Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1def5ee4-3a29-389b-8c50-3ab0c06c4173.roa
File:                     1def5ee4-3a29-389b-8c50-3ab0c06c4173.roa (raw, json)
Hash identifier:          EMrBUn3V1ydlthGBSMNVPmImnQhpjtBEFTY+BQfRn0E=
Subject key identifier:   DD:54:63:E9:01:6F:B9:31:15:03:F0:53:49:AE:16:D2:86:80:76:E8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849BC74A5668EC155EC7AE3B9C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1def5ee4-3a29-389b-8c50-3ab0c06c4173.roa
Signing time:             Sun 04 May 2025 01:00:47 +0000
ROA not before:           Sun 04 May 2025 01:00:47 +0000
ROA not after:            Sat 02 Aug 2025 01:00:47 +0000
asID:                     212238
IP address blocks:        45.73.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bc:74:a5:66:8e:c1:55:ec:7a:e3:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  4 01:00:47 2025 GMT
            Not After : Aug  2 01:00:47 2025 GMT
        Subject: CN=24da4a25-0214-423f-b72a-f8efa5cfcd97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:2e:2f:48:3d:99:6d:7b:7e:9c:61:06:d5:
                    5d:f7:ad:3d:1d:8b:99:22:26:09:e4:f7:6a:5f:17:
                    34:af:d7:cc:0f:85:07:0a:f0:ff:77:2f:b1:ba:ae:
                    1c:4c:8f:8c:b6:ca:da:c2:4a:25:c6:6e:29:44:47:
                    81:d7:9c:d2:34:fe:3c:a7:e4:8d:f2:40:01:b1:00:
                    31:b2:34:85:73:1a:0b:06:76:0f:c7:10:43:5c:92:
                    77:23:64:2c:7d:b3:0a:23:47:c2:57:c5:ca:ff:8e:
                    28:8d:b2:37:10:61:42:3b:91:ac:bb:de:b7:26:00:
                    f9:46:a1:10:09:48:6a:b1:af:9a:d3:b0:fb:e6:2a:
                    ff:1b:4a:95:2c:5e:4d:6a:bd:b5:98:78:bc:c3:10:
                    79:2c:05:1f:7b:36:f7:7c:8c:f1:e2:25:1b:30:b3:
                    ad:cb:0a:3a:16:ec:4e:47:a9:d0:ac:26:93:db:97:
                    71:67:3e:4e:18:c5:0e:04:a0:e5:3e:38:b5:b5:b4:
                    21:81:ba:e5:0b:36:bd:26:7a:f9:fa:a0:74:e4:2d:
                    36:36:90:d6:68:9c:3f:d6:e9:71:83:38:fd:cb:69:
                    8c:cb:86:e3:2f:d8:58:1b:16:60:17:2d:21:59:ca:
                    0f:57:f7:75:5f:98:d7:0f:88:39:51:f0:3b:53:71:
                    95:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:54:63:E9:01:6F:B9:31:15:03:F0:53:49:AE:16:D2:86:80:76:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1def5ee4-3a29-389b-8c50-3ab0c06c4173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.73.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:dc:97:71:40:f1:a7:d9:69:c3:6d:2e:37:6c:6e:eb:23:
         32:02:a8:26:6e:3e:58:88:59:46:78:d6:69:da:65:86:ec:64:
         0b:ca:15:c3:3d:b7:39:d8:d1:05:48:81:7d:06:c8:90:82:e5:
         cf:5c:e1:ec:85:fe:b4:f8:88:b9:82:21:ef:ea:2e:c4:f7:20:
         8a:57:d7:87:c5:4f:23:f6:ee:d8:99:57:c3:33:78:02:a2:a0:
         15:6f:10:6a:ed:ee:83:8a:2e:ec:25:fd:c2:06:c0:64:bf:1e:
         e2:7e:2d:92:e6:c4:7a:38:05:0f:56:9f:49:6c:dc:72:49:0e:
         f4:c6:1e:97:98:e8:28:a8:37:cb:98:0d:18:7f:9d:b2:c1:a4:
         f0:93:9c:29:ab:30:10:6e:df:e7:a1:c1:5b:32:98:81:cc:99:
         b5:4b:9a:a7:7a:e4:8f:0a:07:00:ba:d9:3d:de:6d:48:bc:7c:
         af:f3:30:e7:85:68:31:a1:48:66:49:91:29:00:2a:eb:b7:1b:
         d3:8e:6e:0b:b4:ed:c6:1b:bd:08:19:55:2e:64:1c:49:ce:8a:
         eb:d0:6f:c2:e3:27:09:4f:07:ab:43:2f:58:20:a8:d2:85:47:
         36:b0:7d:96:44:3b:aa:3c:2c:47:5d:2a:19:17:58:b5:e8:9b:
         4c:e5:8a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:12:29 2025 by rpki-client