Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25a3fb07-0abc-3eb8-8ca5-e8488f03f100.roa
File:                     25a3fb07-0abc-3eb8-8ca5-e8488f03f100.roa (raw, json)
Hash identifier:          4KatOnoSrUNBf0TXjyybRHU03A+BAxgBmRc/SZrukZs=
Subject key identifier:   A8:05:28:69:39:1D:48:64:42:9B:81:29:15:E7:9A:1C:AC:B2:A6:10
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848ACE8D082739B493487BDA4C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25a3fb07-0abc-3eb8-8ca5-e8488f03f100.roa
Signing time:             Sun 26 Jan 2025 18:35:01 +0000
ROA not before:           Sun 26 Jan 2025 18:35:01 +0000
ROA not after:            Sat 26 Apr 2025 17:35:01 +0000
asID:                     58061
IP address blocks:        184.174.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:e8:d0:82:73:9b:49:34:87:bd:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 26 18:35:01 2025 GMT
            Not After : Apr 26 17:35:01 2025 GMT
        Subject: CN=2db4ee62-4673-4559-aa95-d6f0086c38f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:13:54:5d:98:24:07:f1:49:ae:2c:dc:26:75:
                    83:cf:da:6f:19:8d:2d:2f:be:ce:d8:bc:a7:c5:ad:
                    27:97:97:97:46:f9:27:95:65:51:6f:04:3c:e9:a4:
                    1d:b8:e8:fd:a4:b6:5c:a7:05:c3:1a:d9:41:25:d5:
                    f3:fd:de:79:02:50:f0:2c:c1:a3:b7:52:a7:9d:4f:
                    dd:fb:5a:5c:56:8f:49:61:b7:ac:cd:cb:c7:32:9f:
                    a5:68:ba:61:cd:c1:00:42:f8:14:0b:db:55:bc:8d:
                    60:1f:d8:8d:b8:dc:78:b8:0d:c0:36:2f:5b:07:0d:
                    58:50:6b:50:84:4c:f7:25:f7:13:ab:77:13:70:6a:
                    41:c5:15:f9:23:38:d5:74:46:b4:45:d9:7d:87:db:
                    c9:75:54:84:56:d8:a5:0e:3b:7b:40:49:61:34:fd:
                    4e:b8:25:28:88:67:c1:fe:d2:f7:e4:17:6d:e3:dc:
                    18:5f:86:1b:28:52:5e:52:74:18:fa:53:c0:ff:e0:
                    b0:0a:9e:10:90:58:8c:ed:39:fe:f5:3c:28:9e:81:
                    e8:fe:c8:f1:e0:6e:2c:47:2d:58:a6:96:28:a6:1b:
                    b5:89:e6:0b:e6:ad:d4:16:b3:55:2d:00:f7:49:cd:
                    66:e7:ea:38:f4:05:f2:bc:c4:b7:26:7b:41:1d:87:
                    e9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:05:28:69:39:1D:48:64:42:9B:81:29:15:E7:9A:1C:AC:B2:A6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/25a3fb07-0abc-3eb8-8ca5-e8488f03f100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:3d:12:ab:86:5c:c0:20:e9:59:6d:b6:66:d1:7a:9b:ea:da:
         c1:c0:ab:9f:22:48:d7:da:b1:72:9b:ea:4f:b1:c3:d1:61:c9:
         56:a1:63:8a:04:c2:54:70:8b:ba:a5:24:11:4f:23:26:2c:76:
         5d:b6:a2:38:14:87:8e:1d:26:ac:77:74:c2:75:9c:03:e6:94:
         10:b7:6f:59:39:ee:5e:d2:49:96:46:0c:12:4e:c2:b3:5b:b7:
         f4:a8:6d:49:85:2b:45:b3:80:78:4a:cb:f2:2e:95:98:8b:cc:
         e1:43:9b:8d:e4:6e:03:77:af:a2:ee:2c:15:b4:07:9b:69:1a:
         5d:f2:78:d9:32:29:d1:14:80:51:49:74:a4:9c:c6:f0:d5:21:
         d8:d0:1e:3e:97:eb:76:af:b1:24:ab:d7:36:a3:b5:ca:bb:e5:
         b8:e0:c7:1f:fe:1f:37:c8:74:d2:81:62:cf:35:a8:7d:72:fa:
         30:fb:b7:46:90:25:f8:46:bf:a9:ae:96:de:12:ce:93:db:b0:
         b4:ba:00:37:c5:f4:5a:82:4b:ea:3d:5f:9c:b3:23:2d:f8:2b:
         10:fd:92:ec:8b:40:50:3f:df:43:17:72:80:ff:e3:15:ef:96:
         52:b6:b7:b8:fa:07:cc:84:48:12:8e:db:40:70:0b:d9:ea:2d:
         a6:52:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:40:00 2025 by rpki-client