Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29a68887-5a78-3f7c-8d46-d39c8fc61863.roa
File:                     29a68887-5a78-3f7c-8d46-d39c8fc61863.roa (raw, json)
Hash identifier:          6sCJJe8sRDu+BWY+TYDGnfgpykxxO5fruwfOdneFnQw=
Subject key identifier:   F9:53:92:3E:AD:35:59:57:29:FC:16:CF:82:06:49:C2:86:88:E7:43
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584837EB1D86862E89CC77F60180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29a68887-5a78-3f7c-8d46-d39c8fc61863.roa
Signing time:             Sun 15 Dec 2024 20:50:04 +0000
ROA not before:           Sun 15 Dec 2024 20:50:04 +0000
ROA not after:            Sat 15 Mar 2025 19:50:04 +0000
asID:                     214054
IP address blocks:        184.174.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:37:eb:1d:86:86:2e:89:cc:77:f6:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 15 20:50:04 2024 GMT
            Not After : Mar 15 19:50:04 2025 GMT
        Subject: CN=1a9474e4-5e4e-424e-9596-f9d40dac2d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:8a:52:10:ac:1a:ab:ea:4f:58:2d:2d:fd:
                    e7:6b:6b:d4:23:fa:c1:27:87:66:0d:53:e7:24:1c:
                    7b:1f:e4:8e:a5:cc:99:72:ef:70:0a:ae:65:1d:03:
                    f6:d0:32:7e:ae:55:ab:82:4f:ee:cf:94:87:80:9f:
                    8e:66:b9:b4:ab:fa:93:27:43:f5:d6:ab:37:dd:74:
                    eb:3c:bf:c8:71:19:6e:53:ea:ee:40:d0:6c:e1:44:
                    0a:4c:59:fe:30:ab:ca:97:0e:f0:6c:e1:cc:01:57:
                    56:2e:e3:c2:9f:21:a9:55:be:b5:e3:a2:5f:f7:84:
                    5a:bb:c4:03:58:80:89:69:e5:a5:2f:28:66:c7:67:
                    26:05:a7:f2:a9:ee:24:fb:ee:a4:e5:6b:98:9a:6b:
                    8f:a0:1d:c9:48:da:db:6b:f6:56:8e:11:67:06:30:
                    cf:c7:bb:c2:36:b9:fc:57:40:06:5d:93:3e:4b:28:
                    72:23:fe:58:57:35:68:ec:4a:b3:5b:2f:51:0b:f3:
                    75:da:4b:b9:e7:03:5d:a7:c0:e3:cb:f6:93:c6:86:
                    af:e7:fd:a2:4c:7c:7f:0a:bf:f6:67:58:f8:2f:bf:
                    da:01:a2:6d:6c:e7:39:71:49:33:4f:ae:26:9b:f3:
                    37:be:6b:c6:9d:3f:52:e9:e8:f7:5b:2b:21:39:64:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:53:92:3E:AD:35:59:57:29:FC:16:CF:82:06:49:C2:86:88:E7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29a68887-5a78-3f7c-8d46-d39c8fc61863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9b:82:1f:2a:1a:30:69:4f:d7:b5:5d:df:89:04:c0:75:5a:
         40:0c:8f:53:71:91:5a:20:db:f2:e8:df:74:a9:12:50:56:f7:
         73:72:fa:a1:71:ba:3f:4d:fe:fb:cd:21:32:3c:4c:19:5a:66:
         2b:e1:a9:37:92:f8:7c:de:b0:a9:4a:54:68:06:63:bf:6d:12:
         b9:74:ea:71:ce:a9:93:c9:52:90:2f:7b:bf:e2:05:ee:5e:df:
         5e:34:d0:c7:13:07:39:f2:53:62:e6:75:3e:7c:1c:32:23:37:
         3d:f2:53:b4:17:15:aa:51:30:82:38:c8:2f:b7:b4:71:43:75:
         84:b6:3c:99:28:f4:c2:a4:c2:69:66:15:0c:4d:f8:c6:28:f1:
         ad:b7:a2:b9:74:91:4e:af:6e:8d:aa:52:f6:8d:0d:45:17:74:
         93:d4:f7:1a:c0:a0:6b:3f:83:25:e1:a4:17:c9:39:d2:9a:70:
         96:64:61:d0:91:99:47:6e:a0:bd:f7:ba:62:f4:7a:39:69:9e:
         e5:9d:c0:43:e7:9b:09:95:64:d1:1f:79:de:2e:40:eb:97:1d:
         b7:c5:6f:bf:94:c5:d7:4d:96:32:2d:ca:50:b4:9d:ca:4e:47:
         2b:51:f5:6e:18:66:e6:a4:05:a7:e1:35:c2:b6:ca:43:86:7e:
         19:4b:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:58:33 2025 by rpki-client