Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
File:                     280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa (raw, json)
Hash identifier:          /w54WZ9A8nkaPvv4SSp1hGCSX3p5/e2lCWnncVeSX14=
Subject key identifier:   7A:6B:49:B3:D0:B0:9C:87:0E:86:AE:87:51:DF:61:4C:A0:30:45:42
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858487B85B94D66AF8DB576E2DD88
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        174.140.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b9:4d:66:af:8d:b5:76:e2:dd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=c2d1b49b-f61f-49f2-b07e-79ee9100ebe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:83:e9:b8:95:d8:70:40:2d:35:43:25:2b:
                    3f:9d:4c:0a:b5:59:78:c0:ef:36:98:aa:ef:7a:3b:
                    d7:76:a7:54:ae:eb:bb:84:51:c9:6c:bc:0a:ac:38:
                    6d:d4:4f:6c:18:ac:78:b8:b0:ea:51:37:52:ea:c7:
                    57:fa:0c:33:69:26:42:a0:64:b5:13:5c:30:be:26:
                    23:cd:c1:53:d4:8b:a9:44:c7:91:5e:6b:9b:59:72:
                    38:c1:fc:93:7e:83:96:83:b3:56:35:85:10:fd:97:
                    b4:91:b6:d0:94:85:86:9a:41:61:ba:b1:c9:17:6b:
                    c4:05:dd:04:c8:eb:49:63:d0:dc:bc:28:f5:2f:a7:
                    09:d2:01:98:65:7b:07:40:9f:85:03:41:a1:74:35:
                    47:66:53:d1:a9:13:6d:08:52:99:58:bb:10:a4:5e:
                    cd:0a:b6:ef:e9:ed:af:d6:7e:4c:ae:4b:ed:e8:bb:
                    a9:c0:5e:cc:b7:ba:35:12:fa:81:d5:eb:94:f1:49:
                    ed:b3:7b:22:20:b0:77:a8:3a:40:19:98:86:f2:b4:
                    30:3b:53:8b:ea:69:61:95:72:1c:1f:1e:f4:c9:74:
                    39:f0:8a:c0:b3:e1:07:0c:a6:4b:3b:8b:ba:31:3e:
                    de:3a:f5:db:ba:1d:a4:a6:82:35:da:46:9c:50:85:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6B:49:B3:D0:B0:9C:87:0E:86:AE:87:51:DF:61:4C:A0:30:45:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/280c0791-6419-3a0f-85b2-6d0bcc9535f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:eb:3e:75:84:d1:b7:f0:65:e6:0b:75:18:d0:6f:48:00:f5:
         37:06:36:26:fa:ca:b9:79:c8:cf:2c:e4:81:35:57:3b:ba:3e:
         f7:a0:99:d5:39:5c:6b:fe:43:80:4a:d8:a9:68:cb:cb:3a:5c:
         e9:a4:d7:1a:c9:45:ee:c8:80:93:c7:d6:79:88:f9:20:9e:cd:
         7e:bf:86:cf:cc:85:7b:6d:b1:62:e4:34:e3:58:a9:52:6a:c9:
         64:10:9b:6a:dd:49:ca:21:8d:a7:68:a5:39:5c:c3:06:76:40:
         c4:0e:9b:b7:d6:10:79:a8:45:94:4f:fa:59:2f:4b:36:09:8b:
         c8:b1:76:0e:a9:30:bd:8b:99:09:00:b8:9a:b3:ab:ac:ea:dc:
         e3:58:56:28:6f:19:88:cd:93:a7:03:2b:ff:8c:3a:0d:86:54:
         47:73:59:c2:11:fc:84:d0:14:ed:35:8a:5b:67:4a:2e:43:dd:
         69:de:b5:61:31:fa:89:e4:59:d6:78:bd:2b:10:e5:90:96:fd:
         1a:1b:91:87:84:3c:32:25:59:ba:48:2e:4b:4c:ae:c5:31:18:
         60:d6:dd:bf:21:f8:65:d1:f1:32:e6:dc:1a:11:f5:b9:cb:c1:
         c5:e1:01:8c:eb:8f:de:44:27:9c:7a:7b:db:84:6e:01:41:e8:
         5e:72:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 17:16:41 2025 by rpki-client