Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bd302ad-eca4-392a-a53a-cbff7c96a108.roa
File:                     3bd302ad-eca4-392a-a53a-cbff7c96a108.roa (raw, json)
Hash identifier:          iz/Ydp6mWn5cy9IpmStBvUkxDXSHBmEVn67vLWLPJ70=
Subject key identifier:   D9:C4:6E:87:8D:38:42:28:B3:FB:64:66:19:58:04:B8:77:68:02:57
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848705AFD17A1A5D96450719C00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bd302ad-eca4-392a-a53a-cbff7c96a108.roa
Signing time:             Sun 05 Jan 2025 02:00:39 +0000
ROA not before:           Sun 05 Jan 2025 02:00:39 +0000
ROA not after:            Sat 05 Apr 2025 01:00:39 +0000
asID:                     25653
IP address blocks:        173.211.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:5a:fd:17:a1:a5:d9:64:50:71:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  5 02:00:39 2025 GMT
            Not After : Apr  5 01:00:39 2025 GMT
        Subject: CN=495aa496-9c2f-4e4e-aaf1-d459a28e9d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:02:43:37:8e:5e:ab:c5:26:e9:aa:ef:fb:13:
                    30:c8:e0:49:0d:62:cb:0b:ce:11:23:73:13:c8:39:
                    36:3b:14:b2:ce:fd:23:fc:aa:ae:42:54:fd:25:6e:
                    97:0a:68:ec:8b:42:c6:c8:66:cd:64:51:7a:81:29:
                    d7:52:70:f6:08:73:2c:7e:ca:ff:70:36:5f:e0:61:
                    1a:8d:fb:ff:c4:d4:86:e9:0e:48:ef:21:fe:e9:35:
                    65:bf:65:90:8c:60:24:9c:ce:02:6e:82:b6:97:ea:
                    86:df:a9:a9:9c:04:10:57:94:57:4c:2a:07:4a:e2:
                    22:7f:1d:b4:2c:b0:63:f9:98:5d:0f:8e:b6:34:19:
                    af:40:8d:b7:fe:5b:86:65:9c:2e:ee:a1:f8:d4:78:
                    d5:32:d6:70:c9:94:30:12:15:b4:3a:49:d5:46:1d:
                    10:cf:11:78:ad:f0:bf:d4:45:d8:f1:fb:38:9a:a8:
                    6e:3b:88:36:ff:26:7b:12:02:54:47:e1:c7:c5:b6:
                    83:fb:ef:85:77:5d:78:82:5c:29:52:46:62:03:22:
                    14:3a:a7:b3:fc:73:46:81:03:e1:c0:a6:f6:a7:1c:
                    ec:74:c9:ce:a9:c5:d5:24:03:52:bd:1c:3a:e9:93:
                    1a:7b:28:88:dc:46:62:a5:46:11:9d:fe:5b:32:48:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C4:6E:87:8D:38:42:28:B3:FB:64:66:19:58:04:B8:77:68:02:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bd302ad-eca4-392a-a53a-cbff7c96a108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:07:c1:13:c7:0e:ed:0a:97:43:6c:4d:bb:ec:c8:51:03:38:
         9d:c2:99:30:a3:e1:6f:af:ea:22:64:44:41:ad:8a:8d:f1:ed:
         75:7d:76:96:17:81:f5:c4:c7:fb:71:7a:b8:11:81:11:66:2e:
         97:2e:9e:f7:ad:5c:af:48:09:83:5a:f2:9f:a9:ae:d5:38:82:
         6f:4c:92:7f:00:09:71:f0:3c:2d:50:17:16:a5:10:0f:1c:b4:
         97:2f:3a:b2:e9:f8:4d:f0:b9:51:29:23:61:08:72:b7:f6:2a:
         06:94:c9:04:03:98:20:05:83:43:d7:2e:e9:f1:18:a0:03:55:
         0c:ec:c0:f2:74:8e:4e:9f:0e:fc:a6:c4:87:3f:05:95:37:b3:
         1d:28:63:6b:2f:0d:5a:03:9f:23:84:ea:e4:cd:ac:72:09:df:
         b8:b4:3f:ef:3a:3a:e2:4f:bc:22:7a:da:da:b2:36:92:fa:4c:
         23:d9:b9:d5:40:d4:73:56:b0:5a:5c:91:c1:42:51:b5:57:e0:
         ac:4d:60:af:70:e5:5c:9a:cd:fa:94:05:c7:2a:11:68:67:c1:
         8c:76:d1:c9:ab:d5:8a:52:ae:99:e4:b4:81:28:f2:57:04:19:
         d8:99:f1:de:f4:ba:08:a1:18:b6:93:9d:d7:2c:65:dd:eb:0f:
         fa:65:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 08:00:39 2025 by rpki-client