Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1247a9ca-19e2-3038-b7d9-2061b9a87d37.roa
File:                     1247a9ca-19e2-3038-b7d9-2061b9a87d37.roa (raw, json)
Hash identifier:          vSY+bWsIBy5TNpqdzKSMJpCUkdAFruOiJT544bXq6o4=
Subject key identifier:   84:18:9F:07:BA:BF:2D:F3:A2:31:E4:54:AC:64:37:4D:F2:EF:DB:67
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845B3837004112215236A1E5FC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1247a9ca-19e2-3038-b7d9-2061b9a87d37.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     834
IP address blocks:        216.74.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:70:04:11:22:15:23:6a:1e:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=7a45bd3a-31a3-455e-80d6-5e37e7db4329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:89:78:fc:43:2c:55:78:c7:3e:fa:51:e9:
                    7e:e6:a8:fc:0e:2b:4e:e5:e2:4c:2c:e3:e1:1a:95:
                    a0:8e:e1:e5:e7:32:18:41:d6:92:b6:5a:a8:82:e6:
                    c9:6d:90:d9:e8:d4:84:0e:9f:67:e2:b5:f3:47:6a:
                    0b:8f:ea:01:1b:84:31:57:7a:6e:4b:4d:7d:10:ee:
                    6a:9e:c7:54:f1:d5:08:34:0b:07:44:60:a9:77:17:
                    11:36:fa:65:35:31:f6:6f:83:90:b7:42:a4:8f:53:
                    de:57:7b:a1:2c:41:b7:ec:ab:3d:ae:c3:2d:51:83:
                    f9:94:07:4b:ad:0d:4f:d0:81:07:d7:e7:8a:7e:16:
                    e4:83:63:ee:52:30:4d:c8:12:ca:58:1f:aa:1c:2a:
                    ee:08:8e:a0:f2:5a:8f:cb:93:a7:d1:8b:f3:aa:5d:
                    50:82:ab:3a:a1:37:3f:c3:75:34:3a:b3:10:69:a1:
                    cc:58:af:44:b3:d2:26:5f:06:ab:98:27:0a:61:ba:
                    f5:04:3e:db:9d:f1:4b:5c:c7:d9:be:12:07:32:ed:
                    f6:ce:2f:e5:35:7d:61:eb:f1:af:52:69:3c:b7:24:
                    5c:72:a6:fa:61:da:56:a2:e5:56:8b:3c:45:db:4b:
                    89:b2:4f:07:06:a6:0f:f8:10:a3:ee:09:04:7d:65:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:18:9F:07:BA:BF:2D:F3:A2:31:E4:54:AC:64:37:4D:F2:EF:DB:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1247a9ca-19e2-3038-b7d9-2061b9a87d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:87:bb:29:98:24:89:14:e5:4f:4e:eb:e2:9f:7b:06:f6:
         b1:da:2f:4d:d2:6d:54:4f:6f:21:51:7a:54:82:63:14:e4:c4:
         d4:8f:4f:a5:00:0d:15:c4:b7:95:40:39:08:75:c8:20:e3:fe:
         38:0c:0f:a4:e6:d6:1d:c3:ac:d8:fe:b8:42:2c:5d:89:45:d9:
         8d:74:75:fa:8d:3b:e1:b7:ec:ac:c0:d3:db:43:01:b0:19:60:
         71:67:ce:fd:d0:7b:91:69:f2:c7:58:b3:c0:e9:8c:90:d3:e2:
         bb:8c:ef:f7:52:b1:22:59:9a:f6:d4:58:e1:e4:b0:95:bf:9e:
         c0:47:39:67:06:9d:75:f7:b8:c3:ae:bf:e4:5f:43:ac:f6:54:
         b4:23:88:d3:97:6a:4b:f5:a3:f5:85:c3:85:75:2d:93:c8:34:
         d4:a3:c4:8c:f2:bd:a6:4a:b8:55:51:e7:86:fd:c5:89:d5:6c:
         db:b5:44:29:56:e5:37:7f:89:35:3a:23:20:75:c4:64:a6:4d:
         a1:11:f3:d3:d0:f7:90:e4:71:01:5f:2a:1d:3c:13:23:60:6b:
         08:82:e7:42:5d:b3:78:17:dd:c0:74:bb:97:bd:71:4d:94:ad:
         12:f0:c2:fe:7f:a5:95:9a:83:2b:97:dc:13:78:7f:a5:9d:45:
         75:45:b5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:10:42 2024 by rpki-client on console-fra.rpki-client.org