Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5034a961-24f8-3adc-a0c3-482e08285069.roa
File:                     5034a961-24f8-3adc-a0c3-482e08285069.roa (raw, json)
Hash identifier:          eow/WVEbhC1gL708eoe7MdlABb8FNBz+GjZ0npPzopg=
Subject key identifier:   5B:2F:8A:2D:4F:7D:F2:54:D9:02:96:05:04:61:E2:D4:67:6B:88:46
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848673B77AB639063AA9FB700C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5034a961-24f8-3adc-a0c3-482e08285069.roa
Signing time:             Wed 01 Jan 2025 19:34:58 +0000
ROA not before:           Wed 01 Jan 2025 19:34:58 +0000
ROA not after:            Tue 01 Apr 2025 18:34:58 +0000
asID:                     215304
IP address blocks:        67.207.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:67:3b:77:ab:63:90:63:aa:9f:b7:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  1 19:34:58 2025 GMT
            Not After : Apr  1 18:34:58 2025 GMT
        Subject: CN=0f50b475-88a4-44f1-a891-d9d087a7404f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:4f:3b:a3:e6:a9:e8:d9:65:39:36:44:f5:
                    9d:fa:5f:7f:2c:a3:9d:f6:b0:3c:fe:85:e8:35:39:
                    07:db:0b:14:de:bf:9d:35:1d:2c:f1:27:9c:3b:29:
                    e1:c7:12:18:3a:1a:91:b4:19:82:1f:42:d3:10:c6:
                    e1:7e:37:4d:4c:ab:c4:fe:79:54:47:a5:af:bc:c9:
                    13:b6:b3:24:2f:06:d7:d7:fe:f8:a8:12:85:ec:d7:
                    51:74:37:20:0a:01:f2:16:06:64:11:78:00:02:52:
                    e6:b0:01:1e:de:c7:d7:3a:71:34:e4:76:d3:31:aa:
                    00:d5:2c:6e:35:60:52:76:83:b8:64:ed:e6:c8:ee:
                    d1:06:8e:c6:8e:d2:55:3f:b9:2d:ee:5b:c3:ab:a0:
                    e6:6f:a0:50:0f:c4:46:86:33:ca:83:fe:3d:96:4e:
                    24:ea:b4:4f:22:a0:3c:66:10:cc:d3:36:21:29:3f:
                    3c:a0:b7:12:3d:b4:b0:c1:fd:26:65:13:d6:3c:d1:
                    b4:23:84:a4:0a:5c:80:a0:15:7f:d0:60:79:72:eb:
                    06:18:22:49:65:30:c2:a3:60:90:c0:81:9e:76:bf:
                    65:34:00:3f:ea:00:80:85:5d:60:e2:7a:13:f1:e3:
                    87:d1:e2:14:22:e7:6d:5c:c1:89:f5:31:65:26:73:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2F:8A:2D:4F:7D:F2:54:D9:02:96:05:04:61:E2:D4:67:6B:88:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5034a961-24f8-3adc-a0c3-482e08285069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:91:b0:c6:bf:af:73:33:c6:a6:3a:98:02:b6:72:8a:de:8d:
         9d:ab:fb:89:b3:51:72:4b:ab:88:ce:07:64:a1:56:57:99:1b:
         4a:ef:dc:c0:d0:ee:ad:a0:72:c1:db:9a:66:dd:f3:38:2f:d9:
         89:1c:fd:dc:b0:d5:c9:31:19:ea:0e:7e:5d:c9:5e:6a:17:8b:
         e6:d7:f2:28:2f:d1:71:a5:4e:76:8d:d1:7b:6f:88:5c:eb:2f:
         50:db:bb:c2:25:6c:bf:57:2b:62:34:97:99:38:35:a4:8b:d6:
         90:b8:e8:46:1a:df:ab:6d:d4:fb:57:fd:b4:cd:f2:a0:27:b7:
         db:3f:9e:92:19:80:b8:9c:c0:71:2a:92:51:e9:a7:dd:aa:ff:
         d6:f2:15:28:09:b0:4c:9e:05:55:e3:54:7f:d9:26:a6:8e:b7:
         52:a2:9e:00:68:30:da:ce:ed:51:d6:f3:6e:c9:1b:da:6d:90:
         d5:94:11:09:be:52:5d:d6:f6:1c:19:9e:e3:75:0d:34:3f:61:
         34:9e:cb:cc:97:84:8b:93:d3:46:03:a5:91:26:67:93:8e:9e:
         d1:8e:0a:00:d1:07:17:5a:84:02:a7:eb:e8:6b:ea:42:04:81:
         e6:38:5e:56:40:44:93:f6:98:5b:cb:32:8d:76:78:73:f7:b8:
         48:d6:87:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 15:00:00 2025 by rpki-client