Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29586f18-3788-3e4f-af9d-49293049fd1e.roa
File:                     29586f18-3788-3e4f-af9d-49293049fd1e.roa (raw, json)
Hash identifier:          bwG98jGAM3kKADJwGmgVXxb/4kx4w7F2895AXzprquk=
Subject key identifier:   BC:9F:61:1C:D8:6E:25:97:81:09:86:45:D4:91:5A:44:C2:85:D6:10
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845E45E7F4ECBA2C58200CF2159
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29586f18-3788-3e4f-af9d-49293049fd1e.roa
Signing time:             Thu 16 May 2024 13:00:35 +0000
ROA not before:           Thu 16 May 2024 13:00:35 +0000
ROA not after:            Wed 14 Aug 2024 13:00:35 +0000
asID:                     400409
IP address blocks:        104.224.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e4:5e:7f:4e:cb:a2:c5:82:00:cf:21:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 16 13:00:35 2024 GMT
            Not After : Aug 14 13:00:35 2024 GMT
        Subject: CN=246d34e3-579e-4db6-b264-9baad3e4467b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:12:54:61:1e:11:77:b7:23:c5:57:aa:9d:
                    6d:87:bf:b6:fd:bb:96:97:fd:e9:48:ca:c5:5c:3c:
                    6f:19:30:44:80:7c:ac:b3:37:75:2a:03:a7:f7:0e:
                    ab:9c:ac:ac:74:ee:05:dd:e5:d0:15:de:c1:ef:92:
                    d5:9c:67:6d:94:08:1d:9d:75:1a:cf:6b:3d:7c:f8:
                    43:17:18:e0:49:29:27:93:c5:09:55:8b:06:d7:38:
                    10:e4:b6:b7:ce:7e:da:22:d0:17:ba:8a:72:dc:aa:
                    ca:4d:96:56:2c:69:dc:26:2a:83:c8:88:4f:11:c5:
                    4e:56:ac:88:e7:40:43:80:93:c1:3a:f2:8e:40:04:
                    94:be:42:77:c2:bc:9d:c5:c0:90:a9:bf:fa:7f:0e:
                    51:29:60:b6:92:c1:c7:01:64:d8:85:2f:5b:bd:61:
                    18:d7:7c:ca:47:3a:61:8a:9b:6e:d0:48:9f:61:7f:
                    c3:ad:90:6c:51:be:21:04:f4:8d:e2:07:4b:1d:98:
                    30:61:09:8b:36:45:ad:f3:b7:86:ce:16:db:92:66:
                    a4:8f:83:db:c6:2c:f2:a3:c1:71:da:d7:4e:f3:13:
                    63:34:ee:95:07:4c:3d:8c:98:97:95:44:cc:d6:c8:
                    17:92:e6:b5:75:8e:11:c4:59:90:fb:75:71:47:f4:
                    50:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:61:1C:D8:6E:25:97:81:09:86:45:D4:91:5A:44:C2:85:D6:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29586f18-3788-3e4f-af9d-49293049fd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:8e:71:22:2f:52:33:ef:53:7a:a1:54:98:09:c0:cd:7b:
         64:ec:99:a3:03:c2:a4:fb:9d:cb:29:89:49:85:fc:62:20:74:
         79:92:5f:4c:e1:7a:0b:90:7d:77:53:49:b7:7a:b6:9a:e4:75:
         d6:cb:91:d4:91:93:57:c2:e5:9d:cb:5e:4f:8f:c6:a9:51:09:
         d4:aa:97:67:50:27:3c:2f:ae:77:be:80:04:a9:a2:20:22:7e:
         db:c7:c0:74:33:1e:73:81:8d:19:d2:31:1b:1c:4f:05:13:25:
         ad:49:77:1f:f1:df:32:f9:4d:3a:d5:d2:a9:41:a5:92:c1:b9:
         1f:57:0f:d7:4e:68:93:d0:de:28:d1:92:2c:39:c4:a3:3c:30:
         78:f7:24:ba:95:ae:29:56:e7:d3:a0:f2:6c:03:f6:60:1b:12:
         de:5f:5b:35:da:69:0a:46:ab:42:8b:6d:fe:a7:46:70:05:59:
         3b:ce:da:30:81:d2:ff:b6:d9:54:7e:f4:c8:61:c0:9a:0b:ee:
         c1:58:64:79:c2:61:90:3d:fa:46:d4:bb:07:d3:e9:0a:ac:19:
         4e:f7:3e:41:84:6d:ce:f0:fd:19:96:43:58:1d:c3:10:72:66:
         5a:90:10:b6:d7:dc:20:35:bb:0c:52:f2:e4:2c:ef:a4:4e:b7:
         9d:c4:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:21:12 2024 by rpki-client on console-ams.rpki-client.org