Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa
File:                     1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa (raw, json)
Hash identifier:          b2R+ftnZkUpVoFBOcIZmW/lpbMGBbflAdm7BqgsXmh0=
Subject key identifier:   44:D6:45:27:FA:5A:17:34:C0:A3:B9:37:88:66:BB:09:68:A4:46:ED
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848BBBB80E4C2A4EF6F92C5A5E0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        184.174.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:80:e4:c2:a4:ef:6f:92:c5:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=931f8be6-a029-4daa-a16c-957e95936a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:07:98:ea:11:04:4d:cf:40:1e:ac:b1:e5:
                    b4:be:a3:f0:09:76:25:d1:b0:4f:7e:de:74:26:de:
                    1c:11:66:67:56:19:2e:8a:e9:36:3c:42:1e:ff:f2:
                    25:6d:7b:4a:c9:17:dd:31:17:85:fe:bd:1c:92:fb:
                    1c:7a:6a:cb:c1:16:6e:e7:c7:42:f9:78:cf:d2:76:
                    4c:10:25:73:7e:02:8e:46:7c:3e:88:ad:ae:31:31:
                    3e:f5:53:5b:03:05:35:e7:83:7e:e1:f6:4e:15:76:
                    6d:aa:ca:af:c5:35:c0:a2:92:e9:06:4d:e1:94:a5:
                    08:d3:fa:a4:bc:09:da:09:8a:0f:a1:d8:54:c9:35:
                    42:8d:d3:dc:27:ec:e3:f7:3d:23:14:e0:31:16:d8:
                    3d:9d:6c:6f:7c:13:75:20:a9:a3:b6:f8:1e:e8:49:
                    c8:e6:85:dc:7d:d9:ca:66:bf:ce:14:1f:9e:f8:c4:
                    19:17:76:cf:b2:39:e0:90:26:c8:e1:f5:5a:d9:94:
                    d1:b0:a2:bc:fe:f1:cd:78:79:9a:3b:5f:58:02:70:
                    03:4e:2b:28:63:03:66:73:73:fd:f9:54:43:ff:de:
                    4e:fc:0b:51:26:8b:d6:13:4b:2a:d8:85:9c:91:1b:
                    6d:07:ff:ed:1d:ff:36:1e:d5:cf:6e:09:3e:fa:47:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:45:27:FA:5A:17:34:C0:A3:B9:37:88:66:BB:09:68:A4:46:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:65:9b:13:d9:78:f4:9e:57:b1:85:70:97:16:4d:35:3c:
         36:d6:ec:a2:58:94:9b:4c:05:ba:71:b9:3c:7e:69:a7:2c:60:
         6e:fc:b4:cf:7f:3a:53:c6:38:fd:38:d5:38:4a:61:30:74:b2:
         16:14:3b:3d:c9:bb:ee:20:3f:df:bf:33:d8:05:1c:dd:c7:0d:
         32:df:ff:2b:74:ef:48:98:51:56:81:bb:3b:08:23:23:42:f1:
         49:3a:a2:f3:81:fb:f5:a3:a0:f2:e3:61:17:31:3c:56:6b:9b:
         b8:bd:0c:5b:56:c7:36:b8:0f:6b:dd:8c:c9:49:d9:99:5c:63:
         ba:f6:3b:8b:c3:b1:8b:f3:d1:85:95:4a:53:a9:43:8d:d0:54:
         ef:fc:cb:57:cc:7c:ae:ab:36:b2:2f:8e:43:7d:30:b2:ba:05:
         54:24:05:7d:15:c3:17:85:30:02:5d:90:96:00:83:49:09:bf:
         6f:40:fc:e0:42:64:64:4c:33:9e:87:f2:2e:31:ba:db:04:8e:
         e0:66:22:31:73:74:1e:4d:04:c2:60:36:0f:8e:d7:c2:aa:b8:
         52:60:17:7a:17:60:f8:2f:5e:71:f4:95:bb:93:df:79:40:9c:
         a3:8d:c0:91:3b:de:a8:77:5b:1b:8b:28:31:e8:84:7e:d4:9d:
         e1:4c:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 00:08:53 2025 by rpki-client