Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/250fa0ca-16dd-3a3c-a1ef-deb093737bb3.roa
File:                     250fa0ca-16dd-3a3c-a1ef-deb093737bb3.roa (raw, json)
Hash identifier:          zWpkVBulXnzV9sdlMGxdpTUb8//f7a+zw+M+Ttm2OT8=
Subject key identifier:   35:F8:4A:56:24:71:18:C1:9D:62:8E:A8:3D:71:3A:31:EB:B2:B4:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858489FD095DA22852E10CE403380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/250fa0ca-16dd-3a3c-a1ef-deb093737bb3.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     53616
IP address blocks:        180.131.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:95:da:22:85:2e:10:ce:40:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=2647caa4-94b0-4d21-8ff8-6cdb19455f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:f7:56:a7:ad:f5:1f:e6:64:7a:81:4d:19:
                    78:11:0c:84:bd:bc:39:f3:32:57:11:23:32:5e:af:
                    e6:f7:11:ef:b7:98:73:c0:1e:f8:06:98:69:4d:fe:
                    17:2e:e6:5c:57:eb:6e:1b:34:03:07:64:f3:47:5c:
                    1a:aa:3a:03:f2:5f:71:b1:0f:b0:8e:a8:a3:b7:f4:
                    1c:55:6d:cd:3d:2b:75:99:d2:e9:76:55:27:fd:db:
                    f9:28:11:b8:0d:ab:45:56:b5:7e:a0:55:4a:dc:3e:
                    8c:0d:fb:a7:28:de:fe:d6:7d:13:d6:4f:04:b7:7c:
                    ed:ef:bf:44:40:6c:6b:b9:28:f6:2e:f4:16:d6:db:
                    89:df:6b:d3:f1:1b:1a:4a:e9:9c:60:da:65:a8:a3:
                    89:8f:85:c7:1b:b3:6d:fd:16:4e:8d:6d:74:06:4e:
                    76:f7:8a:0f:39:d3:c1:af:c3:2a:7e:8b:36:d9:c6:
                    74:01:ce:9e:ad:31:4c:52:aa:b6:dc:17:68:1f:e2:
                    6b:f5:5d:06:6a:d5:78:2a:7c:6d:03:7d:0e:1f:97:
                    05:4b:48:82:78:a3:3a:ea:88:10:94:b4:c8:db:0a:
                    12:77:61:ea:53:1c:76:50:f2:a6:ab:93:a9:0d:20:
                    35:26:32:72:a6:80:24:30:8d:87:02:a7:9b:10:d9:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F8:4A:56:24:71:18:C1:9D:62:8E:A8:3D:71:3A:31:EB:B2:B4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/250fa0ca-16dd-3a3c-a1ef-deb093737bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:42:50:2a:c7:9b:cb:cb:24:17:0c:d5:59:90:06:5d:9c:4b:
         37:cf:f9:78:22:5d:62:97:ed:05:e1:e4:0b:35:44:09:2b:f7:
         2a:1e:ab:da:c7:b6:19:cf:c7:e6:67:f2:1d:6e:71:da:00:f8:
         92:4f:bd:45:23:5b:1d:70:ab:4c:49:34:5c:93:2f:78:00:28:
         27:71:15:83:19:01:3a:3b:55:8e:fb:14:c5:a4:c5:91:7b:55:
         db:84:ab:5e:74:8f:5d:20:f9:16:4f:50:7f:a3:fa:84:5f:50:
         58:22:a9:70:c4:22:cd:19:7c:4b:fe:eb:c0:02:c1:79:ae:29:
         5b:bf:a0:c8:20:2e:3f:c4:6e:21:1d:ac:cc:83:37:18:15:54:
         92:a3:d4:bd:b2:24:1c:b1:05:fd:ac:35:55:9a:2e:4b:e1:b7:
         0f:0a:09:27:32:14:48:82:89:fd:35:34:73:63:f9:b0:54:42:
         79:c7:e7:c5:7f:75:a1:32:41:8e:af:20:e2:0a:1c:c4:38:20:
         59:a3:f1:a7:06:56:5a:a9:5a:0c:6d:c6:d2:ab:1b:7f:a9:66:
         89:40:0b:1e:bd:b9:12:40:a0:d0:c1:a8:be:8f:06:6d:32:e0:
         a9:2a:46:27:43:d7:39:92:de:c0:49:9e:fd:87:17:80:24:8f:
         52:3f:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 09:07:30 2025 by rpki-client