Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6a82052a-403c-3892-8945-c65a38b07d09.roa
File:                     6a82052a-403c-3892-8945-c65a38b07d09.roa (raw, json)
Hash identifier:          GWeRBg8pEx082lNFGJ9uXaFzzqvb/iD1qrruMtaVHD4=
Subject key identifier:   9E:8F:99:9D:23:58:88:28:ED:01:01:E4:80:4D:07:A6:CE:50:EA:A8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858486C2B05BCEB5373DBA4695480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6a82052a-403c-3892-8945-c65a38b07d09.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     13332
IP address blocks:        174.140.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:05:bc:eb:53:73:db:a4:69:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=150c5947-72b0-4c7d-a83a-221b39f16c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:a2:59:ee:0a:49:f3:f1:63:67:55:95:6b:
                    75:ac:ec:40:8a:ea:8b:c7:4d:00:a6:90:55:d2:20:
                    b5:94:68:e5:8d:67:d2:e2:24:77:4e:4b:fd:f8:a6:
                    5a:3e:b9:0a:52:7f:98:8b:f6:1a:22:50:66:62:68:
                    8e:8e:89:15:49:8f:5e:ad:9a:8f:2d:24:5c:b9:08:
                    89:51:9c:aa:55:ce:29:04:26:be:dc:c4:e5:d4:e7:
                    1e:03:2e:7d:e8:9e:23:a8:0b:3f:79:98:df:71:67:
                    79:fd:c2:ad:54:e5:25:5b:fe:98:90:2f:0c:a6:74:
                    6b:00:3f:43:8c:86:2a:36:ff:47:c1:87:63:95:6a:
                    ba:c2:8f:4d:75:e9:5d:29:2e:57:58:c8:54:54:e2:
                    24:25:2a:84:20:c3:8b:ae:3a:e2:3a:f0:56:f9:e9:
                    5f:3a:5b:01:1a:30:c2:28:bc:4f:96:f6:e8:9f:f6:
                    fe:c3:b6:9d:40:87:4c:d9:8e:a0:d6:7c:2f:06:60:
                    74:1d:ae:b9:27:69:6c:4e:81:37:f6:66:27:a4:59:
                    d9:41:0a:2d:0a:15:40:a6:38:28:20:4a:54:b5:2b:
                    f9:c9:44:c2:dd:09:ad:b5:6c:7b:ab:f0:86:02:c7:
                    c2:5c:22:f8:57:b5:3c:22:46:12:42:8f:58:3b:67:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:99:9D:23:58:88:28:ED:01:01:E4:80:4D:07:A6:CE:50:EA:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6a82052a-403c-3892-8945-c65a38b07d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:2f:65:96:b7:cc:df:fc:71:b4:dd:22:bd:64:c7:0f:22:9f:
         93:a9:83:04:83:6f:11:e4:1b:b7:da:27:8d:34:11:23:d9:db:
         52:f0:1c:a4:fc:84:95:53:31:68:b3:23:0e:44:73:57:84:d5:
         0f:96:6a:7e:03:9c:41:a4:89:dc:28:2c:fc:6c:60:fd:b1:7b:
         a1:a5:9e:9e:db:cb:3c:c2:21:d7:ac:27:af:dd:9e:39:43:8a:
         81:c5:b7:79:54:e6:0d:56:e8:e1:d9:c0:73:82:03:7d:0a:2b:
         98:ef:0b:f0:c6:39:27:b8:0d:15:f9:0d:60:95:16:fe:95:c0:
         cf:88:e0:af:39:87:57:7f:dd:cf:b9:e6:3f:b4:77:bb:a1:06:
         53:4c:70:da:ba:b5:a4:e5:f6:fc:df:2c:d0:a5:ec:c9:f8:c0:
         24:6d:63:66:f4:c0:99:37:14:04:49:4c:58:74:bb:79:2b:17:
         63:ca:68:d1:9b:cb:43:22:47:95:af:19:ef:5b:f2:2f:41:63:
         b7:32:5f:c1:4a:d8:41:dc:e6:81:29:db:c4:f1:5b:ea:9d:86:
         a7:99:f3:54:09:c4:4b:ad:ba:86:56:73:93:41:de:06:2b:10:
         af:cc:2e:ac:c4:b9:84:a4:10:f8:9a:e6:c3:3f:01:e7:28:54:
         95:7f:2f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 22:44:39 2025 by rpki-client