Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa
File:                     e1165abb-cade-3c1b-99f7-08510de1fef6.roa (raw, json)
Hash identifier:          RkzgVW6OrfLDYbl1uaOLVd0PX0mm3KFiPBLTZoETXXQ=
Subject key identifier:   84:58:53:26:1D:BA:88:77:30:3A:A5:DD:40:09:C3:54:7E:BC:5F:54
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F432858482BF55424F0146C55A39DD780
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     11904
IP address blocks:        24.204.160.0/19 maxlen: 19
                          24.204.160.0/20 maxlen: 20
                          24.204.160.0/21 maxlen: 21
                          24.204.160.0/22 maxlen: 22
                          24.204.164.0/22 maxlen: 22
                          24.204.168.0/21 maxlen: 21
                          24.204.168.0/22 maxlen: 22
                          24.204.172.0/22 maxlen: 22
                          24.204.176.0/20 maxlen: 20
                          24.204.176.0/21 maxlen: 21
                          24.204.176.0/22 maxlen: 22
                          24.204.180.0/22 maxlen: 22
                          24.204.184.0/21 maxlen: 21
                          24.204.184.0/22 maxlen: 22
                          24.204.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:54:24:f0:14:6c:55:a3:9d:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=9eca2467-3bde-48dd-877b-4821659dd604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:98:32:05:5b:2f:6b:48:1d:63:c2:2c:80:
                    72:c8:55:e4:18:e2:5f:8b:c8:c2:52:bd:37:63:d0:
                    bb:6b:4a:6b:f8:cc:7f:20:7b:4e:24:fc:4e:a7:2a:
                    37:f4:84:a5:ef:1d:72:f3:04:65:3b:61:66:70:80:
                    b7:a3:aa:00:94:94:39:08:82:94:ca:16:66:b6:69:
                    fc:44:f6:e2:41:d9:4e:10:4b:a3:9c:59:7b:32:6c:
                    65:28:85:3c:ef:e9:bd:ce:81:0f:5e:a5:30:4b:f7:
                    ab:22:64:ed:4c:c4:ef:f3:4e:b5:d3:bb:91:96:ea:
                    a0:62:36:eb:b5:fd:e8:a1:5b:16:ba:b8:b1:4d:1a:
                    c5:e3:8d:9a:55:a2:a2:08:94:9d:7f:e2:1c:b3:8d:
                    79:bb:66:b3:22:a5:d9:47:3b:95:6e:05:fe:08:f1:
                    93:36:f9:cf:9f:da:11:a2:97:d6:51:66:43:21:6b:
                    46:5f:69:57:2c:26:49:c1:06:a2:91:d4:cb:5b:dc:
                    77:72:cb:ae:fc:5b:f7:b8:da:c2:02:45:da:4f:12:
                    13:b9:b7:40:07:cc:69:b2:1e:82:ee:91:64:b1:4c:
                    f3:08:22:6e:60:d0:b1:87:76:3a:a7:a6:48:ea:22:
                    2f:33:fb:65:b6:be:06:da:6a:2b:e0:ca:bb:15:d6:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:58:53:26:1D:BA:88:77:30:3A:A5:DD:40:09:C3:54:7E:BC:5F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/e1165abb-cade-3c1b-99f7-08510de1fef6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.204.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:23:94:2b:85:c7:a9:9c:08:60:e4:6f:a6:7e:39:5f:c3:
         a7:68:3f:f6:c5:07:79:a1:be:11:6b:b3:a1:78:64:b9:9c:a2:
         49:44:22:d6:4e:29:7f:9f:27:9c:c1:e0:e1:d6:1c:da:e6:1b:
         f6:49:59:4c:39:40:d2:c1:b5:6b:2a:26:22:79:57:df:70:67:
         4f:c9:bb:76:57:d0:e7:33:20:29:34:68:19:1d:6d:88:14:96:
         7c:6c:11:5b:b7:cb:a7:e3:66:dd:8c:07:2a:a0:b1:98:2b:34:
         c8:12:33:17:e9:88:81:b9:29:5c:e4:db:54:bd:97:dc:0d:29:
         82:3d:b6:f2:2c:2f:28:8a:fe:a8:ca:f0:5a:c2:ef:42:3e:44:
         e7:72:b0:c3:bc:6d:7a:96:42:fe:37:9b:e4:ef:ef:eb:5c:e7:
         9a:34:28:7f:ae:38:7b:52:06:71:03:73:a4:e0:a3:94:ed:cf:
         0c:6f:6f:48:8d:c2:9e:4b:46:d1:15:80:9b:b7:47:95:cb:c7:
         72:bb:ad:e3:df:8c:ad:41:83:01:e3:b5:ee:46:60:98:f7:b1:
         6f:67:30:a4:ad:7a:58:56:62:a2:b3:4a:64:2f:99:af:2f:c9:
         f0:b6:37:36:09:4a:35:a4:d0:72:87:64:2d:45:31:92:79:88:
         d2:b1:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:35 2025 by rpki-client