Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24d437fd-b5d5-3f2a-9802-c953e7272ee3.roa
File:                     24d437fd-b5d5-3f2a-9802-c953e7272ee3.roa (raw, json)
Hash identifier:          8XBdw+EsiVqMLvU1pLMatvxADuK3cM/Fe4dA4wPAjGQ=
Subject key identifier:   F1:6B:02:3C:35:C9:A2:6C:7A:28:13:83:7B:18:3D:CB:4B:47:60:9B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094DA9C6DEE90378B8AB400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24d437fd-b5d5-3f2a-9802-c953e7272ee3.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     15169
IP address blocks:        104.197.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:da:9c:6d:ee:90:37:8b:8a:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=7355ede7-cbb3-4c59-9d1e-a0d78e1eb164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:5c:74:66:8c:b7:80:61:71:6c:85:da:f2:
                    a8:e4:e7:36:c2:24:1c:3e:71:0d:ec:c1:25:e6:17:
                    96:a9:55:0d:05:06:d4:ef:d2:8f:bc:93:1c:60:89:
                    e9:c6:9a:08:bd:1b:f3:19:db:77:7c:d5:69:43:85:
                    00:f3:d3:49:17:33:06:fc:41:e2:28:14:a5:85:62:
                    44:78:ae:6f:68:e3:8f:fe:26:5c:8f:7f:73:07:ae:
                    5a:61:e4:08:46:a3:de:82:6a:6a:3a:d1:b7:ea:6c:
                    22:de:a8:49:91:bf:0f:c0:ca:ff:10:28:40:29:5b:
                    c0:c8:6b:40:ed:da:85:2e:33:59:a6:b1:f6:fa:a6:
                    db:78:42:03:d4:14:aa:67:af:5b:29:96:29:d5:c3:
                    a8:0c:4a:4b:25:e2:e4:f0:c9:2d:29:a2:94:d9:ae:
                    bc:32:c9:8d:2d:a3:a9:41:39:d5:fc:31:7f:be:61:
                    a4:29:ca:b0:01:e8:b1:d8:00:6e:7c:e7:eb:35:92:
                    73:69:40:67:31:3d:1a:39:0d:c1:14:dc:65:0d:82:
                    80:c5:86:f4:7e:1d:c5:a6:f6:1d:f7:b4:2e:5e:6f:
                    19:82:15:81:ba:3e:3e:42:db:85:8a:6b:b9:94:9d:
                    36:96:7a:62:2e:29:06:f1:bf:f9:8a:99:31:aa:52:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6B:02:3C:35:C9:A2:6C:7A:28:13:83:7B:18:3D:CB:4B:47:60:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/24d437fd-b5d5-3f2a-9802-c953e7272ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:57:77:08:b5:30:83:80:54:a8:97:95:41:39:d8:bf:19:bd:
         ed:47:7d:ef:87:49:4d:d7:74:aa:57:b1:cc:48:d6:4e:a1:d5:
         af:f8:d3:eb:87:8f:aa:4a:2a:96:57:cd:08:f0:9a:f8:dd:91:
         b6:6b:e9:e7:8b:19:15:c2:1f:b6:b2:69:fa:5d:2a:27:c1:4b:
         d0:10:38:96:a0:40:d2:64:05:00:aa:31:d3:0f:df:dd:99:ca:
         e0:74:24:77:d3:f9:66:f1:0c:dc:c5:bd:4d:1e:6c:68:f6:ac:
         3f:8d:d5:6f:f8:8f:a3:5a:12:88:94:55:46:8b:71:41:d8:58:
         f3:c9:ac:f6:39:8f:8d:66:61:d0:8c:66:4b:14:95:05:7a:07:
         ad:0b:54:d7:9d:3c:41:a1:25:20:d0:38:ac:89:1a:41:50:7f:
         eb:70:76:ef:14:e6:06:23:3a:6a:75:ab:e2:ee:0a:af:d9:3e:
         25:16:df:7d:8a:d9:c9:b8:66:71:fb:26:ce:6a:fb:66:73:3d:
         2a:6a:59:cf:3c:f1:dc:5f:70:b2:01:d3:22:f5:17:c4:97:13:
         f6:39:8e:f5:c8:1c:4d:2c:41:f7:19:e8:39:d2:e0:54:89:73:
         7d:39:90:78:cd:af:af:9f:7e:04:36:c1:77:fd:17:1a:8e:31:
         30:f6:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:36 2024 by rpki-client on console-ams.rpki-client.org