Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2e4e78f9-3d8f-3dca-bfc4-caa3ac05dd5d.roa
File:                     2e4e78f9-3d8f-3dca-bfc4-caa3ac05dd5d.roa (raw, json)
Hash identifier:          VVrlfo9FXyiQh0Gt6f1EE9Q3Drf7KQsd3GGmLV7mrCo=
Subject key identifier:   19:A8:78:53:64:1D:2F:81:9D:77:52:98:70:16:97:A0:45:A0:C7:EA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845131AE4C9DEB26074D1F15580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2e4e78f9-3d8f-3dca-bfc4-caa3ac05dd5d.roa
Signing time:             Sat 02 Mar 2024 14:00:31 +0000
ROA not before:           Sat 02 Mar 2024 14:00:31 +0000
ROA not after:            Fri 31 May 2024 13:00:31 +0000
asID:                     251167
IP address blocks:        184.174.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:13:1a:e4:c9:de:b2:60:74:d1:f1:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  2 14:00:31 2024 GMT
            Not After : May 31 13:00:31 2024 GMT
        Subject: CN=51951ef2-5d1d-4ee0-9f8d-7f8ad5bcf2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:e5:0b:a9:ab:e4:92:ce:fe:2a:88:9e:1e:
                    50:de:ab:5a:3a:c4:2b:3e:cd:07:74:bc:71:d4:a4:
                    78:8e:88:90:ce:90:2a:13:28:cf:23:57:7b:72:63:
                    21:a2:11:cc:96:3b:22:91:7c:44:45:c4:b4:0e:a3:
                    d2:f6:d9:cc:9f:a2:3e:55:d8:f5:f3:bf:96:0e:57:
                    b4:c3:80:20:1b:b1:5b:0d:f4:47:7a:f3:77:b5:a6:
                    93:bf:1f:46:d9:a9:d4:12:70:12:24:d6:d7:37:6a:
                    0b:ff:8d:82:b6:b9:06:ab:a2:01:2e:00:00:50:95:
                    b2:a7:43:33:47:0c:a9:27:77:e6:d9:6f:07:c9:1e:
                    be:d8:a1:21:b0:30:3e:81:e8:44:90:bc:38:0e:19:
                    ab:e8:33:be:e0:b0:8b:67:df:b6:c5:e9:8e:19:b7:
                    7a:31:d7:0e:aa:04:85:b5:e3:bf:4a:a6:36:2d:a1:
                    1f:25:e1:8a:97:04:c2:2f:fa:06:10:57:de:1e:cf:
                    48:b0:71:fc:91:da:47:63:c0:aa:b9:53:3e:b0:30:
                    16:07:85:52:39:ea:ac:5c:43:48:8f:13:03:72:1c:
                    32:51:43:f9:b5:29:cd:35:04:0a:52:be:74:1f:a4:
                    c6:03:20:2e:f8:7b:bd:b6:b9:4f:31:92:bc:4c:d0:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A8:78:53:64:1D:2F:81:9D:77:52:98:70:16:97:A0:45:A0:C7:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2e4e78f9-3d8f-3dca-bfc4-caa3ac05dd5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:d0:cd:59:e7:ff:96:ab:5b:e4:a0:81:43:91:32:6b:bd:b8:
         de:95:7b:98:13:fe:36:c3:8e:74:26:01:90:3e:ab:5e:a2:f5:
         ec:3e:ad:74:d8:34:e5:10:b1:73:b7:7a:0e:6c:72:f4:e4:ba:
         b1:55:da:98:63:e5:76:48:32:8e:dd:e3:39:ae:db:da:fb:e3:
         e4:2d:2c:1e:3e:2d:a2:12:6f:4a:c5:2d:b7:53:5e:ad:42:aa:
         e7:6a:ea:67:b5:ba:4a:da:ff:9c:b6:da:fc:f4:e7:f8:fa:98:
         87:fc:fd:cc:a4:fd:e6:b4:f3:d1:6b:c5:2e:0d:e7:1b:77:0d:
         dc:1a:94:da:6a:64:c8:7a:b6:67:9f:d5:4b:e1:6c:ac:a2:62:
         7a:e6:6a:15:a8:1a:1c:fe:d4:87:a8:18:a4:65:a4:33:54:07:
         bc:0e:4e:ea:bd:b4:ae:67:ba:75:a6:14:55:90:4d:a5:3e:4a:
         3a:e6:ff:25:89:36:26:0b:0a:27:b7:64:63:43:67:33:67:be:
         27:8a:c6:48:bf:d9:08:2a:11:79:07:59:c1:9e:fe:62:39:7a:
         3b:f1:ca:5a:43:d0:01:a6:ef:3d:be:36:32:cb:24:c8:61:c2:
         8c:9b:fc:37:6a:d3:6a:c6:46:03:c4:65:2c:dd:38:f1:32:2d:
         5c:2a:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:59:46 2024 by rpki-client on console-fra.rpki-client.org