Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa
File:                     b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa (raw, json)
Hash identifier:          TQ3r/8W5gBHyD2kaTO+X+fiQ3v5Q1GD9x3pra2UO620=
Subject key identifier:   DB:03:90:A1:A0:55:03:25:64:39:79:8F:93:96:16:E0:A0:C4:5E:0C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A374AD3FE2F9BB670739F4F04
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     25846
IP address blocks:        180.149.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d3:fe:2f:9b:b6:70:73:9f:4f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=cf5700ca-8c21-4823-86d1-e9ebdf8ddef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0b:f0:da:1f:9b:7b:d6:eb:ab:ec:39:81:a5:
                    38:45:55:17:71:41:ee:97:9b:3b:d5:b0:ab:a6:1e:
                    5b:d6:b6:d9:35:4c:f3:28:ce:01:d5:14:f2:2f:1c:
                    43:c2:ee:59:53:b7:db:d8:70:2f:85:05:67:f4:1d:
                    ba:39:ba:a5:3d:09:a2:22:ea:6e:9c:33:d8:05:39:
                    5a:12:14:e9:4e:66:4f:21:ca:92:6c:cc:03:24:31:
                    3d:41:da:c3:b8:41:dd:45:71:8f:4f:a4:75:a4:18:
                    62:7f:9f:bb:60:4a:bf:c6:4b:40:f1:68:61:7f:1e:
                    8b:eb:dc:4f:01:10:83:9a:1a:e5:89:6d:61:66:e8:
                    c1:29:30:1e:8b:bd:06:16:b6:c6:e2:06:7b:77:7e:
                    8f:51:af:93:cb:85:cf:f2:5f:e1:34:06:41:e1:5a:
                    e9:e0:ed:56:04:53:8a:3d:51:06:4e:bd:51:d6:ce:
                    f7:4f:82:1a:4f:61:01:45:ac:f0:54:90:b2:f5:95:
                    35:1d:06:85:8a:08:14:a1:40:7e:8b:e7:7d:a7:47:
                    25:a4:90:14:cb:95:cc:b8:44:63:51:30:36:dd:e7:
                    04:4f:0b:60:38:bd:b4:f9:66:68:80:a0:b4:32:9a:
                    ae:47:20:d0:75:c4:ba:9b:8f:8d:d1:5e:2a:01:53:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:03:90:A1:A0:55:03:25:64:39:79:8F:93:96:16:E0:A0:C4:5E:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b8b2c0d3-bb13-3d34-a5d6-f307dfa77213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:44:55:66:25:fe:49:98:69:c2:53:9a:9d:0e:33:61:b8:a4:
         ec:39:57:90:f8:b3:96:d7:85:b3:bc:44:5b:5b:d5:f4:0e:0b:
         89:cc:1d:c1:ca:c2:aa:b2:ba:56:30:dd:d1:0f:96:ac:2a:c1:
         73:91:93:91:a1:f9:55:c0:ec:bf:9e:d2:6f:e3:64:cf:56:10:
         a9:22:18:74:5c:21:41:99:60:72:5a:ba:b6:27:c7:6a:d2:da:
         c9:4a:b0:df:e1:07:4e:91:1e:1b:a9:50:bc:77:08:a9:be:5f:
         15:98:f1:a0:06:f4:57:ab:63:c7:04:3c:89:fa:7e:a6:25:d6:
         1b:72:05:f5:bb:f2:ac:b3:31:2b:cd:4a:0a:ba:50:23:94:4e:
         27:0a:bf:28:a7:01:20:eb:95:13:98:31:e4:31:97:16:a0:96:
         e1:7b:ba:10:9b:cd:08:15:4d:9d:63:5a:f7:6f:d0:10:66:d6:
         5c:8a:5d:ef:dc:87:00:32:62:a2:d0:f6:a6:34:28:34:68:2b:
         e4:f6:83:14:18:2f:17:ce:e2:7c:a4:a0:04:8b:3c:35:f2:a2:
         02:53:01:0f:2a:94:46:06:4e:5f:73:5a:85:29:9d:56:e6:23:
         a1:5a:ed:a2:02:2a:e4:5d:47:65:13:86:43:4e:18:5f:3b:83:
         30:4f:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:39 2025 by rpki-client