Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f74b2bfc-ada7-36a1-b31b-616a920f276c.roa
File:                     f74b2bfc-ada7-36a1-b31b-616a920f276c.roa (raw, json)
Hash identifier:          XHZNyTU7wO7NjT+KP44/kazTIaagibFXFPpO502GJg0=
Subject key identifier:   E4:65:01:97:14:8B:6E:94:5F:E1:2B:BA:E3:13:22:E4:6B:82:89:5D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858479C112B4ACA59CE84CA790380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f74b2bfc-ada7-36a1-b31b-616a920f276c.roa
Signing time:             Mon 21 Oct 2024 01:00:31 +0000
ROA not before:           Mon 21 Oct 2024 01:00:31 +0000
ROA not after:            Sun 19 Jan 2025 02:00:31 +0000
asID:                     9009
IP address blocks:        173.211.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9c:11:2b:4a:ca:59:ce:84:ca:79:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 21 01:00:31 2024 GMT
            Not After : Jan 19 02:00:31 2025 GMT
        Subject: CN=ca54c5cf-2fd6-4129-a5a4-a645ffe3a265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6b:35:df:9a:ec:42:04:51:4c:2b:b5:3e:21:
                    00:80:78:31:8c:32:b9:bb:aa:39:f2:67:64:1b:47:
                    75:81:ff:a7:55:49:9f:89:a7:10:44:b1:0d:ad:b8:
                    01:a3:05:b9:7d:43:bb:62:9d:c9:7f:f9:65:1d:b8:
                    90:4c:c5:9a:9b:0f:85:1a:e4:b8:5f:45:93:ea:6a:
                    82:da:8b:58:60:34:0e:f7:31:e0:9c:17:87:db:41:
                    a0:3c:8d:7a:58:59:d7:71:5f:41:4a:b7:e8:5a:f9:
                    e6:7d:30:fc:9a:12:4d:bf:0f:29:30:53:0a:49:76:
                    35:a2:f6:f8:df:14:9c:4f:46:68:b9:b9:b2:ed:86:
                    cc:d2:24:7c:e3:bc:31:0e:37:f4:7c:23:37:59:e6:
                    1a:23:ec:49:9d:ba:33:94:16:78:44:c9:ae:0a:ed:
                    4f:40:a1:85:c1:39:08:66:e7:45:6a:c0:f7:8c:c0:
                    52:09:6d:52:0f:0c:88:33:db:f5:95:88:8d:fc:88:
                    91:77:df:d1:6a:74:37:e3:3d:9c:04:71:9c:36:de:
                    95:76:82:ba:ca:ee:cf:09:fe:49:36:63:61:f7:8d:
                    c3:7a:46:71:d1:fe:9e:d4:d0:b0:be:d5:73:ca:38:
                    d4:b2:02:a4:85:f2:0b:bd:45:31:5f:ab:e0:c2:2b:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:65:01:97:14:8B:6E:94:5F:E1:2B:BA:E3:13:22:E4:6B:82:89:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/f74b2bfc-ada7-36a1-b31b-616a920f276c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:c0:7d:bd:e7:ef:70:5a:6d:c1:2b:4c:7f:e2:d2:8a:04:
         8a:2a:de:c6:2c:d0:92:02:70:d5:f8:fc:cc:af:73:79:39:d4:
         d2:6b:32:48:ac:f7:5c:9b:29:b8:a3:ba:4f:a1:92:80:f0:04:
         a8:d0:4f:6c:95:a3:b3:b8:98:3f:02:cb:d0:e7:fe:63:ae:17:
         73:16:84:3c:ed:88:e0:6f:37:8f:cf:e1:55:22:cc:48:bc:ff:
         ec:0c:9e:1d:37:c3:d3:77:94:58:46:aa:56:e9:8b:6a:ad:4a:
         ab:cb:f6:88:34:5f:05:5a:9b:ad:af:6e:07:22:f7:82:37:c3:
         70:c2:c4:03:f0:7c:ba:06:c0:03:c5:c6:c8:0a:5e:d2:11:bd:
         e8:e7:97:b0:32:33:f2:50:d3:12:9d:6c:ea:de:6b:97:17:67:
         99:e3:1c:a9:77:96:3c:63:61:7a:fe:d0:d2:ff:66:02:f5:a2:
         5d:e2:3f:1f:b8:ed:d5:1e:bd:cc:9f:ca:6e:05:84:fb:cc:38:
         3e:a2:a6:d7:af:80:2f:b2:ea:91:ea:1c:0f:5d:a4:da:e1:3c:
         5b:ab:50:f0:02:aa:ee:ce:34:64:92:70:c2:ba:41:fe:36:33:
         7e:94:64:fb:97:dd:cd:8d:f7:9b:95:57:50:60:85:cd:c4:bc:
         18:1c:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org