Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa
File:                     78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa (raw, json)
Hash identifier:          wae4e7eRuihYgEJsi8XF7l4ovs/o9Yj+M3C2DkZ2R2o=
Subject key identifier:   B1:0A:69:57:D4:38:C1:15:34:51:FF:17:5B:A3:F0:1D:97:AB:BB:3F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848D6410C5FF4BC462DE8546980
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     8987
IP address blocks:        184.174.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0c:5f:f4:bc:46:2d:e8:54:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=200c1b37-868d-443b-833a-05a4fffd5c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:95:c1:46:08:fa:1b:88:cb:66:42:17:df:
                    8b:f5:83:44:42:a9:97:3d:18:df:84:74:45:a9:49:
                    7b:b5:67:c5:71:36:0f:34:07:3a:e6:a4:d1:a5:e6:
                    14:76:db:04:21:09:16:d4:1f:52:04:28:f3:68:98:
                    85:d3:16:97:70:08:78:ac:87:71:03:ea:10:29:52:
                    f8:b9:bc:37:a6:f4:c0:6c:42:1d:76:6d:15:ab:b3:
                    d5:a1:d2:9e:1a:88:35:b1:eb:cf:9c:44:ad:c4:c8:
                    43:0e:30:25:a2:a2:c3:a7:4f:2c:9d:70:b8:a3:88:
                    f0:5e:16:be:5e:8d:ce:b8:24:21:d6:11:62:b4:69:
                    ad:b0:73:0e:8e:ff:68:59:ef:2f:72:bb:f6:3f:42:
                    04:81:8e:9d:7d:39:86:af:19:56:e6:a3:4a:d1:f6:
                    86:dd:c8:3d:0e:6d:35:cf:ba:2e:fb:1a:f9:72:85:
                    a3:fc:34:80:b5:c3:66:09:ec:36:82:d2:f0:2d:d8:
                    0c:f3:2a:23:b2:8c:31:52:65:e8:61:da:c8:14:18:
                    e9:02:e5:34:85:32:65:e8:e6:f4:c0:14:3d:76:53:
                    de:91:68:a4:f4:35:20:b0:ee:45:28:98:51:95:ee:
                    58:4a:e7:ff:80:f3:8f:43:a3:6f:a3:a9:7e:e2:37:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0A:69:57:D4:38:C1:15:34:51:FF:17:5B:A3:F0:1D:97:AB:BB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/78d42d54-f43a-3af4-a71e-1d6e93ea993e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:20:d0:32:80:d8:3a:cf:5c:94:98:d1:92:3e:0d:98:6b:
         68:67:e7:ec:bf:ad:19:67:98:ea:34:53:ed:f9:0a:75:c6:72:
         44:25:5b:b6:35:dc:48:bf:e9:95:ca:f1:f7:9f:0c:1e:f2:7e:
         b2:56:aa:b6:1f:f9:fb:a0:de:8a:4a:ed:29:c4:e1:7f:ee:4a:
         95:0f:8f:7f:28:1e:f9:8d:cf:4a:bd:ce:66:44:f5:a2:ef:b1:
         26:fe:4b:e2:05:f2:7d:b0:bf:38:4f:79:32:50:b0:a5:37:69:
         3f:66:16:9c:00:55:5d:09:d3:1a:ca:4a:5a:9a:31:73:81:d9:
         df:d0:a5:b8:f2:2f:5e:20:7d:b8:60:d0:4a:cc:a2:a7:88:68:
         c0:f5:47:3a:17:88:63:40:24:fb:60:93:4f:b5:fe:e2:b3:68:
         85:80:89:10:63:da:a9:0e:89:59:08:c0:3f:82:97:00:bf:a7:
         37:f8:a3:2a:1f:e4:8a:3c:7a:a1:7b:e3:52:4b:02:8b:fe:ed:
         ca:f4:00:98:39:20:a3:b7:dc:3a:62:90:e8:c5:8f:73:8e:1b:
         0d:50:84:41:7b:59:83:2e:e1:58:19:db:d6:26:bf:a1:9e:c6:
         e5:42:3f:e0:f5:e7:2a:e7:82:04:35:7f:dc:9d:24:42:42:d0:
         42:72:d6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 14 14:49:40 2025 by rpki-client