Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa
File:                     1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa (raw, json)
Hash identifier:          0nw34sm0pRrDEThamfQbbV33JHsNpr8uFrUylYDSs6E=
Subject key identifier:   35:DD:95:22:29:B8:A1:37:79:F8:C3:24:44:89:93:C2:55:2A:7B:FA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847DC64AA21743DAEEDD7DECF00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa
Signing time:             Wed 13 Nov 2024 02:00:28 +0000
ROA not before:           Wed 13 Nov 2024 02:00:28 +0000
ROA not after:            Tue 11 Feb 2025 02:00:28 +0000
asID:                     852
IP address blocks:        184.174.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:64:aa:21:74:3d:ae:ed:d7:de:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 13 02:00:28 2024 GMT
            Not After : Feb 11 02:00:28 2025 GMT
        Subject: CN=277be5df-4ffc-49e2-a3fd-23cf1807662a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:cb:a4:e7:0d:69:10:3f:10:4b:be:78:81:
                    0f:b8:5d:0d:82:17:23:20:6a:84:26:84:4a:7a:44:
                    b9:ce:42:c6:d2:26:70:17:73:ec:60:1e:59:46:57:
                    4c:1f:e4:51:ff:05:ec:c5:4a:ac:a5:ae:65:2a:cf:
                    77:6f:f5:0a:ff:d4:e8:cf:bd:d8:76:0f:7f:ac:0a:
                    46:d4:20:19:cc:cd:2f:b8:3b:67:a1:d6:87:04:73:
                    da:22:c9:48:44:40:e7:39:77:84:dd:51:0d:74:2a:
                    09:5a:b7:45:6c:6b:00:fc:56:e0:05:d6:9a:1c:09:
                    bc:1e:fe:2d:ec:07:e0:14:0c:54:27:bc:38:07:9b:
                    20:b2:c4:b5:c7:fb:b1:a2:fc:c4:51:12:2d:c7:bc:
                    34:e6:31:7e:4e:5a:be:f6:2b:6f:70:f9:02:32:b9:
                    cd:b8:57:b4:60:a1:0f:8d:0c:76:3e:b4:cb:77:87:
                    f5:37:c0:7f:0d:e6:4c:68:82:78:80:06:c4:ed:ea:
                    e7:6e:8f:29:96:e5:31:1b:8e:f6:a5:f0:99:41:2d:
                    d1:89:59:ff:24:04:a7:73:4a:5a:ac:5f:a5:54:e3:
                    b5:d5:f2:4a:27:59:1d:65:c2:26:a0:56:38:04:92:
                    49:50:b4:9f:2b:55:21:c3:a1:17:e9:f7:b5:cf:31:
                    c8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DD:95:22:29:B8:A1:37:79:F8:C3:24:44:89:93:C2:55:2A:7B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1c9405ce-4716-3ac1-8b2b-ef58a1a68978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:80:67:c3:30:85:ec:4e:e1:f2:70:0f:e4:80:c5:80:e7:dc:
         07:5e:4d:14:c9:f5:2a:43:0d:3a:2b:e3:11:ca:bf:8d:e4:14:
         9a:ea:e8:aa:ef:57:73:06:43:c4:73:37:07:ff:6d:b7:d5:ce:
         09:f5:fa:a1:af:73:0d:53:7b:ca:e6:67:a4:20:dc:fa:55:3b:
         c7:82:72:13:5d:5d:51:1f:50:aa:42:72:8e:14:bf:44:5f:ce:
         2d:12:62:b5:e1:fd:54:f1:43:c6:6b:67:f7:05:84:a5:58:46:
         10:49:39:2c:89:12:22:f5:38:ef:b6:1f:6e:a3:8d:1d:57:07:
         f0:56:30:3a:21:cf:11:e1:ce:14:75:6a:bf:07:8c:0b:71:81:
         f9:b7:fe:df:8e:87:56:34:80:e3:0b:8f:4d:ed:4b:44:a5:0a:
         9a:6d:a8:96:86:e2:d1:11:16:ec:a3:ff:22:75:3b:6c:1e:3e:
         24:50:4c:4a:ad:07:43:14:f5:b5:d6:5c:07:48:fb:72:41:ee:
         b8:e9:75:53:de:1d:02:61:11:8d:85:38:ba:2e:15:fd:9d:3f:
         df:33:c8:0c:3b:64:7b:87:d0:a0:9c:82:0c:67:5b:bc:1e:38:
         d2:41:a3:78:31:9e:8f:89:c8:18:17:11:c8:24:93:34:4d:ba:
         66:c2:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org