Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc01e933-74a6-363f-81c5-b35834203e7c.roa
File:                     bc01e933-74a6-363f-81c5-b35834203e7c.roa (raw, json)
Hash identifier:          NhjlrR9ihRxkg13ddDmJyw5kicvRo5wRb0PUdcEsw/Y=
Subject key identifier:   9C:29:0E:2E:B5:4C:FF:0C:AA:3F:2D:4C:08:88:91:C2:5D:DE:B7:8C
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845B82A5C797FD278A2F5DE3D60
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc01e933-74a6-363f-81c5-b35834203e7c.roa
Signing time:             Tue 30 Apr 2024 17:00:10 +0000
ROA not before:           Tue 30 Apr 2024 17:00:10 +0000
ROA not after:            Mon 29 Jul 2024 17:00:10 +0000
asID:                     834
IP address blocks:        104.129.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b8:2a:5c:79:7f:d2:78:a2:f5:de:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 30 17:00:10 2024 GMT
            Not After : Jul 29 17:00:10 2024 GMT
        Subject: CN=7063da4c-80b3-4f4e-bb46-48795b66db57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:f2:fd:bf:58:d8:fd:f5:b1:95:48:91:c0:
                    2e:09:92:9c:2b:aa:94:93:1c:51:54:35:1f:3a:83:
                    17:29:eb:9c:27:34:30:de:4c:13:03:2b:07:a6:27:
                    5a:b9:6e:46:e1:1a:5e:c8:f7:37:23:93:3a:17:ce:
                    38:72:ce:cf:ca:7f:22:67:9e:b3:c6:01:4f:d0:21:
                    0b:ad:de:0d:6c:97:e8:10:d3:3d:1d:6f:29:cb:19:
                    bb:e9:f9:58:5d:d3:0e:5f:3a:99:a3:64:4e:1f:7e:
                    77:8f:7a:54:9e:65:a9:51:69:82:8b:b8:d8:74:97:
                    b8:5f:d1:95:14:b5:92:7c:4f:c4:e2:75:05:d3:0d:
                    b6:ba:c2:32:a3:b6:85:64:97:b5:c5:e6:0a:0b:81:
                    a8:4c:fc:58:4b:58:85:d6:b8:d7:74:42:5a:28:36:
                    51:c6:61:57:27:9d:4a:12:22:a2:06:cd:a6:fb:ab:
                    90:1a:90:b9:16:9d:2d:e6:ff:00:4f:55:0a:84:ec:
                    ab:03:28:b4:69:3c:6b:ee:c3:72:54:0c:aa:21:1b:
                    80:a5:1e:3e:3d:94:6a:be:0f:68:c2:83:3c:d7:4f:
                    01:35:9e:41:89:22:c6:47:bb:47:5f:f9:5e:7b:d8:
                    9f:ff:9b:d2:84:9d:47:94:07:5d:38:10:71:f0:3b:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:29:0E:2E:B5:4C:FF:0C:AA:3F:2D:4C:08:88:91:C2:5D:DE:B7:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bc01e933-74a6-363f-81c5-b35834203e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:e9:fe:80:c5:e5:51:b0:b7:f4:3e:6c:c9:74:57:59:c0:08:
         04:02:3e:3c:f5:75:2f:83:3a:73:69:8d:d4:e9:43:fb:f3:6e:
         a3:07:05:38:10:15:8b:70:f7:3f:e0:e2:fc:ff:c1:2f:dd:79:
         6a:86:ef:31:f6:ba:9e:b0:6e:f7:23:be:d0:88:fa:4c:66:cc:
         18:69:3d:f9:bc:83:81:92:2f:7c:31:7a:34:f0:d2:39:90:25:
         75:69:77:0e:5f:3b:31:1d:6a:3a:f9:75:78:92:0b:f7:f9:b7:
         a2:b9:d2:07:2a:1b:71:f2:88:0d:32:d3:50:36:34:ca:b5:3d:
         11:6f:e4:a0:ed:5a:1f:f7:b5:fd:b9:26:04:09:7e:b3:cb:4a:
         97:73:af:ea:04:40:90:5c:e3:cc:98:4e:74:d5:51:74:61:73:
         37:cc:6b:d1:89:ef:24:c2:f0:6a:7b:ff:2c:c0:b1:1d:a9:d8:
         b1:aa:fc:19:92:b0:5b:28:4c:15:33:22:c2:56:cf:36:5b:73:
         d9:4a:3f:db:39:77:d9:0c:ab:96:6f:a7:1b:4b:a8:0f:03:19:
         4e:83:60:6f:aa:15:80:a1:7f:b1:39:98:3f:31:b1:2a:79:71:
         00:ac:09:ac:e6:a0:ef:9c:51:0b:de:c3:f3:3c:de:f7:57:05:
         f7:4e:be:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:58:15 2024 by rpki-client on console-fra.rpki-client.org