Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d51959f-e83c-376e-ab19-b0e7934932d3.roa
File:                     5d51959f-e83c-376e-ab19-b0e7934932d3.roa (raw, json)
Hash identifier:          6zbbGIVKTQMqyI/SdMLtuAJr0qzS3h5PKEg3CdpRK6M=
Subject key identifier:   0D:D7:64:9D:2C:60:F3:83:3D:63:4C:90:F6:78:6D:A3:8D:E4:EC:FE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848159FF364E6DE0890CFED0780
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d51959f-e83c-376e-ab19-b0e7934932d3.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     13335
IP address blocks:        216.74.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f3:64:e6:de:08:90:cf:ed:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=bcf7d94a-e68a-4cff-a01e-8914febd6d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:69:c2:cb:2e:1b:69:94:fd:d1:81:15:9a:
                    1b:51:c2:97:8c:2b:8e:aa:56:fa:79:77:6e:a8:a0:
                    60:4a:14:1c:cf:1c:ac:9b:ec:99:3e:14:1e:0e:5d:
                    6f:e8:a0:c2:19:41:ec:dc:c0:ca:c4:e0:60:b6:97:
                    a4:0c:7a:9c:2a:07:d0:db:6a:20:7a:6c:7d:1b:11:
                    d9:83:b6:7a:31:d4:73:15:05:43:f8:db:d5:7a:fb:
                    b4:3d:2b:42:f7:15:35:d3:2b:c2:53:ac:29:c4:5c:
                    d4:31:1b:93:80:29:42:92:2d:ad:85:0f:c3:54:e6:
                    50:43:a3:b5:4e:9c:31:9e:8d:df:9f:33:53:5b:c9:
                    35:6d:46:1b:4d:b3:69:fc:af:77:01:4c:bf:04:86:
                    08:b1:41:37:c2:52:c7:ca:69:7b:e1:6f:ea:f3:60:
                    26:b8:12:f1:17:e4:cd:9f:94:2b:19:52:10:c4:48:
                    93:ea:21:9e:b7:73:01:51:b7:fa:0b:be:77:1a:da:
                    38:a4:7d:5a:fe:be:48:86:89:6b:ad:34:e4:66:cf:
                    81:97:05:2f:23:af:5e:7d:af:a9:d9:38:ac:ad:34:
                    15:66:0e:fa:2d:58:cf:2d:50:55:fa:07:10:6d:67:
                    2d:11:c5:e6:5b:ac:43:8e:3a:a0:ae:73:25:28:a2:
                    0f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D7:64:9D:2C:60:F3:83:3D:63:4C:90:F6:78:6D:A3:8D:E4:EC:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5d51959f-e83c-376e-ab19-b0e7934932d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:2c:b4:8a:89:37:b5:75:bc:78:95:62:81:06:37:1f:fb:
         7f:11:9e:a4:fc:ce:b6:1b:d9:a1:e0:b8:37:18:7b:b0:de:dd:
         84:59:4c:61:f9:ea:e5:c2:a1:a2:2a:b0:ec:81:47:74:43:bf:
         e9:12:28:19:70:27:ca:a3:42:bf:7e:b3:9f:25:2e:9e:78:9e:
         aa:03:af:16:b4:55:ca:23:af:8c:23:e9:9e:93:04:33:89:59:
         88:b7:5f:b7:a9:41:f9:7d:9b:bd:97:d4:a5:9f:1e:8e:a4:a7:
         aa:c5:77:56:60:3a:62:fe:a9:a2:50:82:08:cf:47:71:b2:5f:
         82:70:1e:ad:3a:ec:c5:9e:d0:18:f3:fd:28:b2:1f:52:59:bb:
         35:30:9c:44:0c:14:c9:34:56:a1:74:5d:98:50:85:44:42:c8:
         83:da:ce:5a:1b:f5:0e:59:5c:bc:a3:a6:1b:97:05:0a:5e:56:
         37:40:97:d1:51:a7:3a:cf:1f:79:69:63:3e:c8:43:b3:d1:df:
         5a:d6:d6:cb:47:c3:55:6a:a8:89:3c:46:7c:ff:30:28:66:0b:
         64:9d:4f:c8:ae:72:46:cd:57:af:83:89:f8:a4:ed:d8:a3:ac:
         02:fc:01:32:9d:b0:b3:a1:8f:02:bf:ff:d1:e3:0a:9a:4b:08:
         c2:43:71:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 21:59:06 2025 by rpki-client