Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
File:                     eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa (raw, json)
Hash identifier:          gs22m2tX8z+56dmWm93dTctTHZWCY26Ot6spHl5A5tc=
Subject key identifier:   F7:F3:0D:60:96:D4:60:60:43:E9:C0:7B:17:9B:83:B0:64:D0:54:FC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584561285257E208563A5B6FB880
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     834
IP address blocks:        173.214.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:52:57:e2:08:56:3a:5b:6f:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=5b019e0e-dc68-4799-9551-627ec53f0ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:59:2a:d7:b1:53:a2:f6:70:20:01:2b:6d:5a:
                    1f:cb:7c:79:24:23:45:8e:e3:be:7e:7b:3a:38:22:
                    5c:db:bc:98:4b:df:5b:cc:06:06:45:7d:91:e7:70:
                    7d:72:d5:53:7a:ad:48:2a:ec:23:30:f4:56:94:20:
                    b3:53:55:3b:87:67:92:ec:6b:77:15:2f:ce:a5:1f:
                    67:18:e3:ca:1d:13:10:33:bc:d6:b1:c5:59:cc:cf:
                    cc:2e:6d:17:8a:dd:19:e4:d7:8a:57:bf:0b:0d:cf:
                    c7:53:49:67:6e:4b:1a:78:9a:22:5a:41:bf:11:bf:
                    32:1e:5e:8b:d2:05:e0:9f:05:db:44:9c:93:a7:92:
                    7c:95:85:db:74:03:55:e4:f4:fa:22:2d:ac:e9:f4:
                    b0:cf:37:e3:af:b2:26:84:5e:1b:b0:97:d7:a5:12:
                    d3:45:83:9b:d6:6e:02:12:91:38:14:de:b1:4f:7a:
                    0c:70:16:ba:39:3b:f2:23:2f:3b:36:65:6f:8d:e1:
                    5c:ff:72:63:72:5b:ad:f2:dc:de:3e:d8:aa:bc:ef:
                    ad:b7:be:6f:67:5e:9e:15:a2:30:75:f8:e6:bb:4c:
                    1d:c0:87:11:8a:34:17:e0:2f:8c:e4:56:ea:db:6e:
                    ea:42:ec:86:09:61:00:84:e2:0a:f4:ea:47:8a:23:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F3:0D:60:96:D4:60:60:43:E9:C0:7B:17:9B:83:B0:64:D0:54:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eaf91f75-21a3-3f78-ab91-7de8457ec09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:02:3a:0e:74:4a:d5:6a:d5:5b:64:da:02:96:2c:e5:71:00:
         ac:3b:57:0b:b1:3b:40:44:fc:31:01:59:7d:78:e8:df:db:fb:
         ef:ce:03:71:d5:a9:40:3d:4f:b4:1a:4d:af:51:d7:9d:72:2f:
         a7:6f:72:26:04:6a:06:ea:db:1c:6d:13:6d:53:c8:fa:ff:66:
         d7:69:83:68:a0:a3:ce:ae:bf:d3:a6:97:d3:f8:2e:6f:87:a7:
         fd:38:15:33:82:d1:42:bb:30:2b:82:5e:9c:33:e7:9e:57:f1:
         25:76:ce:55:bf:c2:a1:c2:69:dd:b7:ee:eb:4b:b4:96:ea:3a:
         82:fb:96:e5:73:ef:1e:0d:fc:f3:9a:47:d7:18:99:b1:c7:d9:
         c9:97:ce:53:ab:29:25:1a:86:72:1c:37:72:23:f0:d1:55:d1:
         14:b3:13:f8:33:9e:b6:79:e7:16:78:a3:ea:89:41:59:05:12:
         0f:57:05:67:1e:be:31:b2:24:48:ab:8b:ed:3d:2f:07:2c:a1:
         b3:c3:f3:89:9b:b7:39:b1:33:21:8c:e5:1f:ec:6a:77:5d:85:
         51:65:4d:ef:93:46:cd:26:f0:07:88:45:7c:a0:9a:20:94:f9:
         3e:5d:5a:d6:75:5f:ef:b1:12:46:7e:70:0f:fe:3b:70:37:e4:
         a4:2e:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 08:56:18 2024 by rpki-client on console-fra.rpki-client.org