Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce215028-46fe-32e3-aa01-6d8a11d0be71.roa
File:                     ce215028-46fe-32e3-aa01-6d8a11d0be71.roa (raw, json)
Hash identifier:          if9YC8qHIO57l/RKcYnfA7QjvOQOfGCc9unzeDohkXo=
Subject key identifier:   71:E8:C0:3C:5F:3C:C4:26:97:76:31:D1:0E:CD:FB:5D:0C:E5:C9:16
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E094F446AAFB0E1A6F930600
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce215028-46fe-32e3-aa01-6d8a11d0be71.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        104.154.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:f4:46:aa:fb:0e:1a:6f:93:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=74ad7505-34a7-4ff2-8696-e121575355a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:d3:53:7d:dc:63:2d:4e:84:88:50:c1:85:
                    f9:fd:86:85:b4:f2:32:81:1f:e6:64:26:6e:48:31:
                    df:19:94:b1:59:77:61:a2:83:2c:14:1c:c1:36:a4:
                    23:f6:10:81:cd:31:07:57:08:b9:77:e2:1e:e8:1f:
                    70:1a:02:2e:36:3d:65:b1:74:81:12:b1:b2:5e:c5:
                    41:e4:db:8f:bf:70:18:83:41:5d:ec:e7:cd:47:dc:
                    a7:70:da:5f:7f:82:ca:22:ac:13:2b:42:3f:19:59:
                    3a:51:c5:4e:b1:e9:16:f5:b8:4d:18:d5:71:19:7e:
                    da:ac:29:f5:7f:43:27:89:2e:f8:5f:36:f2:52:0b:
                    39:7f:70:2c:e0:87:44:7a:b7:5b:6d:bc:b0:7a:4a:
                    be:9f:60:1f:63:1e:15:d0:aa:3e:b0:bc:22:cb:d3:
                    6a:12:ce:92:11:9e:26:91:75:13:eb:12:a2:be:b1:
                    ce:86:90:63:76:f5:45:cc:8e:a1:fc:fc:88:2a:dc:
                    2a:91:63:f6:28:a0:fb:c5:ca:07:73:99:4d:9b:a2:
                    02:09:9c:de:38:e3:99:fd:e8:75:c7:9c:9e:d8:02:
                    86:c2:e3:5b:9e:37:d8:24:45:9c:f5:d6:d1:9c:06:
                    6f:73:90:54:b6:db:1a:40:b2:b1:0d:9e:45:f1:01:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E8:C0:3C:5F:3C:C4:26:97:76:31:D1:0E:CD:FB:5D:0C:E5:C9:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce215028-46fe-32e3-aa01-6d8a11d0be71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:93:b8:75:94:cb:2e:5d:ae:d6:65:75:92:55:5a:30:99:
         a6:da:ec:7e:5f:ab:94:35:9e:3d:93:a1:90:2f:8a:ef:92:02:
         50:c2:4d:9c:d4:8a:bc:39:02:26:b9:8f:1e:19:bd:2f:73:fe:
         67:37:25:fc:f4:74:c2:9e:10:cd:bf:b0:b9:f0:a5:2f:4f:b4:
         fb:f9:4e:48:aa:4d:ab:54:d4:dc:40:d3:f1:16:61:79:ef:13:
         87:c9:d2:19:81:b8:ca:63:dc:b8:ec:82:99:4b:ca:f2:d8:99:
         38:c5:c9:24:ef:07:3c:85:a7:4e:af:b9:96:a0:64:da:99:bc:
         67:ee:c9:01:e5:1b:4a:76:7f:e2:ea:47:a7:e5:1b:be:de:cb:
         66:48:fc:40:78:a6:b8:8a:ad:92:71:1f:00:2f:e8:b6:7b:19:
         9d:a6:84:df:6c:a9:3e:78:f9:fe:18:3d:12:49:35:ee:35:d6:
         10:86:5c:a6:81:fd:06:ad:32:ce:e0:5d:58:d6:d5:68:9e:af:
         43:f8:c2:46:31:81:a1:cd:96:cf:3d:a6:1a:fa:5a:89:93:8a:
         55:4d:02:28:83:63:71:fa:c8:a9:0b:9e:2d:34:99:63:91:50:
         c9:49:94:20:cf:45:99:17:f5:d7:6c:66:27:5d:03:5f:3c:a8:
         31:fa:d9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:07:44 2024 by rpki-client on console-ams.rpki-client.org