Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa
File:                     11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa (raw, json)
Hash identifier:          rHNBdaqZLCVKqQbR6qYzm5p+fTGYyWPhL1PBeUSlwO0=
Subject key identifier:   1B:A6:D9:A0:64:CF:08:33:A1:C0:E8:46:A4:09:C2:DF:E1:5A:B6:66
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849A1EF6AA6721E0F5771AB98D8
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     396356
IP address blocks:        198.102.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6a:a6:72:1e:0f:57:71:ab:98:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=cfc355f0-01e3-47c8-85cd-398466260ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:63:b2:ed:07:df:95:ea:57:4e:67:b2:f1:
                    94:da:42:fe:8c:41:d4:85:97:93:d0:dc:e5:98:63:
                    a7:ca:23:bb:d1:51:74:9a:47:b6:7e:e1:8f:72:4b:
                    ad:29:f4:5d:07:42:4f:a8:5f:fc:f4:49:a8:68:56:
                    13:3f:bc:49:a3:09:c1:7a:e9:a1:27:81:e2:cb:ce:
                    4c:7d:99:00:8a:b7:8a:85:f2:36:8a:48:22:e5:28:
                    4a:1d:6a:7c:3b:ce:30:47:4a:4a:f2:44:40:aa:a3:
                    3a:b5:fc:b1:ef:00:28:91:d1:45:07:7a:15:1c:36:
                    c3:8b:73:89:c5:d7:01:7c:60:01:e0:3e:65:54:81:
                    80:7c:56:eb:bb:14:ba:ab:8c:83:49:57:9b:6b:01:
                    40:a6:98:57:98:bf:5a:fe:9b:ce:3b:ec:eb:bd:81:
                    d9:eb:84:d1:e3:d7:eb:c3:6d:13:40:36:ed:69:0e:
                    66:44:09:5e:0f:12:f9:ba:28:ba:ea:ab:19:85:55:
                    13:59:5b:a2:6c:c5:53:ac:1b:42:14:03:ca:74:cc:
                    10:a8:3b:ba:a5:88:85:e8:1c:85:db:eb:75:35:01:
                    62:6a:36:6a:5a:61:f3:2e:44:16:fb:6d:9d:73:38:
                    19:a7:bc:c3:eb:c6:d5:01:96:8b:d8:7f:86:0a:4c:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A6:D9:A0:64:CF:08:33:A1:C0:E8:46:A4:09:C2:DF:E1:5A:B6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/11a2aeca-dee5-3f06-bca7-e5b02e6e9b55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:6f:63:da:2c:7a:5f:44:5e:f3:17:23:f7:72:54:2e:38:
         b7:a8:3b:ac:9e:71:04:7e:2f:0f:69:17:3f:f4:37:f5:e3:6c:
         cd:01:a4:91:c4:75:41:53:f3:f5:a4:46:f9:5c:a2:cb:af:98:
         b4:f7:83:fd:15:db:1b:1b:fa:78:dc:3c:e4:9c:a7:3c:b2:3a:
         40:0b:87:a1:83:3f:46:d5:1d:3b:ff:39:d8:4f:b1:cf:5f:23:
         0a:ae:d3:55:e3:7c:1f:46:9a:b8:69:cc:8e:9d:d6:61:48:e4:
         ae:7b:21:c1:65:be:d8:d8:66:a7:c9:53:de:bc:53:b5:a0:a8:
         55:78:5b:5e:16:a1:41:76:3c:81:ac:f8:4b:bb:eb:a5:20:ae:
         c2:72:1e:80:c4:75:db:e3:03:8d:b0:fa:70:36:60:1b:fd:1f:
         71:f4:1b:0e:bc:f6:78:a3:6e:de:d8:da:dd:30:43:0c:0c:22:
         b3:44:a2:72:3b:19:99:04:61:b2:9f:37:e2:79:73:13:64:d2:
         f9:d6:f3:91:76:e4:2d:68:64:a3:c5:2d:7c:1d:47:f9:a9:0b:
         2c:70:d9:73:37:38:52:a7:cc:9e:2d:d9:5e:cc:dc:f9:41:d0:
         91:a3:00:30:35:17:52:6a:03:a2:a2:2b:55:a8:58:b4:cc:7b:
         05:e9:d8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:15:37 2025 by rpki-client