Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7788201-fa09-3f52-b267-160bfa3af40a.roa
File:                     d7788201-fa09-3f52-b267-160bfa3af40a.roa (raw, json)
Hash identifier:          8MCWWirugVQuNei4rf2F9MWqbgQR8QFsIYLbukTmme4=
Subject key identifier:   B4:8A:9E:6F:DC:D1:DD:40:B1:17:65:12:57:99:2C:43:CD:1E:1C:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848F65BE3E3F293D9AED53A38E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7788201-fa09-3f52-b267-160bfa3af40a.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     29802
IP address blocks:        173.211.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e3:e3:f2:93:d9:ae:d5:3a:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=46cf9091-e24f-4fc5-bf3c-d2a4028213d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:e5:ab:58:ba:b7:86:8c:57:88:44:61:9f:
                    74:c6:44:a2:19:2a:90:4c:22:2b:72:11:d9:66:52:
                    a7:f6:1d:6b:c9:b2:50:5d:02:16:4b:d0:db:b3:a8:
                    4d:81:94:c3:a3:67:16:0f:02:be:75:1e:71:5f:ac:
                    61:a6:56:0a:43:53:b8:d0:b6:47:26:e7:0c:ec:4b:
                    d5:0d:8f:b2:1e:d6:36:14:69:6c:fd:e2:0d:d4:97:
                    5f:41:ab:80:e7:7b:44:b7:16:d1:cc:ae:ac:f6:3a:
                    ba:e0:ae:8b:50:67:ea:c9:62:94:b1:e7:db:ed:18:
                    02:20:62:f5:40:09:74:c0:e5:39:d8:6a:c1:20:86:
                    11:5b:ca:b0:16:7a:c2:75:5d:53:1b:6a:a2:43:7c:
                    ba:cc:54:e4:a1:24:45:c2:d8:9b:21:5b:79:0a:b3:
                    a1:35:37:cd:f3:3c:29:d2:7b:21:bd:8c:89:64:a0:
                    0a:d0:81:5c:13:1b:52:7e:5d:52:a9:e9:4a:e0:7e:
                    10:93:29:c5:9c:2e:33:2c:9a:51:12:d0:19:8b:a1:
                    2b:65:fd:d5:fb:9c:23:8b:c2:b6:3b:42:95:ce:6e:
                    a2:b9:9d:1a:39:02:d8:69:86:6e:3b:d1:96:1f:a4:
                    10:18:fa:e2:4a:cc:0f:4f:ad:f8:40:80:d3:a7:0e:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8A:9E:6F:DC:D1:DD:40:B1:17:65:12:57:99:2C:43:CD:1E:1C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7788201-fa09-3f52-b267-160bfa3af40a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ed:d9:cc:d7:32:7f:0e:18:87:ad:55:de:d8:09:7d:96:3d:
         1a:03:04:d8:aa:ac:78:78:ef:dd:87:f9:cf:a9:32:bf:72:66:
         07:f7:f5:ea:ff:dd:57:ed:84:ea:b2:34:e2:a0:20:ac:38:37:
         66:97:9e:7d:b5:da:98:c4:91:4e:92:4b:13:41:3e:a0:8c:59:
         38:ee:dc:9b:51:98:23:06:10:c0:6c:3a:22:8f:a5:d2:6d:e6:
         73:e9:d9:be:da:2d:93:3d:f1:e9:51:ed:45:4e:71:b7:1d:f8:
         8d:f0:80:46:94:08:7a:a1:9a:15:c9:5b:b5:91:43:5a:80:51:
         79:8c:1e:e1:b6:37:ec:b1:02:8e:ba:7f:71:76:12:f6:fe:c4:
         16:78:29:7d:15:f1:fd:d9:a3:94:30:f2:3f:b6:5d:10:bf:19:
         56:19:0c:0b:7c:ce:e0:f6:85:8c:62:34:02:04:e7:a0:d4:1d:
         27:66:b2:db:cf:1c:51:86:88:ae:9c:ed:75:b2:a6:6d:10:5d:
         1f:45:08:7e:ab:a3:7e:c7:bc:cf:0c:0c:57:bf:a1:69:c4:e4:
         74:3b:e9:a1:00:ff:b7:37:c9:ef:5e:df:14:18:15:23:ef:02:
         db:0e:96:8c:6a:19:85:9a:10:e3:a2:53:72:48:ad:6c:2a:8e:
         70:4f:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:02:02 2025 by rpki-client