Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
File:                     bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa (raw, json)
Hash identifier:          JUQAnORbUtF0FTBCXcDuElJ3NouTt/0r8Onorm13DfI=
Subject key identifier:   E1:FC:84:5F:E2:FB:FF:8C:54:C4:48:C8:F2:B8:B9:33:5E:48:A8:FB
Certificate issuer:       /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial:       010D0C9F432858473D25EB2B7C6A284479568E80
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     33185
IP address blocks:        104.167.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:eb:2b:7c:6a:28:44:79:56:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=88515e48-1f83-4afd-93ce-cf65e561c7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3b:f4:58:4b:e7:f0:58:e3:67:20:27:15:44:
                    cc:8c:f6:2e:1b:75:2f:bf:f8:78:e3:ba:f0:e0:53:
                    f1:b6:0f:a9:50:e2:d1:3b:7c:19:20:08:b3:31:07:
                    74:86:37:2b:5b:a7:44:61:1b:07:2f:1d:4f:dd:fe:
                    2c:d0:d8:9e:fe:0e:6c:a7:c6:f3:3a:25:32:d1:be:
                    2f:23:da:00:64:32:c5:70:a0:01:9f:3f:e5:63:81:
                    70:34:91:87:3f:3a:83:b4:a8:35:54:0d:04:96:53:
                    60:ed:d6:f6:6b:a0:90:9b:58:a0:fc:da:31:42:0c:
                    ae:ce:06:8f:e5:7e:82:df:5a:31:b8:8b:54:da:9a:
                    76:fd:cc:34:e2:04:1d:20:e4:50:e8:9c:f0:a2:0d:
                    a0:19:3c:32:99:c3:86:80:6c:33:8a:f7:0a:a6:1e:
                    38:11:75:9d:ad:41:71:2b:80:78:9b:90:1d:79:94:
                    c2:ec:40:96:ff:ca:4c:7f:ae:27:0f:cd:92:e3:d2:
                    f1:ac:fa:a3:b3:ff:11:b4:f3:d8:be:6d:2b:35:2b:
                    e4:ba:b7:47:a7:59:e0:e5:df:9f:03:42:69:9b:5e:
                    12:ae:08:55:5b:f0:2b:dd:50:61:ea:31:8f:cf:ed:
                    96:dd:10:b8:2f:fe:91:f6:70:54:02:52:fa:6c:39:
                    08:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FC:84:5F:E2:FB:FF:8C:54:C4:48:C8:F2:B8:B9:33:5E:48:A8:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/bb6e7d90-75ce-3d1a-88e9-674e0647f9bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl

            X509v3 Authority Key Identifier:
                keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:63:42:78:44:5c:54:15:2f:e1:2b:08:d3:d9:14:c0:67:3f:
         bf:bf:dd:01:7e:5b:00:8a:07:6e:15:06:91:9c:6f:94:ec:e8:
         bc:0f:40:6b:74:a0:4e:65:02:30:7c:19:0a:86:e2:11:8f:85:
         d0:df:5e:f6:7b:fc:7f:19:14:90:4a:6a:18:a8:e9:d7:96:25:
         98:92:61:16:49:a4:be:48:2c:49:49:5e:85:ef:44:b2:d2:71:
         0e:15:e7:8d:7a:dc:6a:0c:4e:7d:c7:a3:9c:8e:c3:7a:8e:c8:
         93:07:88:94:df:da:c3:8f:16:ca:bb:3e:e8:a3:04:2f:c8:7a:
         fc:71:89:5e:ad:e3:2f:88:66:08:d6:6c:45:83:66:ee:dd:59:
         5c:2c:50:f6:09:dc:0f:2d:1a:82:8a:43:e5:78:c2:fa:14:12:
         dd:ac:f8:ab:25:44:ab:f8:0b:9c:ba:e5:c5:8c:12:fb:3b:3a:
         5f:ac:ae:98:2e:ad:4d:d1:16:60:e7:c2:a0:91:34:fa:42:4e:
         44:6b:6d:b1:77:47:d7:bc:33:5e:6f:34:98:62:b4:d9:a3:bc:
         77:7e:ef:33:18:2a:f5:90:f4:5e:02:53:22:b9:87:06:cd:c5:
         1a:90:45:6c:94:23:1a:26:16:b7:92:d2:33:0a:32:b6:59:c6:
         b0:37:40:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:04 2024 by rpki-client on console-ams.rpki-client.org