Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa
File:                     e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa (raw, json)
Hash identifier:          fQrq+WSPzbd8ZCf/ZQSeE3PvDyrpnDqpUd16vQp1ebY=
Subject key identifier:   AE:14:C3:E3:63:FC:6C:BA:82:87:7C:32:D7:EA:66:2C:C9:D7:D9:71
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858487B85B92F123574104B2D7900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     9009
IP address blocks:        173.211.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 12 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b9:2f:12:35:74:10:4b:2d:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=b254e2c2-fb92-49d7-8c39-e236d110f652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:92:2e:22:65:7c:9d:50:00:55:f3:3f:d9:
                    8b:3c:65:da:c8:94:b9:92:76:86:cc:ec:52:3c:1b:
                    92:2a:d1:87:7b:58:8e:9c:92:c1:6c:a7:7f:cb:91:
                    d7:91:be:fe:f6:57:96:7d:76:3d:de:52:41:a4:21:
                    07:25:49:74:de:2a:88:7d:21:9c:e2:33:10:69:11:
                    84:4a:a9:9d:f9:31:ac:c9:3e:b8:98:48:ca:1b:0f:
                    70:61:13:3e:b9:14:d9:f8:2c:30:b8:76:10:b3:67:
                    6b:4f:d0:c8:7d:37:cd:df:40:39:8a:5f:d1:ab:16:
                    aa:17:db:3e:ea:62:80:50:ed:20:1c:18:99:a8:f3:
                    ec:a1:85:9f:a9:47:17:16:27:67:bd:1b:19:38:41:
                    f9:09:eb:8e:4e:ed:2e:fe:c0:ac:c6:e3:db:32:ad:
                    f5:5d:b1:6b:c2:7c:9d:66:a9:73:ca:42:a4:c5:45:
                    00:a9:e5:64:8a:64:34:2d:54:9a:20:bd:eb:6f:b3:
                    fa:d7:70:1f:a8:fd:ec:af:a9:d5:70:bc:5f:22:9a:
                    65:13:65:3d:a7:91:2b:59:12:c5:2d:5e:fc:e3:72:
                    c3:9f:79:be:43:25:c5:d5:77:09:bc:79:59:aa:a1:
                    2e:dc:a5:bc:48:0f:86:f7:18:cb:8b:ac:34:49:d9:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:14:C3:E3:63:FC:6C:BA:82:87:7C:32:D7:EA:66:2C:C9:D7:D9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e0ae7912-bf2b-30ee-b812-b9d8a717ec82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:03:60:2d:f3:a0:c2:49:ed:eb:fe:29:f4:2b:31:6f:8f:11:
         9e:c4:c3:01:f7:3c:34:3b:ff:c2:cf:c0:c8:b3:00:98:a8:b0:
         73:b3:ae:52:40:6b:d6:94:4a:65:81:f4:a3:06:fe:1a:95:a7:
         39:ad:58:2a:a2:80:90:fd:09:e0:ab:60:49:52:3f:16:3b:d8:
         3a:53:b6:ee:5f:cc:ba:5f:90:13:52:55:60:2c:b4:3b:e9:cf:
         38:28:d3:36:c4:72:dd:d8:06:1b:87:af:86:23:f9:ac:3d:ad:
         76:3a:0f:83:db:25:9a:ac:b9:fa:18:97:1d:30:33:18:4d:6e:
         01:c0:df:18:ae:c4:bf:dd:a9:ee:98:a5:85:4c:4d:83:40:2c:
         23:57:74:63:76:9c:33:c0:9c:b1:33:ef:09:a4:c7:18:04:4a:
         26:af:e6:48:b7:5b:6b:b8:8f:e8:e4:7d:3f:c9:10:3a:62:7f:
         02:58:6e:66:fc:e8:0d:dc:32:90:99:66:ae:db:35:5b:72:13:
         ef:9c:b2:f0:33:a5:7b:b2:30:8f:9e:e5:1e:16:99:92:b5:30:
         ca:86:cb:71:45:1f:0c:56:35:1d:0a:83:91:99:d9:e1:30:1a:
         5b:f8:3d:ac:f4:91:13:97:51:92:97:84:53:e5:29:2e:cc:89:
         9c:ee:f9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 11 08:58:39 2025 by rpki-client