Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa
File:                     ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa (raw, json)
Hash identifier:          TybiyfyBd76yi9SlrKu3+pqcFIyd8sUhkaUHy2aPBK8=
Subject key identifier:   E5:DD:CF:99:7F:5E:F8:89:63:00:72:DB:98:21:14:B9:70:66:44:89
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858456F1DC9E14A26548228B84110
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     61317
IP address blocks:        173.211.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c9:e1:4a:26:54:82:28:b8:41:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=a678be90-d822-43f5-9d87-3383f70b94fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:a3:e3:b2:c3:26:21:61:6c:0b:86:22:f1:
                    48:87:ab:ad:e0:3e:a4:cb:72:e4:80:7c:2f:05:43:
                    bc:ad:3a:d5:53:9a:4d:44:b5:d2:85:ba:b1:59:a8:
                    6a:3b:fa:2d:a4:e2:65:33:96:d7:62:7b:ad:8a:41:
                    7d:e5:94:95:45:c9:69:f8:d3:57:4e:f6:46:23:a5:
                    c7:c6:80:ea:de:66:af:d4:82:db:a4:c3:60:a9:48:
                    83:4b:79:00:ed:bd:63:54:be:a7:09:8a:41:fb:b4:
                    f4:24:ed:39:b4:4e:94:e7:09:27:db:0d:19:b3:fd:
                    65:34:a4:bb:d0:6d:54:53:19:cd:0c:c2:a6:c3:35:
                    2d:73:2e:9a:3a:9b:25:3f:81:46:60:ed:8f:10:1b:
                    72:f1:13:b8:5d:f9:c8:97:20:3f:48:24:14:ad:ba:
                    cb:2d:8e:11:5a:35:a1:84:d5:8b:3d:3f:34:d9:be:
                    81:4a:7a:d4:73:ed:56:e9:62:6c:9d:d5:82:39:b2:
                    e5:4b:49:99:4f:0c:32:9c:5c:40:3f:ce:60:58:b9:
                    3e:c0:83:0e:01:36:17:a7:bf:4e:0b:3c:e8:f3:5a:
                    94:3a:76:ae:a0:9f:cc:cb:e4:f7:97:b5:91:61:09:
                    23:23:8c:9c:5a:04:0b:46:5d:44:c9:c0:23:04:eb:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DD:CF:99:7F:5E:F8:89:63:00:72:DB:98:21:14:B9:70:66:44:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:d5:b1:04:09:c4:8e:16:d6:87:65:2d:8e:73:c7:b3:ce:
         13:05:8c:a8:3a:60:35:df:ad:e1:11:88:2f:00:d6:bf:8a:25:
         09:40:64:50:cc:c0:33:b7:ee:ee:f3:04:5e:61:b4:a5:53:c3:
         7d:0e:e7:25:21:cc:85:6c:62:72:6e:f7:b2:3d:ea:8f:01:ec:
         79:49:6b:5d:d4:f8:56:71:1d:f4:bc:56:4f:54:fe:cc:51:23:
         df:eb:6f:d1:e9:d8:7f:6b:83:3a:18:94:d8:cd:57:00:59:24:
         49:91:b5:71:ac:af:1d:e3:0c:c5:6c:89:2d:28:09:28:59:58:
         85:70:d2:6b:af:bd:94:3b:e8:38:32:67:4c:c4:33:1c:a0:4f:
         18:ed:96:d0:dc:d9:84:15:4f:07:44:a0:50:86:eb:f8:30:a0:
         35:b2:f3:a4:4b:d0:e1:f2:e8:2c:02:09:53:49:dd:15:01:a6:
         b4:c4:93:7b:89:47:c4:f4:8f:06:56:db:73:15:50:f7:14:3f:
         17:b7:00:b6:52:b5:f7:16:58:2b:59:d2:e9:b6:8e:22:9a:ff:
         f5:69:bf:a6:26:a0:f8:c3:32:7b:1e:40:ad:90:58:ae:04:db:
         8b:a4:1d:3f:58:a6:cb:f0:ff:44:6c:d2:eb:af:de:06:75:09:
         0e:3b:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:44 2024 by rpki-client on console-fra.rpki-client.org