Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aeb5366f-dc8c-3276-bdfd-c962c1174cb0.roa
File:                     aeb5366f-dc8c-3276-bdfd-c962c1174cb0.roa (raw, json)
Hash identifier:          yO9ToBZCFKO7xq8aImPbW4YNy49EKIvrHJoV+60mkkU=
Subject key identifier:   FA:F8:A6:9A:78:64:D4:F1:35:73:B2:48:2D:0D:4D:AC:95:E0:DE:28
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848A19100D0DB3C1D205AF07700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aeb5366f-dc8c-3276-bdfd-c962c1174cb0.roa
Signing time:             Wed 22 Jan 2025 17:04:12 +0000
ROA not before:           Wed 22 Jan 2025 17:04:12 +0000
ROA not after:            Tue 22 Apr 2025 16:04:12 +0000
asID:                     834
IP address blocks:        199.182.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:91:00:d0:db:3c:1d:20:5a:f0:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 22 17:04:12 2025 GMT
            Not After : Apr 22 16:04:12 2025 GMT
        Subject: CN=183282be-9d26-4e17-b43e-f8ad7bf584ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:75:5f:b9:e8:f3:c1:67:b4:a6:a8:3f:7b:0d:
                    34:21:49:c7:c6:78:49:a7:02:63:bf:08:b4:fb:f5:
                    e8:6f:c1:ea:e6:fb:01:3f:6a:3a:11:38:0c:74:d1:
                    52:c7:89:82:46:40:30:b1:92:63:5c:b5:c5:df:99:
                    f2:09:bd:24:b7:34:c5:a9:5c:a9:bc:8d:b5:38:b7:
                    e7:83:b0:15:14:0d:46:ab:e0:f2:b6:5e:e5:c6:5b:
                    10:01:4b:72:21:ba:ee:e9:90:0a:10:a8:44:26:f2:
                    f6:be:46:b0:60:38:e5:53:c2:c7:ce:6a:22:96:47:
                    2f:aa:9a:7f:01:3d:c7:93:10:8e:8b:ea:87:07:5b:
                    ac:10:55:2b:58:5d:96:82:bd:bc:44:f1:8c:e9:b8:
                    5d:32:b7:2e:3f:2c:68:43:90:f6:32:96:4d:b8:60:
                    be:9f:d6:73:cb:09:17:7b:eb:2d:60:ca:32:99:10:
                    94:8e:e1:50:8e:8c:c6:db:53:20:90:f4:c9:3b:95:
                    4f:fa:4a:ca:96:2f:7b:12:3e:7b:40:02:76:f3:d3:
                    19:64:90:2b:8b:37:9b:89:a1:92:70:5a:d3:f9:ae:
                    14:10:67:b6:2b:bf:d9:93:2e:c0:d7:77:42:2f:c3:
                    82:aa:b4:73:22:d3:16:13:fc:ea:9f:9b:e7:15:a8:
                    78:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F8:A6:9A:78:64:D4:F1:35:73:B2:48:2D:0D:4D:AC:95:E0:DE:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/aeb5366f-dc8c-3276-bdfd-c962c1174cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:48:c0:d5:fa:49:7f:ad:49:80:c9:20:b6:0e:3c:fd:4c:9d:
         ae:53:88:e1:bf:e9:af:18:29:42:ee:8f:10:95:fe:28:f4:01:
         b2:40:a6:8f:7d:c5:24:e3:8a:20:d1:f1:3f:84:b6:b1:c3:cf:
         3f:9b:ad:8f:ed:19:cb:b5:6e:78:be:23:f3:89:d2:f4:d5:30:
         b7:45:fe:15:6a:e7:72:ad:70:16:79:fb:38:fc:9b:35:c6:c2:
         2d:36:b0:ee:7e:3b:92:06:8f:c9:48:fa:37:c3:ee:8e:34:60:
         e6:56:55:ee:5d:4d:f7:d8:b2:6c:fc:02:81:40:09:0a:cf:bf:
         f3:85:5d:2a:16:76:d9:f5:94:e5:47:10:da:ba:86:35:51:96:
         a6:c8:bc:2d:b7:a2:06:fc:41:6e:3c:1a:e4:8f:b9:d5:e3:1a:
         50:39:f8:20:b7:8e:e6:b5:85:be:1d:31:1d:37:bb:ae:33:1b:
         59:93:68:5b:b4:db:81:13:81:69:de:3e:7b:54:1f:17:91:d7:
         fa:58:07:85:aa:4a:77:ea:cc:d7:54:7f:53:d4:89:b4:fc:0e:
         c2:2b:3e:2e:4b:bb:5a:ee:c0:8e:37:05:be:31:f7:9d:59:5b:
         dd:01:77:05:a8:19:da:8c:cd:58:a9:4c:e1:d4:22:5e:f5:52:
         76:d8:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:44:18 2025 by rpki-client