Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/324c3a01-1231-3044-9a72-6264873c42fb.roa
File:                     324c3a01-1231-3044-9a72-6264873c42fb.roa (raw, json)
Hash identifier:          tJRgX4/BjgOppQHEOTNAbrXLn9JvFPTI3mHWj8mou6M=
Subject key identifier:   44:A1:E6:C2:DD:73:12:07:50:78:4B:43:AD:A6:EA:D9:F3:2E:F9:CA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584867FAEA6DF1B7D0C45D26D600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/324c3a01-1231-3044-9a72-6264873c42fb.roa
Signing time:             Thu 02 Jan 2025 02:00:39 +0000
ROA not before:           Thu 02 Jan 2025 02:00:39 +0000
ROA not after:            Wed 02 Apr 2025 01:00:39 +0000
asID:                     63023
IP address blocks:        216.122.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:fa:ea:6d:f1:b7:d0:c4:5d:26:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  2 02:00:39 2025 GMT
            Not After : Apr  2 01:00:39 2025 GMT
        Subject: CN=0ca9ff47-1684-4143-aa79-8204cd472faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:26:3a:28:c6:81:69:1a:6d:da:f4:17:eb:c3:
                    02:4e:cd:58:31:36:de:70:77:6a:94:29:dd:a1:62:
                    7a:a4:23:d8:ed:ee:d4:c7:67:f4:ed:00:65:19:5e:
                    d3:e8:63:2e:e2:af:39:77:d7:ec:e0:3f:0b:4b:7d:
                    3a:95:d9:3a:72:9d:70:9c:27:69:34:a5:65:40:79:
                    45:8c:ff:ff:4c:ac:4f:12:6b:08:48:cc:3d:2b:d4:
                    7f:fa:4e:fb:b8:82:c2:07:d8:67:41:fc:8d:4b:53:
                    a9:df:57:43:b8:37:79:8b:8e:e6:1b:81:56:72:dc:
                    79:66:a0:c5:d2:db:aa:68:93:7b:a6:c1:2a:a2:3c:
                    69:c7:37:c2:fe:e4:ee:14:ca:23:cf:19:bc:52:54:
                    71:99:47:47:de:8b:60:b2:ae:d2:13:ce:53:9f:43:
                    31:09:60:c5:d9:bf:6e:43:6f:1b:04:e0:10:b2:a5:
                    23:c9:38:1e:8d:6a:88:75:86:fa:6a:24:23:6d:fb:
                    72:7f:06:48:fd:0d:1b:2e:76:c7:fd:f7:3f:e0:4d:
                    1f:9f:57:33:49:a9:0d:5c:86:e4:2c:05:86:36:58:
                    4c:ad:2d:22:30:0d:55:5e:f2:00:c3:00:85:f9:39:
                    f1:25:6a:07:61:74:db:c6:71:7b:25:47:37:26:51:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:E6:C2:DD:73:12:07:50:78:4B:43:AD:A6:EA:D9:F3:2E:F9:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/324c3a01-1231-3044-9a72-6264873c42fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:e5:13:0c:b5:33:dc:e2:77:f1:bc:b0:86:af:7b:02:8f:d8:
         71:3b:c6:72:69:be:55:90:98:c4:84:58:5b:b3:a7:e3:b2:de:
         5d:c7:51:5d:5e:d0:fd:53:2c:24:59:b7:0b:d5:16:c9:9d:6d:
         4a:62:82:48:76:5e:9a:5b:38:79:c9:48:f4:b4:b5:5f:9c:2a:
         97:7f:c3:8a:4b:23:93:05:82:6b:88:2a:15:f7:50:00:70:61:
         e9:50:61:46:7e:6e:b6:0f:37:e8:0e:b6:16:8d:9b:d9:a9:9b:
         35:cc:66:16:ca:c2:39:71:ec:f5:25:c7:02:33:c3:00:2a:ea:
         6c:3b:78:09:77:f3:76:b7:22:c7:04:d3:5c:de:00:29:92:5d:
         0a:4c:cd:7a:33:83:47:79:a0:9a:aa:c3:11:7e:25:45:cd:5b:
         5f:5f:d8:39:92:a2:bd:29:12:df:c8:82:98:82:0e:82:37:36:
         55:e7:44:30:b2:30:e5:de:2b:da:04:cc:67:0c:ee:58:63:ad:
         23:11:8f:9c:66:0d:81:04:36:fd:c9:60:35:3a:3f:35:db:ba:
         2a:7e:0a:15:bb:de:a7:53:40:43:05:07:02:97:e1:b4:cd:c6:
         4e:86:a6:84:da:03:b7:2e:a2:03:ea:fc:68:23:a3:f6:df:2f:
         62:1a:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:58:02 2025 by rpki-client