Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
File:                     47173b78-e3b2-3c1a-975a-e4299f961072.roa (raw, json)
Hash identifier:          8xKeaANpQt+OgMO78G/JOr9B5NuLamet+aS0oT+ZZvE=
Subject key identifier:   93:01:2D:AF:51:E8:38:A7:D7:68:88:6A:92:EC:E0:32:0C:5A:26:AF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AD7D125CAF30D1F7D3D859040
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     852
IP address blocks:        185.201.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:25:ca:f3:0d:1f:7d:3d:85:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=740abfbe-f1bc-4f57-aa0d-09048b855ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:26:31:ec:9b:03:22:d7:12:a7:fb:f3:70:b1:
                    1e:b4:2d:c6:6d:d0:53:a0:52:9d:e2:18:c4:00:8a:
                    f8:68:28:6d:5f:44:40:76:c6:fb:de:ee:67:ad:b5:
                    4b:90:d4:c2:2d:e8:35:43:db:04:1b:de:15:93:1d:
                    fd:b1:a1:3e:7c:e5:68:e3:49:6c:c9:39:c2:e5:1f:
                    6b:2a:66:2f:af:44:7c:cc:ea:40:d3:f1:16:ea:5a:
                    e3:c3:eb:d7:f5:1f:fb:95:03:39:54:79:c7:67:8a:
                    48:dc:36:2f:1e:14:5e:00:04:eb:8a:42:3f:e2:48:
                    4d:fd:4c:4a:c6:3b:26:a6:32:a0:47:00:e5:0e:01:
                    9d:14:8e:91:0d:3d:b0:0a:b6:e2:f0:3a:83:32:53:
                    2e:9a:89:a6:5d:c8:54:30:41:d5:72:d6:f1:12:75:
                    96:3d:fd:d2:15:3e:fa:56:45:37:af:f6:26:d8:06:
                    5e:77:ad:32:30:4b:04:22:f3:1d:9a:0b:d6:b3:04:
                    0b:09:10:4d:05:f4:86:44:fe:b3:ea:ba:be:cd:79:
                    e1:c6:77:c3:3a:b9:20:19:dd:59:1a:5c:d3:a3:07:
                    3f:48:7c:89:62:07:b0:a7:ae:b2:1d:cd:5b:fc:aa:
                    a6:0b:22:8d:77:e8:2e:39:ed:57:b7:47:83:bf:b5:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:01:2D:AF:51:E8:38:A7:D7:68:88:6A:92:EC:E0:32:0C:5A:26:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/47173b78-e3b2-3c1a-975a-e4299f961072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.201.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:8b:08:8f:67:c5:fb:cd:7e:e2:36:58:38:d6:a4:5d:e2:
         0d:95:ba:e3:81:6c:c6:73:5e:a1:de:47:40:cb:a3:c7:22:38:
         2f:7e:fd:97:59:e6:75:b3:c5:a2:da:b7:61:f3:8a:38:03:9f:
         d5:a0:c0:1a:a1:2e:ee:00:d5:80:35:0b:d4:a5:33:a2:4a:52:
         06:ec:3d:05:18:18:13:cb:fe:66:3b:01:84:fc:97:50:4a:b8:
         4e:ef:f5:7d:85:01:6f:b2:e0:bf:ca:ca:6e:42:e1:53:ca:f1:
         e9:09:97:18:b4:0f:34:14:07:98:2e:d2:de:64:fa:01:42:a0:
         5c:22:b6:b8:5f:b5:20:17:fc:4b:0c:9e:36:21:3e:1e:80:25:
         4a:8e:83:32:b0:39:ce:8d:8c:81:94:ff:3e:18:64:64:07:85:
         38:59:b3:e4:c3:4d:d7:de:6b:c7:31:ed:e3:f0:64:55:7a:2b:
         48:11:79:be:63:e7:81:52:6e:36:1a:4a:32:1f:1f:bf:44:7e:
         ee:c6:32:de:f6:9b:cd:01:3d:b2:5e:22:f7:ec:a7:76:c0:d1:
         4e:39:f7:b7:3a:c5:8f:d0:ba:c9:55:40:1d:f8:28:57:41:5f:
         3a:7e:71:86:df:c5:32:41:03:89:b6:82:73:71:76:fc:24:df:
         de:8e:88:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SXK8w0ffT2FkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
NzQwYWJmYmUtZjFiYy00ZjU3LWFhMGQtMDkwNDhiODU1ZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSYx7JsDItcSp/vzcLEetC3GbdBToFKd4hjE
AIr4aChtX0RAdsb73u5nrbVLkNTCLeg1Q9sEG94Vkx39saE+fOVo40lsyTnC5R9r
KmYvr0R8zOpA0/EW6lrjw+vX9R/7lQM5VHnHZ4pI3DYvHhReAATrikI/4khN/UxK
xjsmpjKgRwDlDgGdFI6RDT2wCrbi8DqDMlMumommXchUMEHVctbxEnWWPf3SFT76
VkU3r/Ym2AZed60yMEsEIvMdmgvWswQLCRBNBfSGRP6z6rq+zXnhxnfDOrkgGd1Z
GlzTowc/SHyJYgewp66yHc1b/KqmCyKNd+guOe1Xt0eDv7XcYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJMBLa9R6Din12iIapLs4DIMWiavMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNDcxNzNiNzgtZTNiMi0z
YzFhLTk3NWEtZTQyOTlmOTYxMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucnkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHJiwiPZ8X7zX7iNlg41qRd4g2VuuOBbMZzXqHeR0DLo8ciOC9+/ZdZ
5nWzxaLat2HzijgDn9WgwBqhLu4A1YA1C9SlM6JKUgbsPQUYGBPL/mY7AYT8l1BK
uE7v9X2FAW+y4L/Kym5C4VPK8ekJlxi0DzQUB5gu0t5k+gFCoFwitrhftSAX/EsM
njYhPh6AJUqOgzKwOc6NjIGU/z4YZGQHhThZs+TDTdfea8cx7ePwZFV6K0gReb5j
54FSbjYaSjIfH79Efu7GMt72m80BPbJeIvfsp3bA0U4597c6xY/QuslVQB34KFdB
Xzp+cYbfxTJBA4m2gnNxdvwk396OiCM=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:13 2025 by rpki-client