Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b65b0926-b5c2-3315-acd1-592e4fb28a51.roa
File:                     b65b0926-b5c2-3315-acd1-592e4fb28a51.roa (raw, json)
Hash identifier:          7kojpTaxv21M0/almZs6EOTEsjYHBKNg/Ds+2Ws4Ecs=
Subject key identifier:   3F:6B:D7:3B:DD:37:4D:7C:E6:64:F3:92:8A:58:04:88:D7:D6:C0:6A
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285847E094D45B03CFF01DB261D7B8
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b65b0926-b5c2-3315-acd1-592e4fb28a51.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     36040
IP address blocks:        104.237.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:d4:5b:03:cf:f0:1d:b2:61:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=f6ecb3e1-31ca-41d9-9631-0dee7fad1d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:69:8f:09:6b:45:87:9a:24:8b:6a:ad:89:
                    e3:53:4a:45:4f:5a:a5:9c:26:27:75:d5:3d:bd:ef:
                    80:85:19:ef:2c:b8:b0:63:13:5e:0f:25:e8:ae:a1:
                    50:5c:f6:7c:28:fb:10:b5:56:92:e5:da:7b:13:0d:
                    dc:7e:e6:2a:f4:4e:85:b1:0e:e6:b9:94:ee:c3:4c:
                    b4:7b:b3:2d:b6:77:7e:d4:ec:18:16:f8:ba:df:b4:
                    8b:39:09:29:5e:66:2d:d1:85:7c:47:08:92:e5:0c:
                    5e:4b:b6:d5:25:8e:45:57:07:8b:5e:25:3e:39:4c:
                    35:e0:4c:c0:20:b7:82:09:0f:f3:1d:4d:42:d9:4c:
                    b6:e1:ad:98:1a:ae:b6:a9:6e:79:f1:57:c0:98:a5:
                    e5:ce:72:9f:aa:55:d3:f6:cd:ae:49:20:36:c1:3e:
                    a8:af:e4:e4:a8:f7:f5:11:3e:ab:88:49:fb:ca:db:
                    53:8d:a1:a6:3b:1d:1c:04:ec:c2:f1:05:06:81:25:
                    d9:dc:a5:cc:79:f2:2e:cf:a9:8e:ef:65:92:c6:1d:
                    8e:b8:b6:7e:fd:9f:65:23:65:a2:b7:77:36:2c:78:
                    ca:79:d1:5b:ef:8d:89:3b:bb:8a:6a:6a:12:96:06:
                    57:03:d3:b9:08:cb:ac:76:a4:4e:06:09:fe:64:75:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6B:D7:3B:DD:37:4D:7C:E6:64:F3:92:8A:58:04:88:D7:D6:C0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/b65b0926-b5c2-3315-acd1-592e4fb28a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:7b:87:f3:20:87:d3:cc:cb:21:cb:12:9a:44:0a:15:77:
         29:7c:da:67:01:8e:65:15:9d:da:90:ac:57:eb:f8:ab:59:c4:
         91:30:15:e9:b6:dc:27:54:b3:3d:17:0e:67:a1:8c:25:2d:ef:
         dc:53:ff:8a:43:60:3f:bd:57:2e:9b:e3:4b:11:d4:e0:90:59:
         53:55:5c:2c:48:52:77:19:93:db:c6:91:fd:16:7e:8a:b1:99:
         9c:a0:27:6b:6c:2a:53:f5:59:b8:a2:fc:83:a8:96:da:38:c1:
         28:6f:ce:35:80:13:aa:02:43:d1:b3:5d:6a:12:04:2d:38:ab:
         a4:31:3e:e4:d1:f0:5f:62:9a:51:40:a6:84:70:bf:8e:b4:44:
         93:f6:26:b1:21:eb:7e:05:b4:65:5d:2a:80:d1:fe:95:2f:cf:
         11:42:c1:66:21:19:47:17:c5:39:2e:66:66:c0:d1:71:e4:4c:
         0e:e4:86:03:ad:ab:22:18:bd:2c:3b:7e:60:76:79:e3:10:03:
         86:8e:e9:39:97:e2:fa:21:4f:a3:9e:e3:87:64:0f:c8:43:3f:
         5b:c9:10:f2:c1:70:e5:8b:02:e8:f2:79:6d:07:c7:ba:3c:74:
         b3:3b:db:7b:50:5b:b1:fa:58:b4:eb:4f:05:78:f6:e4:95:69:
         dc:97:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:16 2024 by rpki-client on console-ams.rpki-client.org