Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
File:                     47173b78-e3b2-3c1a-975a-e4299f961072.roa (raw, json)
Hash identifier:          LVdkWA3t1pyeToRRdafsRAgPC6brCJXwzge4dJ2H+xg=
Subject key identifier:   55:0B:37:D7:E1:40:BC:46:9B:A1:79:43:BF:B0:4A:EA:FD:1B:FE:95
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849F715244339B4EF09BD8BD530
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     852
IP address blocks:        185.201.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:24:43:39:b4:ef:09:bd:8b:d5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=6794cd22-b8b2-46d7-88a0-c5b9c5171cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:59:09:73:c2:bf:78:cd:33:ed:db:d8:ec:43:
                    fd:ed:87:4d:a0:31:d6:42:f0:19:7b:ef:3d:55:58:
                    01:ed:0d:0b:a1:b0:8c:3a:24:0c:bc:c4:a0:93:37:
                    8f:91:0c:a2:64:37:97:f5:4d:30:d1:2e:e2:97:29:
                    d3:76:97:a9:92:07:e6:bf:1d:61:39:b8:b1:f7:e2:
                    f1:41:a1:82:c6:58:ec:e9:60:b8:6d:61:03:e7:64:
                    af:d5:d9:53:2c:6f:2e:9f:96:9a:62:ca:00:ac:ff:
                    57:c4:a9:2a:5a:ba:61:34:41:93:4e:d1:fa:66:58:
                    5d:8c:f7:fd:7c:05:fc:14:71:d8:2d:ee:02:59:a7:
                    30:1d:b9:d2:d5:3e:97:fb:1d:45:c4:70:48:e8:81:
                    61:44:49:ee:cb:5e:d7:b5:7e:a6:33:e0:b8:0e:96:
                    b7:ee:fe:e5:dc:f5:d9:f7:2f:bf:c5:34:4d:6a:35:
                    29:2b:d1:58:85:ce:94:dd:d5:25:8b:b4:8e:84:14:
                    11:5b:5a:a9:66:ee:30:66:eb:20:c3:55:f8:53:ac:
                    be:ef:f6:d0:12:0e:7a:b1:e0:6e:21:a9:d5:55:b8:
                    4c:f4:f1:06:60:37:3d:fe:36:34:16:12:a4:38:54:
                    b0:28:f0:6f:18:cd:5b:f0:c3:61:3b:86:f7:9f:ca:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:37:D7:E1:40:BC:46:9B:A1:79:43:BF:B0:4A:EA:FD:1B:FE:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:00:72:ef:22:0f:84:98:f4:99:10:17:76:8e:92:66:50:49:
         df:24:64:37:74:04:90:d8:79:63:c1:0f:46:f8:65:99:ee:f4:
         4b:44:56:da:a5:45:db:be:12:59:16:59:b9:69:a9:f7:bd:7d:
         b3:72:a3:03:ee:2a:dc:89:c3:0c:84:0c:83:b1:50:42:9c:2c:
         58:67:12:4f:a9:2e:b7:29:aa:ff:d7:95:9c:ff:cc:9a:16:11:
         b9:a5:c4:be:a8:19:4a:d6:11:97:95:51:5c:f4:20:24:9d:8f:
         ab:17:85:e8:13:bc:bb:d7:80:f8:34:8c:a6:78:f2:a5:c3:da:
         d0:7e:89:23:6e:f7:18:fa:7e:67:2f:cc:32:21:c8:d1:37:3d:
         01:0c:38:63:eb:6d:8f:54:b3:91:c5:6d:37:af:43:80:8d:49:
         4d:f7:5b:d9:e5:dc:5c:5e:4b:fb:da:82:f0:be:2a:73:59:50:
         aa:02:23:19:3b:19:23:11:fd:d6:8c:a4:50:6e:79:a9:1c:c3:
         ce:69:ef:ca:bd:d0:c5:2d:96:d7:2e:27:59:cb:84:2d:da:ac:
         69:8a:3d:a1:f1:b3:f4:7f:0e:4c:a1:e4:f4:39:1a:04:d0:9a:
         73:95:eb:d3:47:a9:16:06:e7:e8:af:8f:36:9e:36:83:e2:b5:
         34:06:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:14 2025 by rpki-client