Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c34e4dc5-3a77-3f9a-8665-4969e482175f.roa
File:                     c34e4dc5-3a77-3f9a-8665-4969e482175f.roa (raw, json)
Hash identifier:          yKVHmjxaJim1gN43gtCuVIRT2rHwg94VaVwYqWn/gK4=
Subject key identifier:   52:A0:5F:82:38:D5:49:B4:F4:95:13:9D:DA:D4:27:44:9B:22:27:A1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AD7D125EDA629FEEAEB684BE0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c34e4dc5-3a77-3f9a-8665-4969e482175f.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     852
IP address blocks:        173.211.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:25:ed:a6:29:fe:ea:eb:68:4b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=e21bb4f1-5ad3-4f6d-b0a1-2902c051ab41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:48:1e:74:16:3c:cf:eb:36:e0:dd:0c:54:
                    a0:84:72:48:4d:8d:77:b2:27:b2:16:59:0a:92:bb:
                    69:4c:e8:c5:09:01:d0:05:49:ce:ce:62:66:d7:78:
                    36:08:6e:55:d4:e2:6b:9e:a2:32:7c:af:17:f0:06:
                    98:e4:ed:f8:a6:ef:67:74:fe:84:ac:50:b8:c3:fb:
                    e3:ae:bc:ea:60:90:05:6f:54:9c:8e:68:80:34:27:
                    97:63:2c:19:69:60:99:92:01:ae:28:df:40:9e:ff:
                    ee:79:6d:16:e5:50:68:31:9a:5a:4b:51:8b:f2:56:
                    f2:48:01:e2:81:20:2e:0e:67:c6:79:4d:f9:72:02:
                    a1:88:62:5c:3e:1b:11:63:06:7f:55:bf:53:3a:b0:
                    d6:7e:11:59:55:b2:e9:d6:23:01:60:ba:8f:43:fc:
                    9a:5e:5c:28:60:1a:ee:da:43:40:d7:0d:dc:42:5f:
                    c3:99:4f:59:bf:fc:7e:0c:51:8c:c0:56:12:46:d5:
                    e5:92:64:7c:f9:44:fe:e7:f6:0f:0b:21:15:bc:1b:
                    cb:22:73:88:89:62:cf:7f:3f:ac:31:a6:f0:46:c4:
                    60:34:8f:b9:03:f8:42:02:ab:9a:ff:6d:59:86:b5:
                    9e:0f:33:19:56:12:95:6a:ee:6f:4c:4f:3e:e4:d3:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A0:5F:82:38:D5:49:B4:F4:95:13:9D:DA:D4:27:44:9B:22:27:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c34e4dc5-3a77-3f9a-8665-4969e482175f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:71:2a:c4:b9:7c:28:c8:eb:82:1b:88:83:98:69:5a:e4:65:
         ef:d8:0d:8c:ca:b3:bf:b6:55:c0:20:85:5d:db:cb:20:7f:ab:
         6a:22:3c:98:f7:1a:68:45:55:11:4f:db:3e:5a:8a:22:6c:7f:
         08:82:e7:96:3b:50:d3:23:9e:c0:8c:5d:62:7a:f2:ba:43:c9:
         59:ee:3d:0a:7f:6d:88:6a:3d:06:1b:e7:16:96:d8:b9:00:25:
         45:24:9a:78:31:59:37:00:16:d1:90:8a:d1:b7:b5:3e:99:15:
         62:18:34:ce:77:34:35:f0:dd:83:d3:42:a4:60:7d:5b:9b:55:
         70:76:0f:70:79:23:74:df:1b:60:4b:ed:8a:aa:78:c1:42:54:
         f2:1d:6c:8c:48:e4:84:26:a6:0c:da:f1:b7:da:f9:6b:54:99:
         c3:51:7d:b8:8c:c4:2e:40:16:91:9f:a3:41:24:24:70:32:fa:
         e3:55:d2:49:38:75:4d:7b:6b:12:ac:ce:16:50:b7:c0:3a:43:
         74:b0:36:92:71:25:3a:74:1d:65:d1:6f:24:1f:15:87:e0:f2:
         dd:2f:0a:e4:f9:5b:5d:f6:e0:74:49:48:c0:96:6d:fd:5f:53:
         25:1a:0d:ac:76:61:15:44:bd:7b:b7:58:1b:52:59:73:79:08:
         cb:51:7f:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0SXtpin+6utoS+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTIxYmI0ZjEtNWFkMy00ZjZkLWIwYTEtMjkwMmMwNTFhYjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCJIHnQWPM/rNuDdDFSghHJITY13sieyFlkK
krtpTOjFCQHQBUnOzmJm13g2CG5V1OJrnqIyfK8X8AaY5O34pu9ndP6ErFC4w/vj
rrzqYJAFb1ScjmiANCeXYywZaWCZkgGuKN9Anv/ueW0W5VBoMZpaS1GL8lbySAHi
gSAuDmfGeU35cgKhiGJcPhsRYwZ/Vb9TOrDWfhFZVbLp1iMBYLqPQ/yaXlwoYBru
2kNA1w3cQl/DmU9Zv/x+DFGMwFYSRtXlkmR8+UT+5/YPCyEVvBvLInOIiWLPfz+s
MabwRsRgNI+5A/hCAqua/21ZhrWeDzMZVhKVau5vTE8+5NNX+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKgX4I41Um09JUTndrUJ0SbIiehMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYzM0ZTRkYzUtM2E3Ny0z
ZjlhLTg2NjUtNDk2OWU0ODIxNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdNbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5xKsS5fCjI64IbiIOYaVrkZe/YDYzKs7+2VcAghV3byyB/q2oiPJj3
GmhFVRFP2z5aiiJsfwiC55Y7UNMjnsCMXWJ68rpDyVnuPQp/bYhqPQYb5xaW2LkA
JUUkmngxWTcAFtGQitG3tT6ZFWIYNM53NDXw3YPTQqRgfVubVXB2D3B5I3TfG2BL
7YqqeMFCVPIdbIxI5IQmpgza8bfa+WtUmcNRfbiMxC5AFpGfo0EkJHAy+uNV0kk4
dU17axKszhZQt8A6Q3SwNpJxJTp0HWXRbyQfFYfg8t0vCuT5W1324HRJSMCWbf1f
UyUaDax2YRVEvXu3WBtSWXN5CMtRf6E=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:52:13 2025 by rpki-client