Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa
File:                     b510b231-5c86-397c-b89a-69e44e4abe9c.roa (raw, json)
Hash identifier:          gEsypIhaVKVX3EBrrlRgVVwHIlw1CTgPRHMeBcDamxg=
Subject key identifier:   BC:64:9F:43:E4:66:9A:62:A1:59:D7:BA:B2:38:DA:BA:53:F8:C9:BD
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F43285847E78F5B100BD01B095FBC49C0
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     21743
IP address blocks:        104.247.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:5b:10:0b:d0:1b:09:5f:bc:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=b56faed2-fbd2-4f55-9d60-31b587cf8e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:0e:db:c1:eb:3f:5e:9a:f6:69:2e:30:cd:
                    a3:43:68:63:eb:04:53:7a:61:ab:1c:a9:d6:a3:c4:
                    f0:ba:5e:3e:6b:dc:6e:57:a1:9d:73:9e:5e:84:48:
                    5b:bb:8c:15:ae:96:af:e6:1e:44:a7:33:9d:6d:a2:
                    9e:48:37:7d:88:11:ce:80:8d:69:dd:ab:22:d2:7f:
                    63:0b:3c:90:37:08:c4:6c:09:bb:89:66:4b:9b:58:
                    f4:53:9a:f4:0b:66:ad:38:f4:46:f5:1a:0a:84:3f:
                    2f:e9:c3:13:b6:b8:dc:56:3e:48:2a:78:d5:90:b8:
                    1c:1c:9d:0a:93:d6:51:60:2f:d6:71:88:66:b8:5e:
                    25:10:47:0b:4c:89:3f:7e:84:e7:8e:6d:71:6e:14:
                    25:bc:50:19:71:0d:a0:b8:db:a6:56:58:8b:c0:99:
                    97:a7:86:1a:dd:09:e8:95:5e:1c:72:f8:24:da:72:
                    a1:b5:fe:b1:25:ca:8c:5e:b1:c7:b7:42:b1:8e:d1:
                    76:9a:ba:13:27:b4:e4:9f:61:61:6a:45:34:32:97:
                    21:5e:ba:3c:0e:6c:b9:f0:93:12:7b:9b:0d:8b:67:
                    d1:1d:f9:bc:45:c2:c1:ea:9b:95:a6:12:6d:a8:cf:
                    59:a4:55:b2:a6:f6:9d:65:e5:1d:a4:ce:60:98:6d:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:64:9F:43:E4:66:9A:62:A1:59:D7:BA:B2:38:DA:BA:53:F8:C9:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/b510b231-5c86-397c-b89a-69e44e4abe9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:4a:58:b1:98:f9:df:b7:c6:d4:ca:f2:07:f1:32:b2:d9:
         76:8c:d0:5f:1f:c4:e1:82:08:21:b7:a5:de:7c:a7:d0:fd:6d:
         53:1c:b8:4e:a3:b3:aa:d6:6e:ab:56:7d:9b:74:63:c4:3b:f6:
         8b:76:35:66:38:64:ec:23:66:6f:8a:e2:7d:04:7f:eb:c6:34:
         50:79:be:d6:71:d8:89:09:59:35:b1:4a:9f:78:6a:d6:f3:97:
         e4:33:9b:70:df:c3:3c:58:d0:e4:bf:56:71:f6:9f:94:f5:65:
         4e:39:3b:e7:e8:53:28:de:36:ad:c0:e6:0e:17:6a:3f:6e:a5:
         2a:39:dd:06:f0:f8:90:f2:23:51:b1:47:68:e8:bf:40:31:ba:
         fa:7b:b1:1d:b1:d9:5b:3a:0d:b9:b1:a6:79:10:f4:80:b3:ca:
         68:2d:bf:16:73:01:81:aa:83:f1:40:d2:4d:6b:e9:44:56:5a:
         38:a8:27:ca:75:a9:7a:33:fc:3d:4c:cb:47:65:2a:d9:92:d4:
         7d:24:76:e1:cb:89:25:67:5b:9f:94:26:7e:7b:7d:bd:9c:e0:
         d5:da:d9:51:21:f1:44:c0:33:37:87:df:a2:a0:70:d4:69:97:
         4a:18:68:7c:58:91:ae:67:e6:c6:44:13:82:63:5e:1c:2e:f5:
         99:14:44:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:40 2024 by rpki-client on console-fra.rpki-client.org