:79:13:a3:a8:36:7c:df:
                    40:f0:59:46:82:fc:76:cf:95:a7:eb:36:ec:02:96:
                    43:31:69:f4:59:33:8b:8e:6e:a3:79:de:c9:fa:e4:
                    d3:38:c1:04:26:31:c8:d7:72:e7:ab:2e:ce:18:32:
                    f4:b0:11:6a:72:2b:92:52:9b:2e:02:35:eb:de:73:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:4D:D7:0A:CE:11:92:E1:8E:EA:EF:85:CA:5C:15:6C:FB:B7:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aa364d71-f0cc-3e57-88c3-19010301bd7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:09:b7:fa:43:08:4d:f8:e2:d9:6a:17:53:71:4e:be:39:a1:
         0b:46:35:11:47:bd:1d:d7:0a:79:a6:7b:f4:d6:81:fc:48:7c:
         eb:8a:ae:05:b3:7c:ce:fb:ac:9a:0b:0e:4c:99:32:62:ff:ba:
         0f:83:5a:a2:c1:1d:b8:78:0d:6f:1d:f8:06:14:56:4b:3e:d3:
         af:27:0c:ce:12:9a:26:97:b0:e6:cb:82:b1:8d:6e:a8:37:54:
         ca:72:07:67:6e:32:89:46:7c:1d:bc:b5:fb:56:2f:71:35:6f:
         1a:b4:78:89:15:53:f1:4b:ea:06:1d:7e:f5:65:69:97:fa:d3:
         43:3e:34:b6:b5:6b:95:57:63:bd:a5:cd:39:9d:d2:30:86:bc:
         7e:c3:76:63:1a:4d:86:12:a0:f9:39:69:05:1c:1e:00:bb:50:
         44:76:8b:fb:ee:59:6d:15:c8:82:49:ab:77:3f:85:47:84:ca:
         48:9d:ab:29:16:4b:11:d1:8f:d2:e6:67:e2:4e:45:53:c2:10:
         91:13:6d:34:93:ad:4d:1f:17:71:a3:b2:c1:b6:15:5a:94:eb:
         4b:29:12:b3:12:1d:7b:65:fe:d0:dd:cc:67:a5:0b:cb:c1:10:
         93:15:52:55:d7:58:22:6f:96:d7:c9:2f:dc:dc:fa:c9:8c:18:
         70:5a:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:51:08 2025 by rpki-client