Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8b0be6d9-aafe-3016-aa46-5bb96b548815.roa
File:                     8b0be6d9-aafe-3016-aa46-5bb96b548815.roa (raw, json)
Hash identifier:          hTKCJ802tC/17aG9+bbOlXfUR/fL0OPcOZ4cBJ9cV5c=
Subject key identifier:   06:61:46:2C:C5:85:CE:C6:22:B9:27:4C:46:0C:FD:45:82:01:C5:14
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AB4EF05C91071976D6F7FAA80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8b0be6d9-aafe-3016-aa46-5bb96b548815.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     395839
IP address blocks:        173.211.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:05:c9:10:71:97:6d:6f:7f:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=7f4a0852-0bb0-4940-abb4-28dd7c7c1c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:ff:eb:04:52:2b:f2:5a:f8:9e:bc:4b:7e:
                    1b:1e:02:9a:52:00:10:ff:ac:0f:ae:5b:20:e4:12:
                    2d:36:6c:eb:ce:de:8c:06:09:16:4a:0f:8e:2c:c4:
                    7a:32:b2:02:75:de:ab:2e:a8:9f:e2:a6:c0:05:31:
                    c8:eb:4c:5a:d4:80:12:05:c6:08:85:f6:0a:55:9c:
                    a4:9a:0b:c0:c2:e0:53:56:86:a6:03:ed:4d:a7:83:
                    f4:0f:c1:7a:d8:61:db:b4:30:40:c2:54:c5:c9:8b:
                    f0:cc:8d:47:a5:3d:7c:ef:13:1b:d7:54:88:db:36:
                    fd:fe:16:d5:3b:d8:61:c7:87:57:ef:16:48:1a:b6:
                    66:a2:7a:fa:85:d3:7a:4b:c0:85:62:a6:38:9b:12:
                    8e:07:ae:19:33:bc:69:ff:31:2e:a5:88:21:e5:0a:
                    52:17:b8:41:d8:06:e9:7f:11:2c:7d:25:8c:0e:72:
                    2d:ca:29:18:3e:1f:10:54:9e:1d:fd:7b:a6:de:a8:
                    3a:fe:ee:07:5c:d7:0d:f4:0f:86:ff:03:7e:6d:16:
                    66:cf:a4:d3:2b:8d:5e:7f:61:da:37:07:fc:9a:f3:
                    87:bf:54:e2:20:61:8e:81:2c:44:21:2e:76:da:55:
                    67:79:96:3d:2b:f2:64:57:63:7c:f5:de:05:e1:4a:
                    9a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:46:2C:C5:85:CE:C6:22:B9:27:4C:46:0C:FD:45:82:01:C5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8b0be6d9-aafe-3016-aa46-5bb96b548815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:7b:74:e4:6a:02:4c:76:51:6b:66:75:59:f3:3b:14:f5:98:
         85:14:46:84:b9:05:f1:03:89:1a:ec:2c:80:19:54:f3:7a:c3:
         ba:93:67:d6:26:6d:f5:d3:22:4d:45:bd:17:c5:5b:49:1a:91:
         04:73:78:42:c2:87:e9:98:d1:c7:4c:7c:ea:8a:37:f7:2e:f6:
         32:52:a6:a4:d7:de:79:93:da:a3:f2:57:33:75:06:f8:c2:82:
         09:55:0f:4c:86:2d:e5:b1:a9:19:f3:e5:2f:bf:5b:d4:0f:07:
         08:b6:a8:15:65:9b:c1:fa:d7:ab:86:b9:a8:36:e7:a7:dd:25:
         12:74:c5:3f:96:fe:4c:ab:07:c1:4b:81:8a:46:65:53:c2:fb:
         fd:23:fa:08:49:d1:de:85:f9:c5:43:7d:b3:06:6a:79:ea:77:
         4e:cf:d8:a3:c7:bb:38:17:e2:43:99:22:83:8d:66:03:95:8e:
         c1:fd:9a:a7:6a:38:03:2e:42:f9:80:77:2b:9e:3a:7d:1a:58:
         82:d3:11:14:82:c9:01:62:ae:51:3d:c9:6b:fc:4f:18:7d:9b:
         30:64:74:27:40:fd:d9:50:26:7e:ec:a2:83:6e:c3:9f:85:92:
         9a:6c:bd:32:67:fb:a5:b9:9f:00:17:2f:ac:28:30:47:2f:ec:
         4a:0a:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:55:33 2025 by rpki-client