Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa
File:                     8a80ef84-72eb-37af-86ea-3e37d2bac157.roa (raw, json)
Hash identifier:          oWActRKx3gV1LFhVC4BdW7tAQIjteZQVQ0gEyNdATNk=
Subject key identifier:   6C:20:EC:98:CD:DF:CF:35:64:23:11:8E:AB:6F:1F:41:BC:89:1F:64
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A5765D286FFA9E8F88A5F9240
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     834
IP address blocks:        43.255.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:d2:86:ff:a9:e8:f8:8a:5f:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=ce16cd7c-8bf1-4ecc-a220-e088a5b8aeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:96:fd:80:3a:85:f8:a7:5d:9c:7c:a1:f0:3d:
                    66:b6:57:a3:c4:5d:1d:7c:b6:4b:66:b8:2c:71:57:
                    f0:62:68:57:a5:4c:a6:78:61:3a:53:40:86:8b:86:
                    e7:fb:37:b1:d5:e3:d2:f7:d5:b5:1e:0d:bf:49:ce:
                    50:17:e1:c6:f7:9f:21:e4:86:57:68:dc:b6:11:d3:
                    76:9f:3b:3e:33:1a:5c:f3:b1:73:67:bb:31:bc:42:
                    42:2f:46:1b:a2:65:04:38:c9:2c:ad:bd:85:b4:a8:
                    3e:19:e8:d5:01:16:86:03:40:42:c6:71:ed:6a:23:
                    82:c6:84:67:0e:1d:b7:88:e5:4d:02:62:15:f8:a3:
                    43:a9:6d:dc:5f:6b:b9:db:54:43:a2:44:c4:e3:46:
                    68:a3:07:3a:93:38:e0:02:0c:d2:c6:88:e2:88:09:
                    30:1f:86:c3:51:9a:f8:f8:fa:95:b0:29:35:fd:ea:
                    78:35:7a:b4:da:b2:44:96:6a:05:25:1f:20:67:45:
                    0e:6d:ea:cf:30:1f:6c:fb:6d:48:96:43:1f:d0:04:
                    b3:b9:2e:1b:c9:fb:5b:ca:02:9a:ed:17:79:c5:14:
                    f4:a7:1d:58:e6:c4:d5:f6:fc:1a:6b:a4:5e:9d:9a:
                    61:6a:f8:35:22:2e:ac:ab:98:3d:05:97:e2:38:6d:
                    da:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:EC:98:CD:DF:CF:35:64:23:11:8E:AB:6F:1F:41:BC:89:1F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8a80ef84-72eb-37af-86ea-3e37d2bac157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:11:bf:1d:11:25:f2:13:a2:c4:61:64:56:8a:95:a4:f1:c5:
         90:c4:3b:9f:c7:0a:53:d6:6a:36:73:e6:5f:9e:d1:da:77:80:
         45:b3:a4:58:5c:e9:bb:65:0a:51:b8:82:5f:5b:20:7b:68:ac:
         8b:bc:e7:b1:e4:47:20:7f:76:f2:1e:8b:d8:d2:16:8b:8b:15:
         36:6f:a2:2d:4f:46:33:f0:7b:7f:15:c9:da:4f:76:9e:c5:90:
         9c:55:2d:17:6e:bd:1b:6c:a8:1a:be:58:ee:4f:c2:12:3a:5b:
         5d:ca:73:70:b7:6f:12:26:91:48:d3:83:dc:47:c5:e9:22:96:
         1d:1f:ee:13:65:1c:af:14:85:00:3c:c4:7d:de:69:a7:6c:aa:
         3e:ce:f4:a7:54:ef:a5:c3:01:11:e3:be:ac:99:b6:dc:c4:52:
         18:02:c8:cd:ae:38:68:d5:de:c9:54:3f:7b:49:d3:f0:db:b1:
         13:fb:00:b3:4f:35:b0:00:7a:57:65:65:4b:49:1d:ef:f7:4f:
         9b:12:a8:22:73:cf:6f:cb:99:b9:36:73:36:bb:df:1b:f9:ad:
         d6:93:2b:6d:cc:09:c2:9f:10:5a:e5:89:b4:5d:df:c1:8c:63:
         fb:9f:f9:78:34:2c:56:92:f2:27:b2:91:ab:23:5a:6f:41:34:
         5f:85:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:04:00 2025 by rpki-client