Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa
File:                     341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa (raw, json)
Hash identifier:          4TVRIWrBSRR4Walq5oIUtLByiSRX5aqK6+Zp3xPCD6E=
Subject key identifier:   2F:90:26:1A:63:8B:CE:66:68:A6:81:55:EB:EA:8A:C7:26:6C:EE:2B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584968B424DB027E90422E614A00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa
Signing time:             Fri 04 Apr 2025 01:00:47 +0000
ROA not before:           Fri 04 Apr 2025 01:00:47 +0000
ROA not after:            Thu 03 Jul 2025 01:00:47 +0000
asID:                     21769
IP address blocks:        173.211.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:b4:24:db:02:7e:90:42:2e:61:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  4 01:00:47 2025 GMT
            Not After : Jul  3 01:00:47 2025 GMT
        Subject: CN=af47f510-d582-4558-b83f-8ace46f698a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e4:7a:1b:4b:6e:a2:90:81:bb:b0:5c:90:b7:
                    cd:a0:a9:d8:08:af:41:5c:d7:f1:90:67:b0:ce:25:
                    b6:c8:91:b5:b1:00:14:88:1f:5e:9c:f6:a9:6b:33:
                    08:65:91:fa:0d:88:f1:c2:09:24:01:f7:e0:ca:af:
                    a1:45:34:8f:5c:3a:89:1b:d2:c0:65:e1:b4:2b:87:
                    df:98:84:19:dd:f4:e0:bf:bc:c8:15:c2:c7:fb:90:
                    b8:73:78:76:59:c3:dc:40:31:4e:bc:2f:37:67:a5:
                    86:98:c7:17:ef:d7:c6:35:a2:5c:14:b4:87:5e:4e:
                    cc:da:72:90:4a:9e:66:eb:43:8a:46:dc:23:68:3b:
                    ea:a7:66:db:29:86:81:da:6b:be:4e:97:f6:e0:aa:
                    0f:8a:a1:b2:78:bf:f7:a9:ab:17:11:d6:24:ff:ea:
                    8c:c6:f4:c1:2a:6e:da:90:f9:60:4c:72:52:cb:a7:
                    fc:48:90:80:4d:3b:34:5c:d0:40:ce:a8:b5:41:86:
                    b2:37:81:45:e6:58:2f:8a:b8:ce:de:00:aa:83:a4:
                    15:de:e0:c0:b1:28:e1:24:36:f9:51:3c:28:02:2a:
                    5e:d8:a3:58:7b:35:24:34:05:29:e5:38:ec:b7:53:
                    68:65:a7:1d:09:94:bc:f4:c8:88:bb:73:0c:0e:cd:
                    05:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:90:26:1A:63:8B:CE:66:68:A6:81:55:EB:EA:8A:C7:26:6C:EE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/341fd5dc-5ff9-3334-ab94-59f2441ca27c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:82:54:07:fe:af:86:ec:1b:ff:67:9a:21:db:79:63:d3:78:
         0d:e4:b1:ce:36:71:72:f3:44:01:a6:1b:1a:68:62:65:03:69:
         6f:88:2f:32:ef:91:dd:35:9d:a1:1f:0a:7e:2e:23:8d:26:24:
         11:29:c2:c0:d1:5d:ea:89:65:16:5a:45:13:e6:b8:f4:8f:73:
         27:de:0e:5f:8b:ea:3a:c7:cb:30:f9:7a:a7:f1:92:8d:07:1c:
         e5:0e:91:94:64:1b:ad:22:4a:15:80:92:2c:02:90:f1:85:43:
         ff:ad:00:35:11:0b:8c:b5:fc:de:b3:0b:7c:06:0d:98:4c:30:
         96:6c:56:91:9e:1b:6e:0e:ff:0c:cb:19:07:e2:5e:56:db:61:
         0c:26:85:6b:0f:c2:25:c6:50:93:29:9c:77:84:4b:51:0f:1a:
         3c:1a:3f:e1:43:3b:c3:09:23:e4:c2:98:dd:cc:b1:ab:ca:3b:
         2a:38:bc:7c:b2:71:c9:59:9d:fa:c9:99:00:71:4c:9f:f1:02:
         f7:6c:3a:5b:f2:62:1f:90:11:ce:5e:09:6d:d5:00:30:c0:90:
         04:ca:79:a9:69:69:d4:3d:0f:e6:30:f8:81:a2:e7:e1:8f:4d:
         54:d3:3f:3f:d5:72:ae:5a:46:82:a0:c7:68:c5:5b:ec:ec:f5:
         04:e1:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:25 2025 by rpki-client