Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa
File:                     ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa (raw, json)
Hash identifier:          rSJG9KGGs7h+sebRKGsrT+u91dsRX2MOFhN2P8i8dOM=
Subject key identifier:   37:C0:C2:5A:D4:17:DA:27:3F:6D:BF:5E:EC:6C:4C:3C:2A:18:D3:EA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858480EA51400B0262BF840944080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     61317
IP address blocks:        173.211.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:14:00:b0:26:2b:f8:40:94:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=84af96cc-5b8b-4fc2-86ca-7d26021efa9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:4d:bd:fd:0d:b9:ac:6e:e8:84:e9:73:91:
                    49:4e:9e:48:bc:7c:61:db:f4:9b:44:43:50:84:e7:
                    95:08:32:73:ce:9b:23:49:41:ac:21:0a:4d:93:8b:
                    f5:b3:4b:dc:e3:7b:eb:8f:bb:fa:f5:93:e6:3b:2a:
                    f3:5c:ff:6e:eb:98:7b:95:45:50:06:cb:86:c3:26:
                    64:f6:93:9b:16:a7:b1:e3:f5:c9:a8:ba:36:25:42:
                    67:c3:28:d4:79:87:dd:50:49:19:10:58:b1:22:d6:
                    af:33:1c:c4:80:69:32:2e:da:b9:f7:e3:a7:e7:13:
                    1b:15:22:a2:1e:b3:ca:34:d5:8b:db:c3:64:e4:5b:
                    0b:09:6a:0f:e3:88:0b:2e:90:f8:78:52:84:5d:26:
                    a9:df:63:7c:63:cf:ba:89:52:e3:5e:48:e4:20:70:
                    2f:b1:c7:ec:ec:3e:03:2d:9b:76:72:58:65:3b:ae:
                    27:5c:18:f3:ba:68:ab:47:02:cc:e1:85:a3:4a:7b:
                    08:a6:c6:2f:ea:04:68:1f:0d:bc:49:63:7d:55:92:
                    96:fd:55:85:ce:8a:8f:8c:7d:5f:64:e0:e9:ee:24:
                    6c:38:ef:8c:28:9c:ca:58:a2:a6:60:1c:dd:83:8e:
                    78:14:5d:6f:c6:74:6b:b4:cb:fb:05:66:79:27:08:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C0:C2:5A:D4:17:DA:27:3F:6D:BF:5E:EC:6C:4C:3C:2A:18:D3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ecc34699-2f19-38b4-81fb-cdd20a15fc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:09:58:f9:2e:4e:53:57:7a:a7:8e:b3:78:d8:04:7e:08:25:
         00:02:fe:48:9c:4a:bb:ee:16:18:9b:33:75:e8:00:38:66:7d:
         5e:50:57:de:38:c4:72:72:24:23:a2:57:4b:1e:e7:f9:ba:88:
         5c:a0:02:8b:d5:22:cb:36:d1:97:08:6e:b8:90:dc:47:27:92:
         02:07:55:15:60:e2:0e:3b:e4:0e:94:ec:d0:cb:14:67:94:f5:
         5f:b8:08:c5:0e:f9:ac:a7:fa:c8:e1:5f:a8:c2:3b:64:61:1a:
         8b:79:c2:2c:d8:3e:8b:62:e3:1a:3d:a7:f3:83:93:95:ff:bd:
         06:94:5e:ad:31:aa:b0:a3:35:42:c6:07:6a:da:b8:8c:bf:2a:
         07:6f:bf:dc:11:a3:1d:17:f2:e5:74:3a:bc:4f:de:4f:06:e4:
         8c:a4:78:d3:13:2b:f8:a7:8a:75:33:83:61:10:9a:49:d6:1c:
         0f:d9:5f:39:01:a0:3b:96:02:4a:8f:0d:46:e1:53:be:d1:d4:
         34:3e:43:a7:8f:ce:ee:d3:29:7d:7b:82:89:87:87:b8:fd:5c:
         b3:87:cc:6a:65:65:b9:fb:4b:ac:b7:1e:db:9b:54:3a:b0:1a:
         77:09:c6:a7:01:0f:49:83:e1:58:8a:83:11:e1:1e:19:54:de:
         f3:fe:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 14 10:33:52 2025 by rpki-client