Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a380aade-7722-3a12-9ea5-626f30f2431a.roa
File:                     a380aade-7722-3a12-9ea5-626f30f2431a.roa (raw, json)
Hash identifier:          hqj1S8gW7s0Tw0WpCZOLMNNk2mVjis3TtVlld7vf2zA=
Subject key identifier:   C5:C8:1B:12:A5:4C:0A:1C:07:76:16:15:8B:33:A2:0B:3A:32:FD:00
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584878BAFF2629766A77D7E37700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a380aade-7722-3a12-9ea5-626f30f2431a.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     151734
IP address blocks:        216.122.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:ba:ff:26:29:76:6a:77:d7:e3:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=b4fc8025-71eb-46c3-93bb-46b7cdfd7398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:9c:9f:fb:fa:6d:fb:d6:dc:e0:41:ec:91:
                    59:da:00:ac:5b:df:d5:54:6e:ee:a1:25:d4:8f:9d:
                    01:33:54:9c:81:99:8a:10:92:6a:bc:3c:9f:37:e5:
                    88:05:c7:c4:65:8b:98:6c:cd:ea:39:2e:21:c8:77:
                    1a:55:bd:19:5a:37:33:f6:0f:75:c6:b1:aa:5f:48:
                    93:7a:5d:44:56:de:71:76:d5:65:d2:3b:36:ee:8b:
                    b0:fe:e9:68:18:b7:43:3f:8f:70:31:03:73:36:0e:
                    c6:87:5d:17:60:e8:42:e6:2b:32:cf:08:84:95:98:
                    ed:94:cf:bd:d4:19:b5:a6:cc:1c:f6:59:4e:1b:38:
                    e6:15:d6:99:63:f8:a0:7d:3a:1a:e8:50:b7:f0:a7:
                    ba:66:c9:b6:18:17:54:8e:a3:9b:97:61:c4:4d:1f:
                    1e:28:e9:ff:d0:3b:3e:92:c2:27:a0:98:36:da:de:
                    06:8f:8d:f1:d7:83:be:2e:12:79:49:9b:9e:73:6f:
                    cf:95:63:45:30:56:8d:e4:9b:6e:2d:59:cf:91:62:
                    ed:e1:9f:3b:b8:1d:53:42:0a:5c:d4:f1:c3:7c:7f:
                    0e:bb:38:07:c0:60:d0:0b:c1:f8:d7:90:6e:14:c0:
                    cd:46:da:85:54:4c:0e:a3:18:f9:10:d3:fd:f9:1b:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C8:1B:12:A5:4C:0A:1C:07:76:16:15:8B:33:A2:0B:3A:32:FD:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a380aade-7722-3a12-9ea5-626f30f2431a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:b2:22:44:64:1a:6a:79:ef:a2:aa:34:b5:e5:e9:ad:11:
         19:55:62:a9:cb:0c:34:c7:0e:53:8e:09:b1:ac:3e:93:81:e5:
         84:89:0c:32:b7:eb:dd:84:41:8e:0c:aa:f0:01:48:48:f6:6b:
         2b:3f:a0:83:6e:98:fd:bd:f7:fe:9a:ef:ff:c3:b0:0d:2a:3f:
         68:c6:d2:89:7b:33:11:72:9b:e9:d3:08:0e:19:43:0a:c1:33:
         fb:75:14:c0:10:1d:f9:b9:a3:9d:24:91:d1:79:7b:59:44:3e:
         2a:b7:97:08:37:a1:f1:18:70:58:9a:26:85:e4:d5:cd:a1:66:
         c7:be:cf:c2:9a:91:09:22:fd:b5:22:06:33:74:52:84:53:19:
         07:17:9a:d0:28:7d:50:f5:14:80:8e:35:85:a3:a6:11:04:4f:
         8d:64:9a:14:41:33:cb:ef:1c:17:07:89:11:70:ea:33:83:ef:
         ba:4a:83:e2:68:ae:c6:0a:35:68:f7:dc:a2:bd:7f:1f:8b:01:
         e1:21:d7:ab:aa:af:b2:19:87:cd:c8:15:2a:e5:65:a6:ab:04:
         a3:6b:ba:0d:29:a2:72:1d:bf:16:a6:b0:ea:f4:bd:7f:78:c4:
         78:7e:08:30:ca:16:c3:79:cb:d6:bc:fb:8c:9c:f5:38:fa:51:
         7d:fc:e7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 6 19:48:14 2025 by rpki-client