Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b2168384-1846-3f1e-ba10-1e86f79da0ed.roa
File:                     b2168384-1846-3f1e-ba10-1e86f79da0ed.roa (raw, json)
Hash identifier:          67zNLcbXWCKRZREqWW2zPXlpg0VfDjPRHj9anlYCKgk=
Subject key identifier:   C2:B3:1C:60:68:0C:6D:C7:ED:43:31:0C:4A:19:77:27:5A:6E:43:D1
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847FDE4D66A7CEFE91BDFB89000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b2168384-1846-3f1e-ba10-1e86f79da0ed.roa
Signing time:             Mon 25 Nov 2024 02:00:28 +0000
ROA not before:           Mon 25 Nov 2024 02:00:28 +0000
ROA not after:            Sun 23 Feb 2025 02:00:28 +0000
asID:                     9009
IP address blocks:        184.174.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fd:e4:d6:6a:7c:ef:e9:1b:df:b8:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 25 02:00:28 2024 GMT
            Not After : Feb 23 02:00:28 2025 GMT
        Subject: CN=ec09455a-d8dc-4134-a686-f6c992825c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:0f:aa:ca:53:e3:7a:0f:1b:20:79:44:c8:
                    43:32:7f:9e:ba:ca:4c:e3:d5:6f:50:3c:f5:2f:21:
                    bc:cc:e0:95:3c:61:85:90:66:bd:08:db:90:71:38:
                    36:d7:a8:6e:5f:e2:c4:d6:70:95:d6:87:f3:eb:09:
                    c2:12:0d:14:f6:98:40:47:b8:16:ca:93:ac:18:15:
                    d5:d9:03:6a:1e:c4:0a:d7:78:02:ee:60:0a:50:5b:
                    ff:f9:9a:b7:54:18:71:c9:4c:48:c5:2e:bf:a1:c7:
                    46:1a:a7:94:25:2a:5a:9d:20:6d:50:df:f0:09:23:
                    50:a4:68:c9:49:3a:89:f0:e0:f4:7f:13:f6:0a:4d:
                    d9:99:eb:7e:32:8e:db:0c:e5:af:49:75:71:21:1d:
                    9a:09:58:49:60:75:3a:88:bb:c9:aa:d6:1d:e1:11:
                    73:b4:de:48:09:39:58:fe:78:05:b7:6c:e0:ed:34:
                    ac:bd:2e:26:f8:83:8c:66:89:99:73:46:b7:6d:b2:
                    58:d4:59:71:d3:4f:76:53:6d:50:b9:85:c0:b5:c9:
                    fb:9f:e2:70:03:72:95:92:87:c7:95:37:a1:59:eb:
                    03:7d:e4:d0:9b:7b:a7:d9:00:0f:0c:bb:65:4b:4d:
                    30:85:b7:c3:55:1d:b9:ad:17:fe:a2:b8:1a:6f:bb:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B3:1C:60:68:0C:6D:C7:ED:43:31:0C:4A:19:77:27:5A:6E:43:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b2168384-1846-3f1e-ba10-1e86f79da0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:00:61:91:00:0a:a2:42:4a:fc:05:61:74:b9:e3:1a:4a:b3:
         02:85:40:38:a7:3c:26:25:14:d4:05:88:10:54:47:b6:e2:34:
         31:7c:c6:20:19:78:84:27:32:92:e3:8f:37:2a:2d:5e:9c:2d:
         75:6c:c2:2a:27:ba:50:3b:85:66:b0:be:2a:3b:26:5b:3e:3b:
         a2:12:bf:3d:a3:ab:1b:80:b5:15:e5:f6:25:4a:e3:42:f0:c9:
         fb:75:32:07:29:f6:90:53:52:2e:a4:b9:f9:b7:8e:c8:12:cf:
         b0:37:5f:c3:64:a9:67:ea:e4:dc:dc:af:4d:0f:d7:78:3e:1d:
         26:3c:0a:1f:06:b4:57:bc:fe:29:9f:be:23:dd:3d:b4:a1:22:
         fc:4f:36:72:9c:1d:36:1f:2d:05:d9:9b:90:da:12:48:85:1c:
         96:ac:aa:ab:fd:3e:be:49:10:5c:40:63:78:b1:24:62:a6:29:
         19:a3:60:c8:e8:05:33:5e:f1:2c:5f:6e:2d:68:53:46:5a:db:
         5e:db:87:52:dd:3a:70:73:15:d1:a8:d7:e0:de:cb:8a:83:13:
         bd:46:22:37:73:1c:ed:dc:d3:7f:89:ae:68:f0:db:90:3e:ae:
         00:ab:e9:7e:80:e1:a3:dd:b4:a8:ae:b5:72:78:aa:92:65:8a:
         37:88:cd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 21:43:54 2025 by rpki-client