Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c2163188-6a33-3399-9aac-d805a6e41c24.roa
File:                     c2163188-6a33-3399-9aac-d805a6e41c24.roa (raw, json)
Hash identifier:          MnHuM1mK+RtCz98BU9bh0ysGxq8Abf3zGIfWfBbC948=
Subject key identifier:   23:74:19:61:C2:18:6B:3A:E6:69:5A:95:CA:3C:1D:16:DC:43:74:A4
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845347D4ECAA345EDB023334940
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c2163188-6a33-3399-9aac-d805a6e41c24.roa
Signing time:             Thu 14 Mar 2024 13:00:30 +0000
ROA not before:           Thu 14 Mar 2024 13:00:30 +0000
ROA not after:            Wed 12 Jun 2024 13:00:30 +0000
asID:                     834
IP address blocks:        173.214.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:7d:4e:ca:a3:45:ed:b0:23:33:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 14 13:00:30 2024 GMT
            Not After : Jun 12 13:00:30 2024 GMT
        Subject: CN=bd7099a8-55d0-4848-a73d-a4d3af79177f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:bf:fd:d9:ab:7e:48:f4:a7:58:06:61:18:
                    10:05:ba:45:8a:eb:58:d4:a6:e4:55:b5:69:51:f2:
                    1c:46:53:9e:dc:69:bb:a1:25:09:de:eb:15:9a:a3:
                    dd:76:55:7f:c3:21:77:30:b7:77:c0:6d:44:91:51:
                    24:b0:ce:c6:f3:06:d8:fa:50:1f:b0:1b:76:85:38:
                    1f:58:35:bd:d0:8f:c1:4c:ec:cf:3f:50:69:53:06:
                    61:81:a9:75:f6:a0:1e:ac:ab:6d:88:c9:89:90:65:
                    d4:4a:dd:f9:de:b4:b5:f6:38:a1:b6:4e:6c:8b:cd:
                    5d:55:29:3a:d8:e6:cc:05:81:30:c5:24:9b:70:83:
                    23:2c:09:10:45:83:1b:e3:db:14:70:77:a8:cf:c0:
                    0e:fb:4d:2f:da:dc:8e:0d:52:05:11:e6:37:3b:a6:
                    ed:ab:ad:5d:0c:06:41:f6:47:8f:02:3e:0f:e6:4d:
                    c7:e6:c6:b7:db:7e:43:80:2c:6b:23:82:c7:48:2f:
                    64:11:31:cf:d3:ca:f7:43:42:44:99:a3:82:d6:22:
                    c2:3d:9b:a4:f1:e1:42:74:f5:6e:9a:0f:ea:3b:43:
                    1d:1d:99:bd:99:49:6f:ca:03:de:fb:d9:ce:5f:84:
                    ba:30:19:c7:98:ab:8a:70:0f:d8:43:90:7d:8b:b3:
                    aa:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:74:19:61:C2:18:6B:3A:E6:69:5A:95:CA:3C:1D:16:DC:43:74:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c2163188-6a33-3399-9aac-d805a6e41c24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:42:c6:1c:d7:43:38:ab:ca:5a:c8:64:2f:bb:38:0f:3e:b2:
         35:ac:78:b7:f9:1c:1c:24:23:c1:64:fa:18:87:bf:0a:49:32:
         fa:0b:16:b3:c8:16:a5:7c:03:20:20:59:a8:a3:d1:91:bb:e1:
         6d:a3:8c:39:ed:47:1b:77:f7:37:af:38:48:03:a8:81:52:6f:
         4d:5c:a1:13:e1:1b:4a:65:f6:80:6e:ad:c8:d0:f7:90:db:59:
         36:fd:45:40:01:f2:66:ea:f0:2a:6b:9e:29:a6:af:48:9c:6f:
         ad:f1:a0:2c:64:d5:77:38:6e:05:db:8b:12:53:f8:7d:d1:19:
         92:8b:c6:42:eb:ae:ec:d8:89:78:7c:a3:80:f6:4c:ca:8b:33:
         97:50:37:3f:4f:e0:74:ad:41:a1:1b:4e:04:a6:c6:56:f4:f1:
         1a:4e:cc:b4:e3:61:81:d0:f6:fb:89:67:99:e8:ef:bc:42:16:
         1f:30:dc:33:f2:f9:66:82:a6:95:f7:c4:31:a6:49:2b:77:92:
         9a:db:e1:26:13:c4:bf:3c:5d:af:f7:88:f3:79:5a:a6:12:e4:
         73:9e:13:e9:87:0d:f2:2f:91:c9:8c:bf:50:db:f5:6e:07:19:
         38:5e:ab:64:3f:29:ec:3a:3b:dc:5f:fd:80:fc:be:99:71:b7:
         db:18:a4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:17 2024 by rpki-client on console-fra.rpki-client.org