Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa
File:                     ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa (raw, json)
Hash identifier:          5vfFmaCtbpTTq3XlgCR9S5u+3mjD4skLxz4/uRgmcKQ=
Subject key identifier:   BA:B4:FC:A7:D6:31:1E:E3:BB:C6:58:89:31:43:63:A8:CB:D8:60:BB
Certificate issuer:       /CN=2775f7c3-c238-47d5-98c9-835a28d9095e
Certificate serial:       010D0C9F432858476C9DABA9E1221374D3461480
Authority key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     401104
IP address blocks:        104.167.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:ab:a9:e1:22:13:74:d3:46:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2775f7c3-c238-47d5-98c9-835a28d9095e
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=1c9d225d-4249-4b92-8a10-1455b3502354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:de:7e:e9:29:79:ce:e4:e6:63:42:62:2e:
                    b1:cd:9b:cb:97:d9:49:1b:4c:fc:bf:e5:95:5a:47:
                    e7:bd:e8:8a:40:ea:ec:a5:e0:f8:0d:bf:1e:f0:bf:
                    75:cd:f2:b7:ad:7d:7f:7d:a9:c6:cc:74:78:b4:61:
                    19:dd:dc:1a:92:d6:6e:d4:5b:30:03:0c:dd:5d:3f:
                    18:e4:79:3e:8a:4e:c2:33:63:9f:ef:2c:40:0a:37:
                    fe:56:b8:81:b9:09:dc:f1:6d:76:16:9d:5d:68:0e:
                    4e:7f:08:65:12:fa:fd:3f:97:45:24:39:b6:1d:22:
                    b2:42:e7:75:c0:46:a1:e7:d5:c7:f5:42:9a:68:7f:
                    1a:b6:0a:ce:7b:e0:90:26:10:4d:c0:43:ee:a5:ce:
                    fc:5d:b6:0b:cb:09:09:41:c2:69:99:67:02:c1:48:
                    1c:a8:97:7c:3f:0e:e5:aa:44:20:5d:4d:de:5e:56:
                    85:48:63:58:00:f6:41:46:87:de:ae:82:4e:e6:b1:
                    ad:75:06:bd:65:60:10:9d:9e:78:14:4c:ad:a8:01:
                    62:4a:b4:e6:71:a0:3f:f6:27:7e:5f:34:b2:ef:3b:
                    58:79:53:9c:d8:fb:48:f4:d4:59:f6:99:2d:92:04:
                    1b:3b:04:3c:e2:c1:6a:af:22:35:86:35:2c:90:cd:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B4:FC:A7:D6:31:1E:E3:BB:C6:58:89:31:43:63:A8:CB:D8:60:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ae357901-63bf-3b7a-a7ed-8cfa2bc2f085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:65:ae:88:48:6f:d7:8e:22:8e:65:ce:71:4c:30:a2:12:8b:
         76:04:95:ba:04:f6:d4:30:f2:bd:7e:ae:18:d3:96:00:ae:be:
         61:40:c9:d3:26:3b:89:08:62:c3:48:3f:a7:b7:cd:86:c0:e1:
         5f:56:22:69:58:be:29:b7:6a:9d:63:27:63:bd:5e:8d:f5:c9:
         86:24:4f:90:0c:8d:a8:4c:45:4d:19:e5:42:aa:96:99:9c:ef:
         7f:5f:49:e3:d8:45:9a:79:d1:d8:2f:b3:17:b1:91:26:6e:1e:
         18:43:78:64:8e:7e:54:7c:e9:37:2f:29:cb:77:5b:f5:3f:85:
         74:11:27:05:57:24:69:83:a0:11:fa:41:b5:60:96:c3:4f:e0:
         1c:99:9b:47:d6:ed:23:c6:ae:5b:d7:ce:05:55:bb:54:a9:aa:
         13:6d:64:88:3e:ce:6a:ed:b4:c2:0e:e1:bc:6a:3d:cb:a7:15:
         b4:2f:3c:be:c8:2d:ac:fe:7d:80:16:af:80:68:f8:76:97:f0:
         5b:f9:93:45:34:bb:b0:49:e4:24:fa:ad:50:84:c4:c1:de:9c:
         2a:b6:95:a1:1e:bf:13:a9:08:88:c1:e6:b3:59:4a:59:6f:21:
         e5:28:28:6e:55:34:10:67:5d:bd:dd:6e:72:dc:f8:9e:82:02:
         ad:34:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:04 2024 by rpki-client on console-ams.rpki-client.org