Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa
File:                     bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa (raw, json)
Hash identifier:          SjRTYd2aek4K/zNkV+9EcIEEwcGcarzkXrznECzLst8=
Subject key identifier:   7C:C7:28:C2:CE:43:D0:14:CC:E0:82:23:60:27:2C:57:E7:2B:5F:F9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858491ED6E8FBC474E30C260CDAA0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     21769
IP address blocks:        45.252.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e8:fb:c4:74:e3:0c:26:0c:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=d98be76e-eb0a-48d6-9446-155f15652bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a8:a0:27:16:1b:81:03:60:b8:eb:53:4f:33:
                    7b:dc:f7:9b:a6:b1:00:b4:26:7c:ea:6a:b5:a3:8d:
                    b5:f8:0b:46:23:1b:d0:13:31:7a:e3:cd:b0:af:e0:
                    7c:cd:04:f9:8d:8d:df:4e:61:22:85:fd:bc:e6:87:
                    ae:8b:c0:5a:cb:89:a9:0c:5a:9d:28:4c:ab:96:a9:
                    d5:17:8c:b5:b5:6d:ec:06:b3:24:94:0f:b5:0f:ee:
                    19:24:bb:6a:89:a6:5e:e3:86:30:7c:cd:f5:d3:88:
                    a5:37:68:97:14:4e:8e:ad:13:ac:a7:37:b7:87:21:
                    22:19:63:42:5d:20:58:c0:8d:99:d2:57:0d:d7:bb:
                    36:52:68:af:83:2e:61:67:e9:40:3b:bf:dd:3d:4e:
                    95:9c:c2:ba:af:a9:02:cb:8b:13:13:ed:54:12:cb:
                    d3:5e:3d:51:50:e1:bb:df:09:1f:fc:c3:dc:34:ea:
                    72:63:d7:65:9b:de:da:74:cc:2b:15:95:ff:8c:a1:
                    0f:9d:96:da:5d:cf:d1:45:f0:4f:f1:a4:ac:4c:95:
                    e8:85:bb:95:3f:f9:4f:27:7e:21:d3:b3:b2:4d:ee:
                    a5:6a:4c:98:68:ab:ba:35:4a:7d:a1:1d:21:19:2a:
                    c0:b3:eb:9a:14:f0:00:cd:20:14:dc:f2:9b:98:7b:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C7:28:C2:CE:43:D0:14:CC:E0:82:23:60:27:2C:57:E7:2B:5F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bba4bd68-d315-30c3-8077-c64e86fcb4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.252.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:40:11:2b:0c:82:26:e7:d2:a8:38:a5:d4:79:12:ef:ec:2f:
         35:bd:83:12:e1:ad:90:67:25:62:f4:03:6b:c5:fb:9e:91:e6:
         a8:dd:b4:a4:bc:85:41:00:a6:5c:5d:c4:37:ce:e7:f3:c8:81:
         f3:40:bd:9f:01:bf:49:5a:65:47:be:93:42:64:52:b0:22:2a:
         8f:be:c4:cd:e6:93:ba:c7:e4:09:de:c0:7d:ed:e9:1e:22:e9:
         90:90:24:ad:92:2a:61:19:ce:23:52:c7:27:1a:86:16:55:49:
         f3:91:96:d7:af:e8:8d:3e:42:6a:93:26:9f:c7:29:1e:b7:40:
         bf:9b:d3:ca:3b:e7:bf:5d:3b:74:93:7d:85:98:89:a7:81:97:
         ff:48:5b:14:ec:a2:d3:e9:56:b3:fd:64:a5:46:b4:a4:09:a5:
         35:48:57:cb:ae:c2:c3:c3:aa:10:6b:5c:90:50:b8:0e:0b:1d:
         a0:00:83:6a:5e:c8:35:19:1e:91:74:53:b1:ba:5f:e4:b8:06:
         23:f2:1f:d7:a6:7d:7b:ba:1e:06:95:7b:ce:18:d2:0e:83:6b:
         7e:3e:b7:47:d7:5e:ae:9c:c3:1c:9b:ca:24:20:92:31:8d:c6:
         89:d7:4f:6d:d3:ab:e7:f4:e3:0e:8d:ed:d6:93:53:80:f6:18:
         ee:58:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:48:10 2025 by rpki-client