Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa
File:                     7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa (raw, json)
Hash identifier:          n+pSzISK2rStkzgfV2Nqfpv+hfTjXKQj3VrhZ2m+M5g=
Subject key identifier:   E9:4B:E2:DA:C2:E7:7C:90:B8:11:5D:3B:F5:A3:F7:23:C1:A9:A8:8E
Certificate issuer:       /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Certificate serial:       010D0C9F43285845AC88BF606667861892CAF100
Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa
Signing time:             Fri 26 Apr 2024 13:00:35 +0000
ROA not before:           Fri 26 Apr 2024 13:00:35 +0000
ROA not after:            Thu 25 Jul 2024 13:00:35 +0000
asID:                     174
IP address blocks:        104.247.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ac:88:bf:60:66:67:86:18:92:ca:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
        Validity
            Not Before: Apr 26 13:00:35 2024 GMT
            Not After : Jul 25 13:00:35 2024 GMT
        Subject: CN=972a1b42-603d-42fc-959d-2063f48209d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:20:66:3a:0c:c9:ff:05:4b:07:ee:b5:a1:
                    a3:db:86:9d:94:a8:ca:e6:45:f2:bd:58:91:03:0a:
                    03:9c:1f:3f:71:64:a1:4a:be:8b:da:45:2e:7b:76:
                    82:49:b1:62:c0:d0:b0:51:25:56:27:70:03:04:e0:
                    cd:db:3d:17:ba:eb:7d:58:11:ff:b6:4e:41:26:b3:
                    ea:40:9e:d5:56:29:1f:37:14:81:92:6c:ff:34:5e:
                    4e:b9:ac:09:8f:60:f4:1a:d9:87:f9:1e:7e:cb:0f:
                    c4:c6:2e:54:fd:4d:45:07:36:0f:c5:4e:e4:ea:ab:
                    64:58:f2:b7:2f:ef:0c:45:29:d2:5d:fd:e9:a6:f1:
                    e1:bd:a9:0e:79:c6:93:50:19:f3:a4:74:86:3b:03:
                    7d:b1:d3:a0:fd:d4:68:1b:08:bc:cd:ee:b5:0e:c9:
                    23:6b:42:20:f3:81:9f:57:4e:e8:6f:68:5d:4a:6a:
                    95:88:82:4e:fc:7b:a7:51:eb:a1:6c:d3:44:fb:f5:
                    e1:99:66:51:47:50:cc:86:b9:ba:20:25:b3:51:d8:
                    7b:07:37:4e:94:9e:70:c7:93:1e:6e:be:ca:7e:ac:
                    58:49:ec:7c:f7:1e:12:2b:91:a7:25:b0:7d:53:41:
                    76:41:40:f8:ee:ba:24:2b:e9:6f:aa:65:66:24:70:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4B:E2:DA:C2:E7:7C:90:B8:11:5D:3B:F5:A3:F7:23:C1:A9:A8:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/7b406d0d-800e-33ab-9506-76e8dba9b5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:46:3b:3a:ab:ed:55:29:dc:21:e2:9a:0e:fa:20:09:99:
         44:42:83:c2:9a:9e:6a:a9:d5:7e:db:5b:84:52:c4:6b:c9:9c:
         cb:8e:45:09:45:93:a4:4e:f9:ff:5f:9a:f3:50:b4:a5:ec:e8:
         ea:a2:48:3c:0d:32:5a:63:1a:7c:2e:d9:0a:0d:b1:b7:3d:65:
         19:a8:c9:89:76:ba:8d:d4:19:ef:ee:60:6e:b9:ea:63:9c:ad:
         e7:89:2a:05:ed:96:5b:3e:4f:75:c8:6c:da:63:4d:dd:7c:4d:
         6c:35:4a:16:d9:46:6c:bf:b2:8c:50:25:82:5a:35:06:d4:81:
         d3:5a:57:7a:fa:8f:b8:bf:b5:ed:e6:bc:c6:94:50:2b:28:69:
         02:c2:16:ef:d6:db:20:62:bc:71:83:67:c6:43:39:29:93:12:
         39:e9:b5:6e:9b:5d:bf:58:31:b1:16:c0:2b:34:8d:27:7d:10:
         32:0c:5d:1d:32:6c:26:7b:7e:19:88:66:24:bb:9c:12:00:30:
         0d:4a:47:4a:fc:a3:69:58:31:4e:bd:2d:68:41:ed:16:b2:8f:
         a9:f8:c5:b0:85:81:5b:70:19:39:f9:f7:28:b8:4d:97:6c:63:
         fa:5f:95:67:92:31:0a:a2:be:da:bd:cd:f9:1c:9d:3d:ed:a6:
         1e:35:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:23:38 2024 by rpki-client on console-ams.rpki-client.org