Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa
File:                     1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa (raw, json)
Hash identifier:          kFJ7wh8mdfKi1N8yanZt+ZiOeW/WlVYmJtQSFeVSJa4=
Subject key identifier:   9C:6B:16:9A:FF:A2:D5:22:54:47:3B:E6:57:9B:1B:91:B8:FC:72:A9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848D21138B3A613BAED611618C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     46562
IP address blocks:        104.224.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:38:b3:a6:13:ba:ed:61:16:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=713dc7e0-a104-4499-99fe-32a585798b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:83:3e:7b:a9:23:36:85:5f:89:44:0d:d4:
                    01:d0:54:b3:39:1b:01:95:19:04:04:3c:78:d7:2c:
                    d9:37:7c:68:ef:42:55:10:9a:8e:9d:9b:be:3f:dd:
                    3f:ba:d9:7a:39:ba:b5:65:76:17:aa:ae:49:d2:26:
                    6a:a2:5e:ff:8d:c5:dd:89:da:e9:b8:a5:8b:a0:b0:
                    01:60:5e:26:da:10:1b:d3:a9:a5:31:ef:ec:0b:39:
                    4d:01:99:af:3a:40:0c:2a:bf:27:0d:75:0a:73:02:
                    32:b4:08:07:b2:2e:e6:3b:d1:41:01:01:0e:3a:b2:
                    23:0c:58:e1:93:df:7c:9b:d3:dc:e8:53:aa:1b:a5:
                    44:04:a7:e6:9a:11:9d:7e:a8:52:56:c7:19:90:c3:
                    67:b8:bf:85:c9:3c:ea:7c:0e:bd:1f:a9:ac:fc:7d:
                    fc:7e:c6:dc:28:0e:bf:05:0f:c1:b1:3c:36:2d:7c:
                    04:39:93:56:e1:41:56:c1:3e:da:04:8c:09:9f:f9:
                    2f:55:f8:8e:09:72:2d:67:e8:61:1e:79:de:50:76:
                    1e:68:0d:9b:ab:62:f6:5c:09:2e:15:11:43:d2:a8:
                    1d:77:c3:3f:90:82:5d:60:6c:3e:27:20:94:58:ae:
                    5a:bd:29:c1:96:ea:39:55:90:1e:93:57:73:b3:98:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:16:9A:FF:A2:D5:22:54:47:3B:E6:57:9B:1B:91:B8:FC:72:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1de65de1-780b-39ea-83da-7e3ebcfa4c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:12:a6:f6:6c:23:e4:b1:c5:57:7c:f0:ab:db:3c:63:dc:41:
         6c:8e:82:ea:b2:44:4d:80:03:60:4e:0a:00:32:9a:01:2c:ca:
         0f:e3:18:6e:dc:9b:f8:9d:8f:2d:61:53:ff:94:31:c7:90:a5:
         26:7c:ca:b3:c8:54:c0:0d:6c:ce:44:35:b7:f4:0a:c8:97:c0:
         46:7e:3a:7c:b1:fb:be:b0:e6:3f:4f:5b:59:02:be:19:c5:3e:
         7a:29:8c:51:78:89:ce:00:a0:52:c1:2d:bd:d3:53:6f:19:89:
         35:f9:f0:89:21:f5:48:48:5d:64:28:48:cc:15:61:9e:b1:50:
         48:15:1e:1e:d4:9b:79:4b:41:7a:d1:59:c4:d9:b0:aa:42:54:
         ed:0e:88:ae:84:a5:f5:01:49:91:5f:c8:b5:92:c4:ce:ec:f6:
         b5:00:a1:aa:f8:5b:7b:ad:6b:06:ae:3f:f2:fb:a4:2e:82:30:
         0b:d6:51:83:1f:c0:4d:a3:22:f7:60:7a:08:03:43:98:71:b8:
         ed:42:40:13:cb:2c:5a:54:15:58:8d:b2:f6:2d:3b:62:f4:91:
         88:e4:43:4c:9d:24:13:75:d9:c5:8f:b9:cb:b1:d8:73:12:ef:
         d7:b0:eb:9f:66:48:1b:3c:61:75:22:93:58:a3:1b:c3:cd:ef:
         62:cf:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 10:27:58 2025 by rpki-client