Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa
File:                     3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa (raw, json)
Hash identifier:          CB0HYUefH2OdBcKYNk4nSGyeO+lQY7BoxFtIGLjuULk=
Subject key identifier:   AA:26:F3:B4:E5:CC:16:84:1E:28:BB:52:2E:18:AE:AB:E8:4F:4A:97
Certificate issuer:       /CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
Certificate serial:       010D0C9F43285849A4BB75D57DB2E6AA50046E00
Authority key identifier: D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     38195
IP address blocks:        162.213.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:75:d5:7d:b2:e6:aa:50:04:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b04ff-40d9-4bf7-8d38-4de0c54bb785
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=459d64bc-8c9a-45ed-afef-6fdaf6dfef6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:66:6e:da:04:b9:48:44:09:0f:7c:d1:41:
                    74:07:e4:83:fe:f4:c9:04:d3:e0:f2:b3:93:45:21:
                    ff:05:3a:9e:15:05:c8:86:8c:77:a4:37:c4:ae:c6:
                    d8:ce:84:60:48:74:c0:99:b0:d9:ee:49:31:23:ef:
                    53:8a:8a:16:ff:aa:9b:e1:bd:0c:cb:32:63:3e:9c:
                    ed:04:56:ab:dd:05:f9:c3:c8:71:2d:46:cd:91:45:
                    9d:bb:d3:aa:37:2c:70:ef:cb:36:01:ce:9b:88:56:
                    c6:8c:da:01:33:92:cf:62:cc:15:01:08:d0:13:55:
                    92:ce:6d:d6:4c:46:61:84:a5:b0:11:a0:d0:fa:1d:
                    30:be:2e:25:3f:e6:a0:d4:9a:b9:8e:41:7a:bc:43:
                    2d:f6:0b:a1:d1:e3:9d:86:87:62:27:36:6f:7f:84:
                    2e:d9:c1:79:5f:1a:7d:a5:14:76:f9:bf:1b:7e:4c:
                    e5:ac:f2:08:32:a7:6e:44:e8:d1:1f:c3:57:52:33:
                    33:30:1b:7a:3b:a2:98:90:33:57:9e:9f:f2:92:8c:
                    84:17:9c:3f:7a:3a:86:c2:2e:b9:af:82:ef:85:0a:
                    27:18:da:53:ba:47:c5:03:de:d6:e7:ca:0e:4c:a6:
                    b7:26:4f:45:19:0d:dc:45:f6:a5:40:0d:ed:7c:e8:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:F3:B4:E5:CC:16:84:1E:28:BB:52:2E:18:AE:AB:E8:4F:4A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/3e5161c7-2a5a-31eb-bf37-e6126e52ce25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:BF:E3:FD:2D:90:49:61:AF:E1:E9:09:3F:B8:8F:2C:E4:E3:06:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e85b04ff-40d9-4bf7-8d38-4de0c54bb785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:d7:f2:e5:3f:51:84:34:4c:5e:4d:41:7f:4d:c5:c1:6f:
         46:30:79:b1:a5:ce:1c:e1:2e:30:a8:c2:25:11:19:f7:92:01:
         58:d2:69:83:6c:fd:17:e3:bb:ae:97:ad:22:de:bd:a4:cd:e2:
         55:73:2d:25:38:36:b2:39:21:c0:39:0a:71:c5:b6:d0:72:92:
         60:61:33:f2:e5:87:ff:33:3c:67:19:fe:88:df:bc:5f:d8:2b:
         ed:94:5e:f6:74:90:1d:49:a8:f0:85:07:b6:fb:a8:fc:e1:68:
         99:2a:eb:64:bd:4c:8d:d0:4d:c3:52:a6:eb:46:4a:c4:bd:03:
         cd:0a:fa:40:bb:2d:14:07:f2:c6:1e:8f:f1:95:87:5b:89:70:
         bc:69:77:71:14:48:81:3d:fa:6c:42:7c:23:9c:be:57:27:d0:
         11:42:5e:88:76:bb:6f:87:f2:94:82:86:34:d5:b4:07:48:54:
         cf:31:3d:45:6d:44:f2:3d:3d:ca:d4:d1:3d:93:39:f0:a5:64:
         ad:9e:0a:4c:ef:7d:f2:4d:14:03:73:71:04:42:b4:27:96:2c:
         ab:ad:71:ca:24:a5:c9:00:1b:c3:64:16:89:ee:65:08:05:bb:
         a5:61:92:e7:77:6d:db:bc:b1:52:38:44:9c:fd:a7:00:84:bd:
         58:54:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:39:06 2025 by rpki-client