Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bafc7d06-f8a4-3fe2-8f10-37c9a4557303.roa
File:                     bafc7d06-f8a4-3fe2-8f10-37c9a4557303.roa (raw, json)
Hash identifier:          N6KcWwK0kkQgcBaKjI/QOJ+0ryktcAPUdv4LOh37sSM=
Subject key identifier:   46:84:93:F7:12:C6:AF:42:D1:DC:60:2B:76:4E:B8:4C:A5:23:5E:D4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847CFD4A96CB9FB6E88CB8224C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bafc7d06-f8a4-3fe2-8f10-37c9a4557303.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     211373
IP address blocks:        184.174.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Dec 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a9:6c:b9:fb:6e:88:cb:82:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=3b15523e-933a-408b-a8b9-d4efca71198a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f7:41:d2:b6:c3:e4:af:50:60:8d:93:43:25:
                    ca:fb:b2:1a:47:bb:07:11:5a:d5:bd:79:87:84:2f:
                    07:8c:ae:c1:d6:ef:51:88:9c:8e:20:0c:ec:7e:a1:
                    a6:d0:6a:3a:24:d7:b1:db:9f:e3:27:24:b5:ca:6a:
                    ee:0b:de:dc:c3:2e:79:98:92:2c:21:7a:b2:be:6f:
                    ce:ce:83:5c:35:bb:0a:61:ab:b9:ac:9a:7a:aa:67:
                    dd:d9:a3:20:9a:9d:f4:1b:e7:20:e6:c6:9d:d3:12:
                    7b:05:8a:69:66:02:d6:03:ba:06:ec:97:f7:83:72:
                    c6:22:6f:47:af:c8:3b:22:9d:50:48:b0:8d:71:64:
                    cb:58:5f:0c:71:a2:b9:3f:31:45:6b:6e:95:1b:b7:
                    a0:b5:fe:c0:43:34:e1:07:40:2f:7c:60:6e:b9:bc:
                    b0:c7:eb:d3:e0:da:50:b8:46:51:a4:af:df:cc:a8:
                    31:47:54:94:94:4d:aa:59:f6:3b:01:1c:ea:2f:46:
                    ff:43:c4:46:9b:7a:79:7b:e0:2f:0f:5d:05:6a:10:
                    be:09:62:00:19:fe:ce:ce:17:ed:30:ec:61:69:15:
                    3e:e8:79:e8:9e:76:56:27:87:21:63:06:f9:2f:8d:
                    9d:40:fd:d1:d1:59:fa:e2:38:6a:44:3d:f5:fc:8b:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:93:F7:12:C6:AF:42:D1:DC:60:2B:76:4E:B8:4C:A5:23:5E:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bafc7d06-f8a4-3fe2-8f10-37c9a4557303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:36:55:73:ee:36:d4:4a:95:8f:36:0f:f6:ff:a4:1a:8f:2e:
         03:e9:a8:e8:74:be:fa:1d:0f:5b:4d:20:0a:c6:af:81:a2:ff:
         52:aa:9a:fa:ab:38:0b:b6:99:7f:be:ae:5d:bb:64:08:dd:87:
         31:dc:cc:94:5e:b1:2c:8c:3a:ed:49:da:80:95:e9:df:0b:36:
         b5:76:84:7b:d0:74:5a:30:e6:b4:a1:fe:cc:ba:a4:c2:c5:ba:
         c6:5f:93:17:76:f6:52:3c:f3:8a:46:bb:30:02:f7:fe:f7:0a:
         6f:70:ed:11:66:2c:1c:dc:a3:ff:b7:d9:06:2c:d8:27:6a:ba:
         20:bb:07:4d:32:bb:c6:71:d4:14:8a:8f:40:7c:54:78:56:18:
         36:b0:79:f1:11:8a:a1:b1:01:a8:7e:af:85:81:23:75:29:94:
         2e:7e:9d:52:f8:10:76:31:d6:a7:78:ac:98:fd:0e:3e:a2:4d:
         ff:72:68:95:ec:6c:41:af:48:2d:25:c5:0a:74:53:6c:bb:f6:
         0f:b2:65:a5:03:46:3e:73:63:e7:e6:10:4b:b8:a1:b0:78:38:
         85:ea:90:d8:33:90:7f:2c:23:82:7a:34:38:8c:8c:a3:11:31:
         6b:5e:3d:a9:12:38:b4:46:5b:6b:63:1d:d3:80:35:cd:22:4e:
         0b:7e:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 15:55:15 2024 by rpki-client on console-ams.rpki-client.org