Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
File:                     d032a8d4-77d0-39c1-86bb-5584ef9af130.roa (raw, json)
Hash identifier:          6fZgzMG1t806Qnxpl77flaX99FulT+znuCMsne5OTKU=
Subject key identifier:   D4:4F:1B:EF:A5:E4:90:A4:70:9F:62:10:79:4D:58:E6:5D:CE:DE:9F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584854703843AC2ADFF062410370
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     212238
IP address blocks:        216.107.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:38:43:ac:2a:df:f0:62:41:03:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=4a6ddf03-4cb4-4db7-a405-94a4a7292857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:a0:1c:e8:e5:bd:8c:5e:03:8e:f0:2a:01:
                    62:b6:ef:ea:a6:41:f1:38:8d:58:5f:46:e4:b4:2a:
                    94:7f:0e:6f:64:50:f0:6e:12:40:1c:f0:eb:c7:3d:
                    69:6d:b5:f5:bc:bf:94:7a:1a:c6:6c:9d:3d:f7:b3:
                    7a:19:f7:f5:20:8e:42:ee:b6:1c:6c:b6:0f:1c:4d:
                    13:76:1a:0c:e5:23:74:90:1c:e2:f7:d6:76:35:63:
                    04:bf:89:5e:a8:27:90:43:db:aa:3c:75:39:b5:40:
                    9b:38:90:1b:98:67:b8:3c:b6:0b:2a:d9:d8:ab:50:
                    a5:49:e8:50:3f:94:0d:f7:14:1e:80:a4:25:ee:25:
                    58:06:a2:fc:90:99:23:c4:6b:e2:7c:b2:cd:55:f1:
                    b9:5d:1d:45:1e:b6:e1:ff:0c:88:74:82:6d:ab:e7:
                    9f:8d:1d:af:33:96:d0:55:7d:a5:50:3d:bd:a0:00:
                    27:0e:b0:e4:1c:b7:30:cb:17:02:e4:ea:4f:53:73:
                    14:5e:0f:fd:42:d0:6a:d6:3c:11:75:d9:ef:dc:90:
                    5a:43:73:cf:2b:ce:1c:4f:01:0b:e9:b5:3f:8e:ae:
                    60:c2:bf:a8:8c:65:fc:38:ab:02:c2:e5:2f:35:c6:
                    da:4e:d4:8a:22:97:1e:48:1d:71:e4:7a:61:98:2a:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:1B:EF:A5:E4:90:A4:70:9F:62:10:79:4D:58:E6:5D:CE:DE:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d032a8d4-77d0-39c1-86bb-5584ef9af130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c7:d6:9b:25:fa:21:35:57:10:e1:42:31:66:ba:3a:e7:94:
         ea:64:2b:25:bf:98:0d:b6:e3:fc:e2:5f:3e:31:dc:8d:d3:7c:
         25:06:9f:54:87:25:a0:ab:8e:8f:1d:2c:b8:a0:63:f8:1d:14:
         8e:f7:43:4f:40:13:46:5f:4c:dd:81:10:e2:b8:fc:07:e3:3d:
         e5:15:ff:8d:07:40:23:94:8f:2b:05:85:6f:89:d7:8a:a2:82:
         ab:f7:a8:3f:5a:96:1e:15:73:dd:8e:07:30:68:16:b7:6d:f8:
         71:73:c5:58:b1:91:1c:3c:77:16:98:7e:69:3d:be:06:9c:54:
         10:03:17:14:72:71:4c:d1:b8:e7:93:08:62:a1:b8:7d:df:61:
         0a:9c:cd:c2:52:cc:fb:96:0d:05:71:21:b1:bc:00:5c:18:b2:
         0a:84:0b:c7:77:b6:b7:2d:fe:36:d2:c3:e7:6a:df:6e:ee:85:
         37:9d:d2:2e:e4:7a:4a:2a:13:b6:86:b4:27:af:8f:80:c7:39:
         4a:ec:10:5b:03:2a:e0:5e:07:b6:09:b8:83:a5:93:6e:34:01:
         7e:7f:f7:b4:59:27:c2:cf:06:ba:d2:57:7f:13:bc:38:cb:13:
         f7:68:bc:21:93:3e:67:5c:c8:a2:3b:4c:b1:49:04:a7:c2:95:
         9a:d0:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:59 2025 by rpki-client