Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8b4b86a-57ff-329c-a6f5-90b6a2dd1bbc.roa
File:                     c8b4b86a-57ff-329c-a6f5-90b6a2dd1bbc.roa (raw, json)
Hash identifier:          Y7wnBu0FTLKAWlZk8cKJ07AtGajL6pVTDlF/EfsvD2Q=
Subject key identifier:   8E:71:1A:E9:C9:77:4B:9B:7B:ED:08:21:86:58:F7:5F:8B:11:18:DE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A550E213D8E121A97FEE46280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8b4b86a-57ff-329c-a6f5-90b6a2dd1bbc.roa
Signing time:             Fri 27 Jun 2025 16:52:57 +0000
ROA not before:           Fri 27 Jun 2025 16:52:57 +0000
ROA not after:            Thu 25 Sep 2025 16:52:57 +0000
asID:                     834
IP address blocks:        180.149.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:55:0e:21:3d:8e:12:1a:97:fe:e4:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 27 16:52:57 2025 GMT
            Not After : Sep 25 16:52:57 2025 GMT
        Subject: CN=72466057-5e63-4a3d-a230-ed594c7b339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7e:3e:a5:d5:bd:aa:e9:0e:cb:26:f3:d7:40:
                    d3:69:10:ef:ef:d9:4f:5d:f1:e1:44:9d:40:aa:9b:
                    f4:42:71:ea:d3:c4:ba:dc:47:75:eb:30:3e:d2:1a:
                    66:c8:7e:f7:5e:9e:0a:b0:0a:a1:1a:d6:da:1a:e8:
                    34:5d:f6:0b:06:44:9e:f1:4c:14:19:30:bb:6f:f6:
                    1c:f8:e7:be:29:b6:28:b1:19:a4:b2:bc:53:c6:3d:
                    d2:5d:f9:e6:cd:ab:15:ad:04:7e:a9:f0:04:07:3d:
                    40:94:27:ff:45:96:88:c8:85:e0:0f:37:74:eb:b2:
                    63:21:15:5e:2c:ab:7f:d5:83:4c:21:89:98:0e:48:
                    f5:33:2d:fe:91:21:bd:67:b7:f8:17:6a:0f:a8:5b:
                    aa:4a:2d:44:0e:60:26:b5:86:90:47:0a:0a:a5:ad:
                    54:1f:da:0a:04:84:3f:6e:e2:ef:4e:ed:0d:32:ac:
                    9d:38:23:26:e8:8b:e2:2b:cb:e3:ee:55:18:13:6a:
                    fa:d4:ad:df:c0:4a:77:9d:68:df:0c:88:5c:27:6e:
                    9c:f1:80:0c:00:60:28:2d:c9:d7:18:28:49:21:3f:
                    5f:3e:36:76:4f:0a:dc:14:23:93:ac:f2:75:84:89:
                    10:94:06:d3:ef:d1:b4:d0:8d:33:2b:db:5f:d2:2c:
                    a3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:1A:E9:C9:77:4B:9B:7B:ED:08:21:86:58:F7:5F:8B:11:18:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c8b4b86a-57ff-329c-a6f5-90b6a2dd1bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.149.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:87:f5:d6:f0:28:60:b3:60:0f:d3:cc:f5:c2:67:9e:b6:d7:
         83:52:3a:11:a6:96:c5:fd:14:0b:cd:83:8d:b2:04:8c:bf:cb:
         d9:90:8b:b7:be:b5:3b:fb:2f:fe:ff:16:82:78:83:39:0d:1b:
         c8:3c:88:d2:fe:bc:ab:a9:77:60:9e:3c:ef:17:15:c3:ca:0f:
         6d:67:39:7b:74:93:3e:46:24:83:bb:af:f0:dc:38:e7:29:85:
         fe:76:e4:3e:8c:b4:93:36:be:93:ea:1f:e2:37:39:ba:58:6a:
         17:19:d6:ce:6e:9e:97:92:a1:66:c2:0c:68:1a:e8:b7:69:e5:
         c4:e5:43:c9:e6:bb:e4:f7:8a:f1:d0:05:51:24:a4:e5:1a:63:
         ed:d7:8a:b0:8d:32:a9:be:40:69:32:6f:30:d6:a8:ae:5f:76:
         20:42:99:c7:1a:b5:91:9c:b1:0b:b0:a0:46:5b:25:a8:0a:12:
         0f:59:e2:1a:5a:b6:a3:63:cc:7a:b2:1f:8f:64:46:6c:4a:f0:
         9a:d2:f7:00:a6:69:64:40:22:84:9e:df:ec:a7:68:a4:a2:89:
         46:14:a1:d6:b4:be:88:1d:27:3f:ea:c7:a0:a0:39:f5:8d:5a:
         7a:48:df:b3:1f:ba:2e:e3:69:86:c4:b4:c4:f1:56:e3:0b:46:
         ec:15:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:43:12 2025 by rpki-client