Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa
File:                     b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa (raw, json)
Hash identifier:          fwohTozm5B55c1YcsRGzazmX/sx2zludgp3jYe2XPhw=
Subject key identifier:   D5:FC:31:23:4D:F6:CE:5A:AB:65:E0:9E:79:62:BB:9F:BD:5E:F0:3C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584B1806D5E9ABD26E3AEDC12C80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     25846
IP address blocks:        180.149.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d5:e9:ab:d2:6e:3a:ed:c1:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=d1dcfe6e-0e6d-4297-ac6f-822c08340975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:1e:f5:89:f2:aa:da:60:9b:e5:58:40:06:
                    de:27:14:57:d6:f6:24:08:fd:7c:6d:b7:3f:e2:14:
                    61:39:67:2b:ef:80:41:3b:fd:68:3b:09:02:a3:10:
                    be:2e:8f:1f:d6:cd:08:1f:f7:46:bd:2d:35:ae:a1:
                    ad:67:eb:e2:ee:15:9a:9f:02:b0:97:92:9c:59:c7:
                    73:a4:2c:33:e2:8d:bd:c8:72:e9:a7:65:99:4f:b1:
                    54:d5:6d:a0:c3:15:2f:a7:25:c9:5e:bc:c9:f0:9c:
                    52:40:c5:94:42:4a:8b:7f:a1:b8:b2:9d:94:ec:43:
                    96:99:2e:15:a0:e3:a0:0a:a4:c5:28:c0:7c:cd:e6:
                    b3:66:13:ff:93:c6:8c:f6:ff:f6:27:18:4b:ed:dc:
                    42:ed:a8:12:16:83:3e:ac:35:45:11:ce:bc:b5:20:
                    f2:f9:06:05:28:88:a0:d2:64:85:84:31:34:96:ab:
                    45:8a:5a:f6:64:7d:a7:42:76:c7:db:e7:c3:f0:fe:
                    74:36:3a:67:26:e8:39:3b:e0:7c:a6:4f:c4:e0:0d:
                    5b:d8:80:a0:e8:fc:dc:6c:76:41:e9:5b:20:15:40:
                    29:05:ab:fc:52:fd:b8:3f:ce:bd:86:4e:80:9b:01:
                    1d:b4:d8:ab:4d:e4:97:c1:3f:f9:6b:74:22:ac:23:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FC:31:23:4D:F6:CE:5A:AB:65:E0:9E:79:62:BB:9F:BD:5E:F0:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:da:00:44:4f:80:cc:bc:ab:4d:1c:bd:ec:65:75:3c:74:6e:
         12:8e:e1:89:9a:c7:2a:35:8a:d0:a0:ff:85:d3:90:55:ac:58:
         fc:1a:a9:99:31:d4:2a:0b:e5:7d:4b:56:b2:c2:d5:08:b9:21:
         ff:f0:1c:50:f4:63:df:9c:78:0d:82:53:05:98:2a:08:f8:7a:
         fa:47:8a:64:62:76:4e:cb:09:ff:64:6a:65:ef:fd:4f:3e:e4:
         cf:de:e8:6c:c3:63:6a:eb:91:38:42:66:9a:4b:86:b9:82:81:
         86:0a:0b:62:81:5e:1f:76:5a:31:46:08:0b:6d:41:cc:45:e0:
         80:60:5b:5b:7b:7e:64:14:cd:bf:f9:8a:6f:b2:bf:ab:f5:02:
         ae:06:8b:8c:a7:82:6a:f4:10:c5:f4:52:4c:90:45:69:ae:20:
         66:57:ed:99:88:7f:75:57:17:4c:21:0c:47:7a:7c:c9:cb:70:
         f1:1d:a4:ae:ed:d3:6c:4b:6e:bd:53:d6:a2:1e:68:00:f6:75:
         97:d9:34:76:1e:08:04:16:a5:a0:ff:1d:36:e0:13:b3:9c:8e:
         53:f5:35:c8:10:88:e6:b2:e8:2d:2d:47:0c:cb:76:90:0c:13:
         a3:84:a9:03:e4:4a:6e:19:1d:cc:ff:6e:4d:48:67:35:9f:74:
         be:14:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 12:48:10 2025 by rpki-client