Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
File:                     eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa (raw, json)
Hash identifier:          PfvZvHv/86aNa/7zzQ9sK/Vv7nPhUpArgEuKyHApTCo=
Subject key identifier:   A3:E8:13:FC:66:0D:45:07:E0:53:3E:35:B6:A8:B4:4D:A3:CA:58:C8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584878BB023BF6103EC991217390
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        216.107.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:02:3b:f6:10:3e:c9:91:21:73:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=4d9193ef-e26e-4b4b-b58f-679036de7786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:fe:c7:a1:3e:f0:2f:9e:51:9a:9f:f2:d6:
                    a5:50:ac:85:6a:b0:fc:64:ea:7b:84:1a:96:11:f0:
                    a3:dc:9d:8f:0f:4a:d9:2d:1f:e6:2e:d1:da:27:b6:
                    20:17:13:94:cf:77:0a:7e:69:1d:6b:09:40:1e:c5:
                    1e:8e:72:0f:f4:ec:8b:8c:54:dc:03:63:44:d3:43:
                    8f:76:27:f5:a5:04:d7:60:df:52:4e:7a:c5:f4:e6:
                    54:71:d1:4b:2c:aa:78:9c:82:7f:e8:73:f2:3b:55:
                    6c:97:f9:de:c8:b4:c0:4d:ef:ff:dc:ea:71:1f:a7:
                    f7:1d:0f:00:97:1d:e5:df:15:47:6c:c7:9e:e5:11:
                    23:8c:cd:91:82:1d:22:60:91:b1:1a:b6:11:b6:62:
                    5c:8b:d6:b5:39:4b:f2:e5:e4:69:8b:d5:e0:49:51:
                    1a:c8:12:b3:e1:3c:c3:b1:81:99:8a:22:63:2c:87:
                    ac:02:51:ba:b8:8e:da:5c:55:63:34:66:5d:26:06:
                    34:20:d5:54:4a:74:00:16:bb:df:b9:3e:f9:ba:1d:
                    60:7f:d1:1f:b4:18:64:e6:99:76:c2:1f:1f:83:bd:
                    e0:f5:09:92:99:ef:44:d5:72:bb:03:21:02:0d:f9:
                    f1:44:e1:14:32:6a:2a:a5:ff:34:1f:ec:f9:b9:8a:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E8:13:FC:66:0D:45:07:E0:53:3E:35:B6:A8:B4:4D:A3:CA:58:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eba44a19-e096-3e04-a7e7-7f66f01c5e79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:6f:6d:3f:e8:aa:a6:26:23:f5:2c:45:7d:43:e2:a1:1e:
         e4:2d:da:74:7c:95:52:29:14:71:3e:4e:8e:d7:c8:53:dc:e5:
         4e:bf:60:6c:dd:91:d8:26:3b:18:b8:80:43:20:e0:a1:88:e4:
         c9:05:45:ff:8d:78:a6:72:5a:05:d3:ba:bd:e1:35:50:ba:ba:
         15:d3:b4:81:a9:9f:87:ef:c5:66:a0:60:e4:03:26:4f:be:a0:
         ce:d9:01:8f:68:f2:b3:43:7e:a6:40:36:3d:b1:c9:44:87:dc:
         0a:c3:70:b3:40:b0:16:a5:71:67:dc:45:16:3d:26:69:f3:f7:
         47:da:c7:a8:a4:b3:6f:57:7a:37:5f:53:23:3f:13:57:37:f3:
         09:ee:d5:0e:57:07:9d:a8:b3:df:cf:0d:bb:de:56:91:8c:bd:
         66:1a:60:90:f2:59:c1:d3:df:c4:ba:a2:94:3b:3d:33:fb:fd:
         c9:c0:e3:07:97:2f:41:bd:d0:12:33:8d:a0:4b:9d:00:38:4a:
         a1:f4:3f:d4:60:7a:1c:29:e7:a4:d7:4f:fe:4f:7b:2a:b5:a1:
         32:78:88:c7:fd:ea:a8:d8:0e:17:47:a8:a1:6e:fb:b8:92:e9:
         8c:58:21:b5:9b:a4:a2:74:43:ae:76:56:fc:59:55:28:3f:8f:
         91:d2:1f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:29 2025 by rpki-client