Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
File:                     eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa (raw, json)
Hash identifier:          3r58/tRzGwJZqPIgGm3dTqNhRG2mas2QrNgZflBA2PM=
Subject key identifier:   B9:91:A2:97:26:6A:5C:CD:E6:32:CB:65:0E:17:CC:27:EF:00:F7:D7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847213B0C31AB7D4E382E924380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     834
IP address blocks:        173.214.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0c:31:ab:7d:4e:38:2e:92:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=221b78a5-0d23-4274-a3be-557b5282044e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:4b:99:f0:b7:67:16:69:65:4d:96:bb:57:
                    85:a1:54:90:75:a2:6c:05:bd:6c:77:ec:10:a0:bd:
                    58:94:bf:86:df:fb:1f:0c:1a:50:68:1a:6e:3a:ce:
                    32:aa:2c:f9:96:bc:61:bf:00:86:e0:5a:68:3c:5e:
                    14:63:c0:96:05:41:19:27:37:19:da:05:56:f6:c6:
                    30:9d:bb:7f:17:f5:15:6d:c6:aa:0a:67:71:7e:85:
                    79:2a:c0:59:da:9d:02:b6:16:fa:70:4f:1d:af:89:
                    06:5d:1b:03:f9:60:7a:c0:1b:51:ae:7e:3c:4e:4a:
                    a2:52:9f:cb:78:5a:68:03:64:c2:58:3a:9c:2b:9f:
                    38:36:5d:75:6a:31:c7:cc:f2:f5:42:07:32:be:a3:
                    39:a0:f9:30:05:c5:2a:fd:e1:67:73:5a:90:5e:ea:
                    a5:69:aa:f4:4f:e3:e1:55:4e:9f:52:73:86:3a:d4:
                    0f:6e:4e:f0:e4:c3:d3:ee:7a:a4:9c:74:6b:28:ea:
                    66:53:c6:23:cc:54:16:04:c5:bb:8d:7c:d5:18:db:
                    ff:9d:a6:b0:83:b3:6a:f0:9f:45:93:b9:fa:d6:56:
                    06:a9:5c:33:22:80:d1:ee:8f:8c:0f:06:c8:46:12:
                    ec:ec:74:03:a1:50:70:29:51:58:8b:5e:42:a8:c6:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:91:A2:97:26:6A:5C:CD:E6:32:CB:65:0E:17:CC:27:EF:00:F7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:3a:24:e7:51:2a:60:bb:41:82:21:ef:ea:2a:eb:e4:4d:b3:
         e9:84:8a:a7:6f:17:f7:87:87:c9:0b:58:b4:b4:b2:3e:fe:de:
         f9:17:9d:6f:b6:ba:e6:62:53:23:1d:54:5d:4d:e5:69:13:7a:
         36:a2:2f:a6:34:8f:a1:f4:7d:25:38:ce:e0:da:db:1e:5a:ad:
         b6:e1:cb:1a:83:94:2c:60:32:49:9f:e4:d0:7f:38:f4:be:8c:
         ce:3e:b9:6b:e2:36:f7:46:9c:a8:ce:30:b4:9f:df:6d:b9:12:
         50:28:a4:10:83:7d:71:b4:47:a5:40:70:46:e5:d5:a1:44:62:
         4a:d1:a1:51:39:dc:43:ac:d2:c4:a1:f7:19:b2:9b:37:a7:c7:
         8f:d8:b6:73:b7:21:df:21:b4:4e:ef:fa:6d:14:e6:be:d2:60:
         1c:9b:fa:34:d4:79:55:2f:3e:65:e0:f1:07:38:d5:32:8a:39:
         ef:4b:c4:ec:3f:b5:cb:7e:60:e2:fc:1f:19:a0:7d:aa:e3:c9:
         06:26:44:dc:31:39:2f:0f:c5:fc:0d:e4:14:1f:b5:da:f7:f9:
         79:f1:dd:a8:30:db:f6:a3:c1:96:7a:bb:b6:00:02:44:4b:0f:
         e4:a0:b9:4f:77:8e:d1:eb:3a:0d:38:39:7c:eb:d1:42:96:14:
         44:c7:b8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:30 2024 by rpki-client on console-fra.rpki-client.org