Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa
File:                     e3185cc6-59be-3e0e-b876-18f70e4af35c.roa (raw, json)
Hash identifier:          8WpUq6kXMKT+04qkpBangCcDb8upSrvy8jGO5MqEsvs=
Subject key identifier:   AC:51:8D:AF:69:73:44:DC:B1:17:1F:28:00:B3:07:3D:CC:EE:AE:72
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849151152FDF6FE5EE60F570500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     45671
IP address blocks:        173.211.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:52:fd:f6:fe:5e:e6:0f:57:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=d1a27b3c-f02f-4274-ad23-a6f124d5a171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:1e:16:3b:6b:28:44:35:be:9a:66:cf:27:
                    15:ed:3f:d6:1d:4e:76:48:81:67:27:80:32:7b:cc:
                    cd:61:90:0f:61:3a:c2:da:10:36:c7:ea:d2:a9:c8:
                    e0:51:57:84:60:e6:ae:e5:e7:69:fa:fa:eb:c9:8d:
                    73:36:c7:a6:f9:a6:fa:8c:e0:e2:16:8f:15:29:94:
                    7e:60:57:c6:38:1a:7d:2a:3d:17:a7:97:c3:37:29:
                    6a:12:d9:43:52:db:63:f8:fc:49:18:c4:02:60:68:
                    d5:62:50:37:49:14:55:f1:66:c8:94:30:fd:97:f3:
                    1c:8f:a7:98:db:43:78:cc:3f:dc:a7:74:1a:e4:5a:
                    34:d5:b9:14:34:2f:26:6a:fc:71:ae:f8:80:53:70:
                    94:a5:ed:3a:24:dc:bc:0b:05:ac:9d:cc:d6:83:a0:
                    88:92:da:09:57:c2:e0:2a:c2:4e:84:91:ba:83:2a:
                    87:f6:33:08:b6:49:5c:be:22:f0:9e:b8:50:6c:dd:
                    69:1f:0e:7d:74:06:8b:37:e7:de:62:f4:df:69:cb:
                    be:ac:93:02:c9:14:4d:42:49:ad:4e:70:3a:97:83:
                    1f:b6:64:31:5b:f8:ac:f9:6d:45:60:b8:6a:3a:f8:
                    fc:79:92:63:60:cc:13:41:60:68:97:4b:51:69:f7:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:51:8D:AF:69:73:44:DC:B1:17:1F:28:00:B3:07:3D:CC:EE:AE:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3185cc6-59be-3e0e-b876-18f70e4af35c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:53:2a:71:d3:84:f1:4e:52:50:3d:2c:fa:b5:2d:27:e2:c1:
         86:c0:56:dc:46:48:ed:fb:a1:3b:92:cd:76:d9:5f:36:e2:80:
         3d:95:7b:3c:6e:41:c6:a1:95:1a:f6:10:02:3b:1e:00:84:c9:
         90:53:4d:60:9d:0c:c4:5c:d7:ac:63:7a:2a:ab:b6:cf:15:7b:
         22:80:ba:c5:1b:91:c7:57:85:c8:16:76:7b:86:3c:30:e8:b5:
         07:00:91:32:f6:2c:2e:96:bb:ef:c0:03:6b:9c:d5:8f:19:6c:
         99:15:97:ce:08:c6:95:5f:88:72:56:a4:a0:1c:dc:0d:8e:e2:
         21:f1:6d:46:3b:af:02:25:2d:eb:ac:54:50:0b:9f:6d:d4:87:
         53:50:9a:8d:15:54:ad:bc:44:57:70:7e:ee:7d:50:f1:6b:02:
         95:10:bc:9e:f3:76:84:ad:96:b4:dc:da:3d:ad:9f:9f:b4:97:
         64:6a:06:92:bc:79:59:ab:64:b7:25:a7:dd:7a:d3:a0:e7:be:
         af:83:e6:5f:2f:f6:60:d5:a8:5e:c5:4d:89:61:bc:53:37:ba:
         56:6e:ab:37:ca:f1:13:ce:65:1a:54:c0:71:10:be:c2:65:17:
         58:31:94:90:38:e4:46:bd:3b:26:80:a4:36:63:65:eb:01:3d:
         a9:63:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:41 2025 by rpki-client