Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/15169547-89ef-3ff7-8deb-a993d4244e04.roa
File:                     15169547-89ef-3ff7-8deb-a993d4244e04.roa (raw, json)
Hash identifier:          vp9QGMceiBOlSxcjeLTFd6A3YGr8v2vqNOHm5mhWD7U=
Subject key identifier:   16:CC:22:4A:1C:22:61:3A:E8:62:0B:0B:DF:71:5F:4C:4B:AA:43:FF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A612B173999ACD129AF21E800
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/15169547-89ef-3ff7-8deb-a993d4244e04.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     212238
IP address blocks:        173.211.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:17:39:99:ac:d1:29:af:21:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=a3aa636c-a435-44b3-8c33-e6a83caa03b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:bc:49:a5:c0:5e:b4:67:de:4f:4f:fe:17:
                    4e:08:92:26:b1:01:07:71:2a:0a:b3:5a:d8:85:10:
                    2f:a0:d0:de:ef:1e:5b:c5:ab:82:ab:07:66:dd:ce:
                    57:1b:8f:29:52:24:22:92:7f:4f:f9:7e:9d:e5:ee:
                    e9:4c:79:45:19:13:6d:ba:09:f5:8a:00:ab:76:2c:
                    94:f8:b0:e5:05:af:29:dd:c3:e4:8d:03:ff:dd:e8:
                    7d:a4:d3:e0:03:28:a0:cd:fa:2b:59:f9:f3:45:e5:
                    a7:ba:d7:b5:73:bb:1d:ee:bc:d7:87:2f:cb:9b:03:
                    f5:01:48:65:cb:a7:64:e2:ba:ae:58:39:a7:a8:2a:
                    46:12:7a:e2:72:2a:31:cc:b1:38:36:e3:19:fa:c1:
                    56:11:c9:ff:19:cc:7e:ff:cb:01:ab:26:18:fd:17:
                    1e:9b:99:c2:69:26:5a:78:da:5c:3e:e4:fc:78:35:
                    71:14:76:6a:73:9c:6f:0d:96:83:4d:b7:6d:17:33:
                    82:c7:6e:b4:42:af:7c:16:c6:e3:04:0f:18:eb:d6:
                    0c:2c:38:a6:62:01:74:d6:d5:f4:31:da:6a:48:c4:
                    90:5b:18:82:17:d7:67:24:76:67:ee:f6:e6:0d:c3:
                    ba:b7:01:e4:19:b0:b0:a4:c3:7e:d0:37:7e:f0:9e:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:22:4A:1C:22:61:3A:E8:62:0B:0B:DF:71:5F:4C:4B:AA:43:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/15169547-89ef-3ff7-8deb-a993d4244e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bd:c0:cc:cb:c6:ab:bb:5b:da:e2:f8:84:a9:bb:a0:1d:7d:
         5b:6c:05:e9:b9:40:2d:ba:9b:e0:32:e6:44:bd:83:60:cc:f3:
         1c:cf:c3:60:ab:9e:f6:f0:21:05:c3:fd:40:29:7c:7f:37:e7:
         af:52:30:68:d8:a4:33:17:88:25:91:ac:e6:f0:e4:54:80:cb:
         c9:ae:fb:1d:1c:c6:8f:f4:48:9e:47:f5:18:c8:61:96:d2:34:
         e5:42:b2:14:a2:d2:27:89:3f:47:35:b0:33:a7:3f:76:36:23:
         d3:82:b2:e7:c8:65:4f:1a:13:ad:0b:4f:3a:26:67:13:19:6a:
         10:f4:83:3f:e1:f2:cb:94:51:3c:93:96:2f:3a:c0:b4:7e:00:
         7c:7a:34:6d:52:68:0e:83:b6:1b:96:37:43:3d:49:c0:88:07:
         22:a2:26:d9:7d:a5:4f:cd:d8:a4:e3:11:b6:ed:0b:cc:62:80:
         4e:a7:96:3e:a0:3e:ab:83:3f:ff:b6:fc:36:8c:c3:99:03:cf:
         2d:5b:10:47:99:69:fc:d8:dd:19:0f:75:00:a9:43:c7:8e:5f:
         43:2c:ec:22:e1:20:d5:f9:0b:f5:33:13:04:18:36:25:34:da:
         12:cb:96:76:c5:8d:7b:ab:ab:3a:59:4b:cc:38:5c:48:b4:a9:
         8e:16:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:26 2025 by rpki-client