Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa
File:                     c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa (raw, json)
Hash identifier:          Oi5F2mSOi7gUYAUC0bJl84Tfm+aat8eKweTifJtbg0I=
Subject key identifier:   57:E4:A0:A0:26:D2:7D:E5:52:82:23:6E:D9:39:39:90:31:DB:6A:1F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849AD1A10DE058C705CDACD32C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     214054
IP address blocks:        216.107.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:10:de:05:8c:70:5c:da:cd:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=efa4afbd-4552-49ab-8bf8-2f66cf48b83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7a:cd:01:cb:1b:4b:81:22:c9:a0:9b:3d:1b:
                    bb:93:f3:e8:74:ae:17:25:a8:0f:53:b6:9b:9b:14:
                    40:55:1b:85:b5:cd:d7:b9:e3:ab:0b:d2:dc:07:6d:
                    15:7f:82:3f:35:16:43:a1:cb:5b:76:f9:d8:c6:7c:
                    86:ec:bd:e3:52:22:ed:64:89:71:6d:d7:9b:a0:86:
                    72:0d:fb:b5:43:ff:19:a0:ff:e4:d7:9b:58:9a:a5:
                    a0:1c:09:b8:5e:de:28:eb:77:1f:6b:f4:cb:23:86:
                    57:de:c9:ca:2e:27:92:d7:1d:dc:79:b4:3a:fe:de:
                    d3:8f:94:43:46:99:3d:57:14:90:c6:1a:df:81:53:
                    77:2e:8f:e4:2e:6f:d0:1c:8c:04:ae:eb:0a:64:2e:
                    0f:b6:e6:7b:46:c5:be:94:1a:fe:62:0a:d1:24:21:
                    c8:d2:7a:71:c3:5b:ad:4b:6f:33:7c:8e:17:7f:b2:
                    bc:b3:44:9f:5d:51:1f:ad:1d:b2:d2:b7:68:0e:d3:
                    82:d6:98:d9:06:ad:9e:cb:61:2a:e1:90:8e:c5:7f:
                    c3:84:b0:7c:15:de:42:29:d2:d0:6f:cc:95:5d:1d:
                    89:22:7a:ae:3c:7d:2d:aa:4e:c0:55:4b:f9:8a:1b:
                    64:00:8b:b4:02:6a:d6:a9:dc:0b:ee:a1:78:ac:c7:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E4:A0:A0:26:D2:7D:E5:52:82:23:6E:D9:39:39:90:31:DB:6A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c85dbd1f-59ed-3d38-af5a-166c1d2903ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:07:71:65:9f:06:70:e4:00:c6:56:a5:d4:37:d3:33:cb:bc:
         e8:59:de:27:b5:5e:0c:c9:87:d1:32:f6:8e:7d:22:22:4d:57:
         25:4f:58:af:25:5a:b2:d9:4e:1d:c4:2f:4c:2b:0e:b0:84:58:
         91:b2:3e:f5:8d:2e:ca:5b:32:39:9d:83:ba:ad:aa:2d:5d:0c:
         e9:77:9b:42:68:bc:6d:9a:25:8a:09:6c:44:ca:0e:bb:4e:6d:
         65:79:09:d7:cc:f8:46:76:32:e7:87:98:2a:40:4a:41:3b:66:
         9b:1e:06:d5:8c:08:75:5f:be:02:52:21:1d:df:d9:c5:f7:49:
         92:37:0a:15:90:92:27:a5:f4:87:4b:22:6b:02:9e:cc:2a:e9:
         29:49:06:b0:ab:35:78:05:d0:d7:82:7a:5c:2e:7f:3e:46:5d:
         44:4d:f8:30:48:83:e8:96:d1:12:03:67:92:e4:9b:f4:f4:01:
         a6:44:4d:06:18:a2:13:e1:33:f5:9d:84:69:b8:8c:ed:d3:6c:
         dc:0a:ad:ac:81:e3:a1:32:18:d4:42:77:cb:9b:4c:37:c9:61:
         b2:79:96:c7:96:8f:0b:dd:c5:3c:7c:af:8c:29:dc:48:91:1d:
         b1:94:ef:a2:eb:61:b3:b8:fe:4b:be:9c:33:cd:6c:9c:1b:2f:
         4b:d9:1c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:51:40 2025 by rpki-client