Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/324c3a01-1231-3044-9a72-6264873c42fb.roa
File:                     324c3a01-1231-3044-9a72-6264873c42fb.roa (raw, json)
Hash identifier:          YMrUzbspOi7K0fxvp2VgQrRDISBRvFWADebb6lUjemk=
Subject key identifier:   5C:16:97:B3:D0:32:03:EC:F3:8D:27:CE:9B:C8:5C:82:E9:51:C6:1B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847888659ABA4FFCDA548E08100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/324c3a01-1231-3044-9a72-6264873c42fb.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     63023
IP address blocks:        216.122.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Dec 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:59:ab:a4:ff:cd:a5:48:e0:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=56667ad5-a6c1-4a66-8cc4-5bd9a1c0c8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:2e:5f:92:65:55:67:72:4c:58:6b:51:d8:
                    6e:49:9d:7a:45:af:4f:41:1c:9f:39:3f:9b:a3:a9:
                    a9:dd:cf:1d:19:1b:95:f9:b6:7e:8c:c8:57:f0:92:
                    ea:8c:29:4b:bd:1f:60:59:74:c0:c5:76:d0:41:73:
                    c3:a3:67:0f:ae:ea:67:17:b0:3f:27:e9:8a:b1:bd:
                    2d:66:39:c3:7d:58:99:f2:30:8a:28:46:b9:31:17:
                    85:3f:24:9d:35:71:6f:23:7b:e5:9d:55:b7:eb:15:
                    81:cc:c2:4d:8b:ea:6b:48:98:e3:cb:2a:30:da:77:
                    9c:44:a3:7d:ac:56:f8:36:b1:12:82:93:8f:f8:86:
                    53:3a:cd:e4:7e:0e:0c:9a:49:01:c6:27:ee:43:86:
                    33:49:99:cb:0d:11:91:8d:d8:fe:11:c6:1a:2f:8e:
                    95:c5:cf:95:43:20:04:04:e0:d1:d0:22:0e:e2:5c:
                    7e:a8:a9:e9:a2:cf:e7:52:e1:ca:58:1b:a5:ec:b2:
                    13:ee:5a:f4:16:00:99:bd:cf:57:41:14:da:40:0c:
                    a6:49:59:22:d9:30:09:9e:2e:f4:02:a2:ee:9e:94:
                    06:80:10:45:bd:59:79:12:7c:d7:61:00:63:3c:eb:
                    83:b8:6f:22:8e:8b:f9:c2:e7:00:c2:04:a4:99:ac:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:97:B3:D0:32:03:EC:F3:8D:27:CE:9B:C8:5C:82:E9:51:C6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/324c3a01-1231-3044-9a72-6264873c42fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:07:10:ba:0c:18:2f:1f:41:2a:a4:a2:cd:dd:18:bf:7d:77:
         e5:2b:ae:c1:1f:94:19:27:63:26:fe:a0:77:df:a1:85:9e:bf:
         39:9e:6b:e4:f2:13:b6:b1:1a:10:aa:01:1b:b5:c7:f0:a5:9c:
         79:fe:8a:f1:87:dd:33:81:0c:fe:e3:87:6b:47:70:b4:f8:86:
         b2:e6:60:9d:81:bf:82:fb:9e:22:4a:a4:29:fc:cc:cb:3d:ad:
         f8:52:9f:55:de:84:64:73:37:fe:05:6f:7a:ef:8f:88:ad:94:
         12:47:f4:13:ce:65:4f:a7:d2:69:1a:e9:83:48:40:dd:3a:cc:
         3a:c7:c0:9e:18:ce:87:83:81:86:8f:da:b0:3b:7a:94:8a:31:
         5e:a1:57:1c:81:9c:60:9d:38:73:76:97:f2:c7:8b:75:31:e0:
         51:a7:4d:b9:45:07:40:da:44:16:de:2d:b7:12:9e:61:2a:c1:
         64:66:f0:26:93:64:c8:03:41:c4:fd:c6:f1:43:9e:7d:57:cb:
         16:4c:64:46:2b:6c:e8:bc:af:31:79:42:1f:a7:91:37:47:e8:
         fc:6f:8f:46:77:f5:af:8c:66:31:69:7a:f3:4a:b7:e8:62:de:
         a1:06:8b:5f:4a:c9:74:36:20:8c:87:92:96:02:43:21:dd:98:
         4e:35:a2:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 05:00:58 2024 by rpki-client on console-fra.rpki-client.org