Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c9136bd7-c210-3479-ad12-f7f821ff1ca8.roa
File:                     c9136bd7-c210-3479-ad12-f7f821ff1ca8.roa (raw, json)
Hash identifier:          Paf34m/PJHOQAkfC4PNFEJagoDpwrzNEkJutQ/L7ByY=
Subject key identifier:   BB:55:DD:37:26:9E:8C:46:D9:0C:AC:A2:7C:94:D4:97:9C:AE:72:EE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858489E6B6819E05ADAF999A144C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c9136bd7-c210-3479-ad12-f7f821ff1ca8.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     395111
IP address blocks:        216.122.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:68:19:e0:5a:da:f9:99:a1:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=5476eeb5-5d22-4d6e-909d-c3ec20a7ad71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:48:39:eb:53:96:a0:cc:a0:15:2b:de:4c:
                    32:14:d3:7e:f9:18:aa:d3:9d:47:38:44:a4:0c:8d:
                    7d:9a:cb:bc:97:75:49:fa:8f:79:35:7c:c6:c5:5c:
                    7e:04:bd:1b:6b:80:ed:8f:ca:b8:22:38:a7:2c:70:
                    2a:b2:0c:ae:82:37:db:2c:ff:e1:9a:e4:06:2b:46:
                    cd:ec:f9:65:73:73:aa:47:34:39:49:76:b7:06:75:
                    04:9e:13:c1:45:fd:d5:fe:f7:f5:c0:cd:56:32:98:
                    3a:16:44:a9:2f:34:69:f8:b2:b2:8d:93:4e:92:52:
                    5d:c8:a7:60:76:43:16:7e:26:b0:53:2f:18:a6:0f:
                    e9:40:8f:e9:e9:f8:e0:9c:b3:95:c7:bd:30:64:b2:
                    d0:2d:e6:fc:7e:0f:b3:8d:6f:97:26:6e:be:d8:0a:
                    62:f7:d5:ec:4c:fc:1e:94:13:b6:3c:2c:ca:4d:91:
                    f9:c1:85:20:c2:97:92:05:81:dd:ed:c0:d1:0c:ee:
                    14:89:2b:55:1c:8d:ae:97:74:7f:c7:be:98:59:a5:
                    8b:c6:37:b9:53:94:da:74:f5:0c:ac:d8:4d:e2:7b:
                    11:dc:73:19:c0:15:f9:9b:3a:81:f8:e3:25:e7:d6:
                    cc:4a:bf:fb:ff:73:8b:ae:bd:bf:38:47:44:9c:ec:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:55:DD:37:26:9E:8C:46:D9:0C:AC:A2:7C:94:D4:97:9C:AE:72:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c9136bd7-c210-3479-ad12-f7f821ff1ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a9:1a:53:01:a9:5d:b4:41:37:ba:e9:14:86:08:6e:ad:a4:
         59:06:7e:30:fc:51:50:9b:ea:50:95:16:80:16:93:58:29:70:
         10:f6:7b:74:de:58:1f:6a:3d:e4:86:5b:a6:ec:bf:cc:0b:76:
         cd:c4:07:f5:0a:ae:4c:a9:64:0d:42:dc:8b:43:ac:46:80:b8:
         90:70:46:e0:92:98:f1:a2:4e:13:03:27:30:fc:d5:09:6b:a4:
         a0:bc:18:db:9e:95:d9:13:f2:1b:56:99:e0:d1:f8:89:46:e6:
         3c:36:cd:cf:ee:d4:99:1e:10:a8:fe:ac:32:a4:35:b7:c5:18:
         b5:7d:53:9f:49:8a:28:66:0b:91:24:f7:90:11:65:f3:28:42:
         70:05:f1:38:ee:84:45:54:45:e1:06:13:84:58:dd:10:cf:3c:
         ec:00:ad:8c:af:06:bb:fe:12:37:1e:ff:2e:9e:27:bb:74:41:
         c0:62:3a:95:40:77:92:68:42:ab:ed:92:38:5e:13:d8:4f:8a:
         35:a4:0e:04:9d:f6:c7:86:d9:8d:7f:c7:11:70:02:86:46:dd:
         97:72:a2:ce:35:18:7e:84:67:6b:06:76:e5:d0:f1:bf:4d:76:
         5c:2b:fb:1a:96:a3:d9:6b:b0:f6:e2:dc:84:86:6f:62:49:6e:
         50:fb:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 09:46:07 2025 by rpki-client