Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/874cb377-870f-3a79-b4ed-a0293865f629.roa
File:                     874cb377-870f-3a79-b4ed-a0293865f629.roa (raw, json)
Hash identifier:          DFyt+Em7jat+FTnsbTyOHJ0DzfgVAS74V8+S/DA7cc4=
Subject key identifier:   0E:0A:80:BE:4B:99:C8:5C:F6:1F:99:75:2E:CA:FF:4F:BB:75:83:84
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584898D60E430F47A7649CE20E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/874cb377-870f-3a79-b4ed-a0293865f629.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     834
IP address blocks:        43.255.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:0e:43:0f:47:a7:64:9c:e2:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=edc17792-002f-426a-b7ce-dccbd6cc84c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:bf:8a:0a:0c:71:0d:f9:9a:4c:31:73:43:
                    bd:a1:ab:87:d9:df:00:00:1a:65:d3:1d:71:cf:b5:
                    43:7d:af:9a:10:5f:a7:67:f9:b0:8d:e5:aa:b6:b9:
                    22:2b:f8:ba:82:f2:e0:a8:c8:e8:f2:f1:a4:f7:0b:
                    af:18:2e:f7:f6:d3:4c:2b:80:93:2e:81:cc:69:02:
                    d6:65:d1:fb:1e:d5:a2:01:1d:07:c5:9f:17:29:1d:
                    8d:3b:22:02:85:b9:65:3b:3a:21:a2:a6:ac:88:36:
                    62:ad:9b:48:4d:d2:3f:5c:6d:42:1b:de:84:c8:e5:
                    60:cd:72:f2:ca:28:d3:95:b5:42:a2:9f:eb:db:de:
                    1b:aa:d4:b1:3d:b1:f9:0f:78:16:55:29:0a:df:c2:
                    91:7b:08:80:54:1d:7b:cd:b1:13:b3:b5:de:1d:4a:
                    8c:52:97:69:e0:5c:05:b7:de:d5:c0:2d:51:e7:ba:
                    dd:b9:3f:11:42:da:e6:a9:0e:99:89:f1:de:11:0b:
                    e2:d0:c7:ec:06:10:b7:d4:ba:24:83:1b:ad:51:86:
                    20:11:0c:c3:44:27:50:2f:8c:7d:9b:5e:38:47:52:
                    0f:17:bf:cd:19:cb:f4:53:2b:9c:61:44:0d:4a:29:
                    5b:dd:a6:d4:3e:ec:05:58:4c:3b:61:d4:c6:a5:93:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0A:80:BE:4B:99:C8:5C:F6:1F:99:75:2E:CA:FF:4F:BB:75:83:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/874cb377-870f-3a79-b4ed-a0293865f629.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:c1:45:6c:05:e3:4c:4b:97:51:5d:b1:af:b8:77:17:42:
         5b:63:5f:8d:51:90:f3:eb:ea:c0:42:c1:40:cf:9c:aa:bc:d8:
         ab:2b:49:ef:d3:38:67:f5:fb:bb:6e:ce:4a:08:7d:52:25:68:
         ff:7b:92:73:86:08:d1:59:24:60:fc:3d:e1:57:f4:a1:67:fb:
         80:d0:11:43:25:06:1c:8a:1d:12:a7:89:e6:61:ff:eb:15:b1:
         74:e3:af:e9:e5:2a:e5:57:0b:f8:6f:7f:aa:61:0e:f1:81:0b:
         b5:be:67:bd:82:ff:cf:7a:57:46:8c:5a:26:49:98:14:78:bc:
         90:c3:e5:c7:40:ab:f8:b6:7c:c0:23:00:bd:a8:32:f3:86:b3:
         11:85:73:06:e3:b5:a9:d6:74:c9:b3:19:82:5f:c1:f2:8a:d5:
         2b:be:52:44:89:f8:a2:96:7f:51:98:f8:98:b8:0f:2c:5d:51:
         38:b8:f2:61:bc:7a:48:27:48:ff:cc:37:da:fa:e4:27:66:5f:
         bb:3a:89:d4:29:00:f1:6b:c5:72:f5:f2:65:c2:06:4d:83:d9:
         6d:1f:f0:41:da:f6:19:73:67:ff:29:a7:7e:fa:52:2f:47:9a:
         a8:d4:87:ae:55:11:68:6b:04:56:c1:8a:c1:5b:09:86:d1:72:
         57:0e:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:51 2025 by rpki-client