Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7613302-3c4e-3244-a1ec-1723bae2ed93.roa
File:                     d7613302-3c4e-3244-a1ec-1723bae2ed93.roa (raw, json)
Hash identifier:          EH9n0f+ISSGTin0iXQtsr3q+EPE5heQj2/o7b3W9Feo=
Subject key identifier:   3B:C3:38:38:DB:74:4C:42:55:C0:C4:47:D3:2D:38:1D:79:3F:53:58
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A1A472AD97EF340A5E2F88A80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7613302-3c4e-3244-a1ec-1723bae2ed93.roa
Signing time:             Fri 06 Jun 2025 15:35:10 +0000
ROA not before:           Fri 06 Jun 2025 15:35:10 +0000
ROA not after:            Thu 04 Sep 2025 15:35:10 +0000
asID:                     29802
IP address blocks:        173.211.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1a:47:2a:d9:7e:f3:40:a5:e2:f8:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  6 15:35:10 2025 GMT
            Not After : Sep  4 15:35:10 2025 GMT
        Subject: CN=ab9910e6-b549-4b51-a211-5232aa94e981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:db:e2:87:3f:21:bf:e5:42:85:f2:31:22:6f:
                    d2:9a:be:c8:b2:fb:42:6c:ce:55:92:98:04:86:56:
                    ae:e8:12:9a:66:fa:3a:26:3b:74:92:2b:1d:c0:51:
                    dc:c5:ac:17:cc:55:f4:fb:49:0f:18:43:9d:8f:0e:
                    ca:d7:38:22:14:5c:d0:53:0c:2a:20:10:2b:45:96:
                    5a:ea:77:37:a6:2e:8b:b3:56:73:39:ce:8a:84:78:
                    6e:90:03:52:ce:73:79:10:b0:e5:41:20:28:b4:ca:
                    33:e2:07:85:5c:2d:c0:00:77:3f:5f:66:fb:6b:a1:
                    3e:c7:ee:fb:5c:d5:ee:6d:5c:cc:80:40:e9:88:25:
                    e5:82:a2:92:10:cb:c2:c1:42:0b:19:74:a1:06:9c:
                    79:8a:1f:1f:57:e9:c6:90:5e:2e:9b:e4:a1:79:48:
                    cd:4a:dc:4d:75:c0:3f:78:97:0d:b8:66:a7:ec:ba:
                    b4:1f:4d:6e:e6:56:51:fc:f0:6d:0e:de:8f:cc:e2:
                    a9:47:9e:ad:ce:16:4e:19:5a:77:ca:ac:77:3d:f9:
                    d9:e6:11:bc:66:9c:68:96:6d:e5:fd:50:41:72:d3:
                    68:2b:f2:ad:26:11:a2:f2:61:42:41:3e:a5:3e:f1:
                    98:30:c9:9a:fa:cb:60:f4:14:63:78:27:b6:7a:7b:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C3:38:38:DB:74:4C:42:55:C0:C4:47:D3:2D:38:1D:79:3F:53:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d7613302-3c4e-3244-a1ec-1723bae2ed93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:29:be:17:09:a2:84:3b:e4:a0:7e:69:d8:62:3c:fc:a3:45:
         0c:8a:ab:d4:42:4b:66:14:87:36:14:e4:45:52:be:28:07:3c:
         0c:40:b9:ea:a7:03:42:70:93:3d:e6:dd:d0:e2:b3:0d:a6:dc:
         cc:93:bb:02:fc:9b:93:1f:1b:01:d4:9c:f4:b0:5b:79:09:d7:
         f9:8d:dd:2c:0c:a6:d6:9a:be:58:f6:dc:71:f0:ec:88:d3:fc:
         b0:2e:a6:ad:df:d0:ea:a5:0b:b4:d5:d1:1c:d2:e9:e5:24:69:
         45:21:8b:f1:ad:fb:d1:67:8a:24:e3:ea:13:fa:b0:f6:ab:b0:
         84:7c:40:41:ca:cd:89:a7:5b:b4:73:d2:f7:6a:83:f7:22:b9:
         63:15:75:56:e4:cf:25:ce:3e:7f:16:f7:b3:b4:f0:5b:f9:08:
         7e:19:48:e2:61:f6:7b:de:55:63:88:00:b5:50:b0:b1:44:34:
         58:ef:bd:8d:bd:fb:f2:61:2d:93:dc:40:2e:af:51:c9:75:4e:
         f1:29:e4:d3:db:96:ba:08:39:8f:54:73:fa:46:28:43:a7:e0:
         4a:0f:a0:45:89:17:2f:28:b1:6e:bb:79:7e:e0:3d:9c:e2:a1:
         5f:7f:2f:c6:6f:4b:4e:02:e3:58:cd:1d:19:92:13:a8:5e:0b:
         9d:c3:89:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoaRyrZfvNApeL4ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDYwNjE1MzUxMFoXDTI1MDkwNDE1MzUxMFowLzEtMCsGA1UEAxMk
YWI5OTEwZTYtYjU0OS00YjUxLWEyMTEtNTIzMmFhOTRlOTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dvihz8hv+VChfIxIm/Smr7IsvtCbM5VkpgE
hlau6BKaZvo6Jjt0kisdwFHcxawXzFX0+0kPGEOdjw7K1zgiFFzQUwwqIBArRZZa
6nc3pi6Ls1ZzOc6KhHhukANSznN5ELDlQSAotMoz4geFXC3AAHc/X2b7a6E+x+77
XNXubVzMgEDpiCXlgqKSEMvCwUILGXShBpx5ih8fV+nGkF4um+SheUjNStxNdcA/
eJcNuGan7Lq0H01u5lZR/PBtDt6PzOKpR56tzhZOGVp3yqx3PfnZ5hG8Zpxolm3l
/VBBctNoK/KtJhGi8mFCQT6lPvGYMMma+stg9BRjeCe2enuXHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDvDODjbdExCVcDER9MtOB15P1NYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZDc2MTMzMDItM2M0ZS0z
MjQ0LWExZWMtMTcyM2JhZTJlZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANUpvhcJooQ75KB+adhiPPyjRQyKq9RCS2YUhzYU5EVSvigHPAxAueqn
A0Jwkz3m3dDisw2m3MyTuwL8m5MfGwHUnPSwW3kJ1/mN3SwMptaavlj23HHw7IjT
/LAupq3f0OqlC7TV0RzS6eUkaUUhi/Gt+9FniiTj6hP6sParsIR8QEHKzYmnW7Rz
0vdqg/ciuWMVdVbkzyXOPn8W97O08Fv5CH4ZSOJh9nveVWOIALVQsLFENFjvvY29
+/JhLZPcQC6vUcl1TvEp5NPblroIOY9Uc/pGKEOn4EoPoEWJFy8osW67eX7gPZzi
oV9/L8ZvS04C41jNHRmSE6heC53Dic8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:03:35 2025 by rpki-client