Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b33f2436-5d38-32dc-b635-6bdc0665d3a6.roa
File:                     b33f2436-5d38-32dc-b635-6bdc0665d3a6.roa (raw, json)
Hash identifier:          DguyganBqJFFeNE/agfbn3XMNyHHLWcC1E1qLnFVPIc=
Subject key identifier:   FA:3D:0D:05:E1:F7:A0:04:75:F3:3A:CA:4D:B9:83:FA:49:0E:FE:38
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847EA5A119D35D8222B65B52500
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b33f2436-5d38-32dc-b635-6bdc0665d3a6.roa
Signing time:             Mon 18 Nov 2024 02:00:27 +0000
ROA not before:           Mon 18 Nov 2024 02:00:27 +0000
ROA not after:            Sun 16 Feb 2025 02:00:27 +0000
asID:                     21769
IP address blocks:        67.227.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ea:5a:11:9d:35:d8:22:2b:65:b5:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 18 02:00:27 2024 GMT
            Not After : Feb 16 02:00:27 2025 GMT
        Subject: CN=516973e0-c3f7-45a7-ad1f-f808c0455f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:f0:1a:2c:42:42:2f:39:14:98:d6:10:51:
                    90:0e:7c:19:d7:f0:5b:20:0a:e5:e4:ca:50:5e:a8:
                    e7:f4:da:9c:b5:f1:ed:34:41:be:15:b7:9c:86:16:
                    aa:26:02:d9:82:30:15:d3:20:46:00:c5:81:4e:4c:
                    c2:39:74:ee:85:a7:b6:af:5b:eb:c6:a8:ea:8d:cb:
                    55:b5:5b:64:ec:a8:f3:ff:d5:e6:68:3e:66:e7:29:
                    81:2f:62:fb:93:d3:bb:53:a3:40:0c:26:1c:d3:5f:
                    76:51:25:f2:99:29:8a:91:70:ef:fd:4d:2c:02:e7:
                    48:9f:73:a5:0a:fd:cf:c4:8a:58:8c:e5:4e:36:0e:
                    5a:e9:99:79:8c:74:2a:36:09:1a:44:59:be:6b:e0:
                    13:7a:8b:0d:a9:37:a4:ef:f9:7a:ae:53:5a:e5:8b:
                    57:f9:51:b6:bb:25:59:a4:a0:91:98:f7:c4:8b:3b:
                    b4:7b:50:55:8e:42:7b:a3:49:b9:08:c5:69:bb:19:
                    a3:89:3c:97:6d:03:41:79:4b:bc:ed:82:50:70:e5:
                    21:78:f7:90:2d:87:ea:cc:6d:6c:60:e4:c8:1b:60:
                    fb:90:7d:71:2f:7d:9b:71:6b:ca:10:c6:9f:02:95:
                    cb:5b:1f:d6:36:4f:c8:b8:49:e8:0e:b7:17:a7:01:
                    80:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:0D:05:E1:F7:A0:04:75:F3:3A:CA:4D:B9:83:FA:49:0E:FE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b33f2436-5d38-32dc-b635-6bdc0665d3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:74:f6:00:ef:b9:11:c8:d4:07:d5:7a:43:99:d2:cb:d8:96:
         66:71:2c:a1:52:d9:ff:93:b8:18:87:8b:cb:85:cc:eb:0f:1e:
         cf:d9:40:7b:c0:1d:8c:13:d0:1d:80:b0:3a:b3:b1:29:85:52:
         95:83:65:e2:9f:e7:53:58:64:46:5d:64:d8:f5:91:b2:7d:8a:
         08:c4:68:de:2f:67:b7:99:ed:b2:be:92:f5:f0:02:87:ff:04:
         3c:f3:ba:fe:59:10:b7:76:af:1b:54:54:03:99:ac:88:ab:6b:
         f0:4b:01:09:d8:0f:95:72:a4:26:97:d4:31:d8:5f:8a:a9:7e:
         b2:31:8f:df:4f:91:34:d7:47:4b:95:4d:36:d9:8b:be:08:4b:
         f0:e4:cc:74:5f:83:5e:ab:ff:4e:51:5f:dc:60:93:56:79:4d:
         39:f5:f8:c6:b0:c5:a8:b3:fb:50:3b:9c:c0:10:1b:c3:ba:a8:
         6b:5b:1b:48:32:65:15:19:e6:6d:1d:08:07:40:50:48:c4:ae:
         07:d3:e0:4a:77:8d:c7:36:27:47:31:7e:4c:ac:33:c1:26:13:
         68:64:c9:38:32:30:5b:59:17:12:a4:8a:78:f7:cb:e9:2a:4d:
         bb:fc:00:76:bd:0a:1f:42:98:af:0d:c5:72:b0:2e:ee:20:41:
         19:18:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:12 2024 by rpki-client on console-ams.rpki-client.org