Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa
File:                     5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa (raw, json)
Hash identifier:          M9Fkiflbk5qi7rC0LnOlprtpkKyWBx1Lzygpi/eztqQ=
Subject key identifier:   D2:E5:49:94:4C:B0:07:75:FD:75:1B:DB:21:A2:5C:5A:28:AA:38:64
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848E2D11F15A3A8D602B6636D80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     21859
IP address blocks:        198.102.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:1f:15:a3:a8:d6:02:b6:63:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=8c343ec0-3f75-4030-b24e-82e22baea607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:12:03:2d:3b:4b:5f:b2:0c:7c:93:27:10:
                    5f:7a:f1:92:96:c9:71:46:93:65:4f:a1:2e:44:f2:
                    72:31:31:30:cc:ef:0e:cc:38:8d:09:89:57:2d:d3:
                    eb:ac:18:d2:fb:7a:6d:c0:80:a7:92:f2:27:32:cd:
                    52:63:db:8d:7a:fa:59:ba:2f:db:99:97:6d:78:14:
                    ff:f8:35:00:bb:a8:4d:69:5e:e1:e3:38:0e:64:fd:
                    45:b3:21:4e:55:8d:8f:d4:35:05:c7:af:76:3f:2e:
                    49:92:09:a2:9f:a4:61:49:9d:54:1f:6d:da:86:ba:
                    11:45:9f:68:7c:f2:dd:48:1a:ef:39:24:4b:aa:c4:
                    48:74:27:72:ea:e4:97:8c:17:29:3d:40:2b:a2:6c:
                    69:79:8d:f0:27:ce:6c:cd:e8:08:d3:3e:85:40:f8:
                    4d:27:63:c8:fa:b1:8b:6d:5e:7a:4a:3a:72:a6:97:
                    9d:7d:2f:35:66:e2:d3:c4:89:6d:80:88:7d:7f:f1:
                    87:dd:12:6e:e7:86:10:5e:cd:29:6f:15:83:b7:32:
                    3a:1c:a1:70:39:26:3c:8a:69:f7:c0:02:a5:fa:1e:
                    9b:d0:4e:69:3b:9b:50:18:39:5c:fa:b6:d7:34:c8:
                    c7:b9:8a:67:f7:22:0f:2d:45:7b:66:39:77:bb:b1:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E5:49:94:4C:B0:07:75:FD:75:1B:DB:21:A2:5C:5A:28:AA:38:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5acc3cd0-5cf5-38d6-b086-a0d56a4b27a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:83:4b:ca:27:90:9e:dc:82:9b:5c:18:0c:c4:76:01:91:ff:
         ea:45:eb:52:ac:f2:5f:74:ca:1d:b9:f3:c2:3b:31:0a:8c:23:
         0c:dd:d7:ea:fb:c3:e7:ca:a5:1a:93:75:6f:c4:dd:d1:c0:0a:
         80:c2:b6:f8:41:66:15:06:b7:0f:8d:c2:11:78:0a:ce:8e:22:
         ec:4d:f9:e1:32:4e:f6:05:7a:7c:ba:d3:fc:0a:1b:e4:d2:5b:
         37:32:f6:b8:ef:eb:cd:52:cb:e7:17:77:b9:b9:2f:37:4e:26:
         7c:ca:46:3d:a9:7a:10:d4:94:44:7e:86:a6:a9:70:60:29:00:
         85:12:02:f1:9b:4f:d7:a4:e9:0a:89:bc:6c:fb:ef:2d:3a:a9:
         1d:6e:42:e4:99:96:26:25:7d:c6:80:60:eb:4d:8b:80:db:c6:
         fc:d0:b8:d7:f5:a3:c3:86:95:5a:f8:16:af:be:94:cd:f5:ef:
         b1:a7:3b:91:e2:0e:b8:71:20:09:c5:db:28:6f:0e:ee:c2:6d:
         0b:bd:d2:b9:2f:7d:47:38:ad:6b:6d:f1:c3:75:af:fb:a0:9c:
         89:07:76:16:64:7c:78:7b:7d:08:69:73:59:36:f6:0f:fd:1d:
         20:52:8b:7e:27:ce:c8:f7:b2:9c:a7:a7:6c:22:09:66:10:ce:
         3c:d4:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:19:30 2025 by rpki-client