Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa
File:                     7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa (raw, json)
Hash identifier:          a0cgESpAvDRqerib4lYJ+zRqjdDXY4vg+G8rre81kmE=
Subject key identifier:   89:F9:54:3B:57:83:77:CA:B3:F1:FF:60:49:08:85:0B:69:81:EE:EC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584871C06EBCAD055B9E90277480
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     61317
IP address blocks:        199.182.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6e:bc:ad:05:5b:9e:90:27:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=374a5224-bc22-41cd-a4e3-d2b7cc74d868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:32:bd:91:78:62:15:b1:96:02:51:14:cb:
                    53:42:ee:36:53:a7:c0:d0:3c:c3:5e:47:51:11:3e:
                    3e:47:57:47:a2:88:55:e0:12:eb:f6:48:f5:35:2c:
                    56:9b:63:ea:33:72:18:17:80:a8:60:08:a8:16:fc:
                    c0:f2:2b:a1:3e:70:d2:0c:dd:52:f3:e2:da:cf:ee:
                    37:3a:4e:9e:b0:fc:5b:83:55:17:51:e8:07:91:03:
                    b3:e1:a5:a8:3b:b9:e4:82:12:ec:59:56:bd:50:5b:
                    d4:e1:ae:a2:91:ca:36:28:ba:1d:c8:b2:13:69:7f:
                    97:a6:98:73:50:88:13:81:57:b1:56:8c:59:3d:09:
                    97:fc:bb:44:5e:a8:74:aa:90:89:f1:60:3a:f4:99:
                    9e:57:5f:12:5b:db:78:ef:bd:c4:03:3b:48:c3:29:
                    0a:20:58:27:2c:1a:6f:5d:e6:7b:c4:90:ba:1a:52:
                    50:54:de:b7:36:b3:5d:ef:30:87:e5:18:13:6c:91:
                    cc:0a:e9:33:89:61:c4:21:22:7c:0f:31:f4:85:24:
                    f8:c6:ca:75:ec:2b:7f:4f:23:e0:e3:60:89:e1:d7:
                    23:15:c2:82:54:d2:31:3e:10:83:57:6b:3c:65:aa:
                    99:cd:96:7c:e0:7e:0c:dc:88:f8:d5:e7:02:84:f2:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:54:3B:57:83:77:CA:B3:F1:FF:60:49:08:85:0B:69:81:EE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f9b09d6-bbb9-3b1b-9879-3ec63e9533ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:42:dc:82:fa:b6:d8:c0:e0:29:d7:fa:17:e1:14:0e:6c:01:
         67:90:43:90:80:ef:8c:2b:83:c5:8d:7f:01:a1:fd:18:32:47:
         fe:28:c4:df:8f:03:6b:5f:d6:58:d5:c0:ce:5d:6b:92:b0:76:
         28:35:03:9a:88:3b:c4:d0:ce:16:8e:f0:1c:77:4c:81:59:64:
         e8:b2:46:5c:a7:e3:26:d8:88:d1:db:26:7a:8f:ca:09:04:37:
         e5:59:8e:d9:20:97:cc:eb:f5:b7:4c:3e:50:65:72:97:2b:59:
         6b:f3:39:56:c0:ed:55:c7:58:68:ed:e3:eb:84:b7:65:39:09:
         cb:22:fe:1d:df:95:98:b3:df:20:e4:37:85:03:e6:a6:48:27:
         06:4a:91:e0:57:60:9e:37:03:cf:27:84:df:0f:24:ee:b6:bc:
         89:ea:66:c8:55:c7:3e:fe:ac:9a:d2:64:e7:0d:1e:bb:f0:d2:
         82:a0:4c:a3:32:24:7e:12:e1:06:ac:12:b9:d3:bb:28:de:a9:
         3e:75:02:30:db:d5:63:47:db:b0:ad:bc:26:f2:25:e1:38:13:
         5a:8a:48:e4:18:16:eb:db:14:39:63:b2:da:12:10:e0:ce:8d:
         15:69:bb:60:9b:61:53:f3:6f:2d:fc:c7:17:d0:06:7c:b4:5f:
         1e:1d:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 06:29:42 2025 by rpki-client