Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa
File:                     f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa (raw, json)
Hash identifier:          HmkuQysCA6Gskzi7AKP6HCOPXGhFl/RfQTVcBUxMFuE=
Subject key identifier:   BE:D2:97:A8:16:6A:9B:55:72:91:E0:BC:63:9B:90:FB:22:80:BE:B9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848AF2B847349A5AA9C394A5940
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     396356
IP address blocks:        173.211.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:84:73:49:a5:aa:9c:39:4a:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=33c7e2fb-0493-4822-ad34-3d8652c5163a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:63:e0:cd:f8:52:08:ed:97:e9:ea:fc:5c:
                    7a:55:b9:64:8f:ab:1f:8c:bb:80:1d:c0:fc:dd:06:
                    86:86:0a:65:72:a6:82:05:f0:b2:78:dd:1a:a9:96:
                    6e:0a:b1:a3:84:6a:02:c7:51:92:ec:78:2d:29:7a:
                    27:e0:6a:07:e7:e1:22:a1:e2:a4:98:e2:e3:e0:b6:
                    a1:66:c8:85:33:9e:4f:3d:de:9c:05:25:10:44:04:
                    6f:03:35:48:9a:b0:99:c2:73:b2:8e:1f:7c:ac:1f:
                    af:5d:47:2e:de:a8:69:b0:8c:f6:80:32:ff:94:a2:
                    7c:df:ee:f6:bf:72:80:69:76:08:ea:64:8e:cc:02:
                    82:95:98:99:44:76:39:ba:2c:f1:e9:40:df:5d:cd:
                    a5:0b:d1:f2:0e:52:da:6f:ba:ce:d9:89:0b:a6:07:
                    37:53:d9:b9:d0:f7:fb:d2:95:4a:1e:3d:e7:7a:33:
                    74:5e:81:29:f7:71:9a:89:49:5b:32:71:b5:b0:21:
                    6c:2e:f9:27:e4:04:ae:69:8f:40:a8:2b:83:dd:b6:
                    a1:28:0a:c3:d0:3e:07:a3:df:4a:e1:a0:40:d1:86:
                    2a:18:33:22:91:86:1f:7c:09:9e:d7:3a:87:44:d6:
                    ae:89:0a:79:37:55:7b:65:b8:7e:96:95:c2:d2:78:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:97:A8:16:6A:9B:55:72:91:E0:BC:63:9B:90:FB:22:80:BE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f040db87-9cc2-35f4-b5cd-5465e59a3b41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:0d:a8:4b:f0:7d:c1:76:cd:00:bc:fe:27:4b:6e:94:09:c5:
         63:ee:61:3e:2b:7f:5c:43:d8:3d:66:02:1d:05:92:2c:f3:08:
         15:e1:df:a1:d8:7c:94:54:65:ae:91:de:3e:4f:fe:9e:4d:8b:
         60:48:7e:28:29:42:7d:e4:11:57:00:32:7d:d1:6f:f6:c6:34:
         68:46:ed:5e:5e:15:fc:0a:18:0c:5c:1a:76:f2:10:6a:dd:f7:
         5c:7d:4f:1f:7b:d6:bf:54:7f:5c:a7:bb:0a:52:00:6f:fc:73:
         c7:4c:61:67:0b:fe:04:31:21:f3:3f:46:b0:46:04:d2:23:12:
         05:5d:9d:ed:40:cf:30:d9:42:55:d2:47:93:f8:0e:cc:bf:c6:
         02:4e:a8:bd:18:f3:df:3f:ee:e0:93:88:4d:e6:f0:d7:1e:17:
         e9:84:a4:69:c4:b4:48:52:d7:e3:fd:cc:b3:d9:52:3b:a9:8d:
         83:6d:59:07:6d:0f:82:0d:1c:86:bf:61:9f:d5:74:e7:e3:b3:
         68:c2:f8:7f:82:f6:b2:01:e7:d0:f2:1d:e6:ff:68:03:d9:36:
         62:28:4e:d3:2b:73:98:0c:3a:a4:16:90:6e:52:6f:da:02:24:
         0c:21:31:ed:5e:48:59:42:08:81:0a:a6:e9:37:08:6e:12:17:
         1d:4c:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 12 11:02:51 2025 by rpki-client