Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d8a758e7-b0d1-3fbb-8eaf-7637bbb0ea0e.roa
File:                     d8a758e7-b0d1-3fbb-8eaf-7637bbb0ea0e.roa (raw, json)
Hash identifier:          M+m9hAT216rzBmCgLXMOF9Exwzy0ktySOlzTpi/EgEQ=
Subject key identifier:   E1:8A:76:8D:E4:D6:57:E4:32:AD:96:EE:89:76:C9:3D:1F:AE:A1:2E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848AC60D387930AFD3494E25200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d8a758e7-b0d1-3fbb-8eaf-7637bbb0ea0e.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     64267
IP address blocks:        67.227.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d3:87:93:0a:fd:34:94:e2:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=d256400c-02de-40d5-bf98-730a285f3539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:fe:d1:69:55:3e:a1:6e:7d:28:30:bf:a0:
                    08:f7:b3:23:32:48:e7:4c:8e:86:61:a0:12:9c:35:
                    b5:13:4f:58:42:ac:a2:ff:9a:97:f6:4e:91:93:6f:
                    0b:0d:10:ed:af:14:5c:35:e1:ce:90:e2:e7:7b:5d:
                    8b:38:b1:03:97:b4:1a:fd:7d:ba:0b:b3:99:72:50:
                    37:b7:2a:b8:23:f2:00:6a:7d:3e:d7:36:f9:18:e1:
                    ae:03:9f:cf:dc:0b:ae:8d:df:45:eb:93:3f:0c:25:
                    f5:7c:96:3b:71:2c:db:4f:ca:89:66:41:55:8c:46:
                    dc:d4:da:b7:c8:35:ba:80:bd:6b:eb:2b:9a:6f:6d:
                    a2:dc:a7:03:27:96:04:43:72:20:74:82:a7:f2:cc:
                    d6:d1:98:25:5a:02:d8:eb:04:b9:a2:9f:ef:9c:a7:
                    f6:ac:6b:9b:2f:5a:f9:fd:0c:96:a0:5f:ed:a8:ef:
                    d9:7c:c0:75:16:a4:da:62:9e:e1:a1:59:c4:2d:a5:
                    c4:64:f8:98:bd:34:32:bc:25:9d:14:c1:63:15:ce:
                    64:cc:f9:51:43:79:21:26:f3:5f:f9:e8:f1:b8:4a:
                    ba:d2:c5:8d:c2:35:b6:a0:c2:b8:99:28:46:24:e3:
                    66:6c:ca:f0:71:b5:c7:ce:5a:be:15:6e:b0:a8:8f:
                    67:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8A:76:8D:E4:D6:57:E4:32:AD:96:EE:89:76:C9:3D:1F:AE:A1:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d8a758e7-b0d1-3fbb-8eaf-7637bbb0ea0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2c:ca:8e:53:5b:a2:34:6a:64:73:35:ce:69:fa:9e:70:14:
         31:61:52:99:96:c7:9d:41:7e:ec:55:23:25:4d:90:43:1b:ab:
         50:74:79:8e:a0:7f:25:53:c7:5c:de:c3:10:17:da:a5:5c:30:
         fb:87:78:f3:cd:72:0a:99:d3:f4:d2:4a:79:cd:53:08:43:8f:
         4c:b0:20:c3:b6:c4:d5:73:07:4e:66:20:34:77:84:a1:24:4b:
         50:9b:9b:df:95:b4:d8:7c:1b:ad:d3:0d:32:51:fe:07:cf:89:
         1e:1f:d5:0d:9b:63:dd:68:e8:14:78:e7:f2:10:95:b3:3c:69:
         4e:49:4e:7d:ab:2d:5d:9d:80:a5:ac:32:4b:c0:11:00:d7:69:
         0a:8f:9f:cc:bb:fe:71:d1:7a:72:19:8f:af:18:64:1e:04:a4:
         9b:ee:19:80:f0:10:49:ab:47:60:55:fb:94:3c:1b:d9:be:d6:
         52:73:4c:4d:f9:2c:e2:a5:8b:41:cf:e1:f0:61:f7:35:19:18:
         87:92:86:2b:ec:5a:2b:87:09:6f:19:b3:13:e6:a1:5c:48:a0:
         7c:17:ef:a9:5c:e7:fa:c2:93:da:79:49:3a:b7:0f:a1:f5:13:
         cc:e2:93:40:ae:a6:b5:3b:fe:fa:d8:88:20:7a:c5:35:e0:1f:
         8a:10:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:00 2025 by rpki-client