Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6e175c72-bebe-3f83-a0ed-de5824de4518.roa
File:                     6e175c72-bebe-3f83-a0ed-de5824de4518.roa (raw, json)
Hash identifier:          joh0vedUFP+jRAXWxPYW1prxqdIb7cDDvHJxkZECqWQ=
Subject key identifier:   59:E1:F2:FD:55:EA:EA:DD:4D:21:17:60:A6:83:1E:1E:8F:6E:F4:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858472B83C31D11C41DE3559FEB40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6e175c72-bebe-3f83-a0ed-de5824de4518.roa
Signing time:             Tue 10 Sep 2024 17:25:12 +0000
ROA not before:           Tue 10 Sep 2024 17:25:12 +0000
ROA not after:            Mon 09 Dec 2024 18:25:12 +0000
asID:                     397373
IP address blocks:        104.253.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:83:c3:1d:11:c4:1d:e3:55:9f:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 10 17:25:12 2024 GMT
            Not After : Dec  9 18:25:12 2024 GMT
        Subject: CN=415b98d9-6d9a-401c-acc7-4fb359ac47ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:22:3f:bc:93:d7:ea:ff:4d:51:99:28:cd:
                    84:59:7c:b2:34:58:59:f7:fc:75:3a:ae:fc:2a:7c:
                    5c:d1:f1:2b:2b:3a:5f:64:8b:c9:6b:d6:de:0e:a5:
                    39:e6:dd:b8:84:39:32:ec:59:a8:8c:52:b4:f2:7c:
                    71:6d:4a:e2:34:fd:03:f1:06:79:eb:16:cf:ef:d8:
                    27:d2:79:7f:e4:9d:37:f1:c6:5a:d1:3f:55:25:b1:
                    b0:9b:bf:51:07:69:a0:3d:79:28:bc:fd:9f:f4:fb:
                    42:0a:a7:80:ef:48:ee:37:fc:d1:e6:7c:99:b0:47:
                    16:80:b8:7c:9d:11:7a:d7:bb:d4:aa:85:d4:b3:39:
                    22:80:fe:84:05:a9:a7:e9:7d:17:98:33:01:26:3f:
                    80:53:0d:53:c6:6a:9e:be:87:93:f7:56:07:6d:f4:
                    7e:50:41:fc:a7:a9:37:3b:ec:f2:2a:c0:f9:a4:1c:
                    20:6a:9c:fb:f6:3c:fb:84:01:6b:7b:ee:0b:de:97:
                    7d:dd:74:37:84:fe:e7:01:6f:d9:a4:64:7c:01:df:
                    c1:8c:ae:d9:6e:8f:79:1f:f6:8a:ab:22:04:56:fa:
                    e4:be:86:61:23:c4:69:4d:ca:f0:85:2b:fa:f7:28:
                    5a:5a:bd:7a:89:44:a0:b1:8a:72:7f:3f:5c:cf:65:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E1:F2:FD:55:EA:EA:DD:4D:21:17:60:A6:83:1E:1E:8F:6E:F4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6e175c72-bebe-3f83-a0ed-de5824de4518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:72:89:99:d9:bd:73:ce:93:0c:67:97:ce:99:5e:90:40:2b:
         63:8b:3a:e4:59:ce:f2:57:03:b7:1d:e5:90:f2:30:7a:1e:30:
         9e:00:93:1f:7c:a5:00:10:d2:a2:de:6b:55:f5:ba:69:16:3c:
         d5:e9:22:9c:9d:4e:f8:d1:d3:9e:a9:00:c4:ae:ff:12:8f:09:
         ef:db:79:54:77:3d:64:32:c7:90:fa:65:58:44:cd:b9:cd:4c:
         36:55:98:fb:e7:35:85:5b:88:ca:a5:27:a1:a9:e4:64:dd:56:
         f2:e1:d9:8b:fd:df:41:ae:bf:81:a8:0d:7c:5f:ba:5f:49:1a:
         a7:5c:6b:53:3b:0d:b1:60:3f:89:a4:d6:28:a1:86:84:5a:dd:
         1b:90:47:20:50:ac:d2:97:f3:85:9d:87:79:10:a7:76:dc:ca:
         25:cc:71:15:a9:cf:de:19:9c:a5:b3:47:1f:7a:31:f6:c5:3d:
         0f:55:6a:4b:97:87:fa:3c:e4:73:52:2a:3a:b1:d2:1b:41:f7:
         20:19:30:ac:11:6f:19:ba:98:e8:0d:86:ac:70:1e:a8:e0:ca:
         18:02:e9:bb:a9:83:dc:38:6f:b7:26:e3:25:86:0a:9d:88:6c:
         c6:af:77:4b:bd:1e:0e:a9:e8:37:80:b3:b4:a4:a9:18:fd:de:
         43:ba:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:41:50 2024 by rpki-client on console-ams.rpki-client.org