Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29586f18-3788-3e4f-af9d-49293049fd1e.roa
File:                     29586f18-3788-3e4f-af9d-49293049fd1e.roa (raw, json)
Hash identifier:          rSQYh3y8JT/2xLrt4/k9EHvaV/QLpBcP+VMWYyOtrcs=
Subject key identifier:   DD:52:F9:03:1B:C5:68:64:7A:69:2B:D0:69:F4:90:17:60:A3:F6:02
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584505257901A454CB451016B200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29586f18-3788-3e4f-af9d-49293049fd1e.roa
Signing time:             Mon 26 Feb 2024 14:00:31 +0000
ROA not before:           Mon 26 Feb 2024 14:00:31 +0000
ROA not after:            Sun 26 May 2024 13:00:31 +0000
asID:                     400409
IP address blocks:        104.224.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:25:79:01:a4:54:cb:45:10:16:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 26 14:00:31 2024 GMT
            Not After : May 26 13:00:31 2024 GMT
        Subject: CN=8e394c77-941d-4c7c-9860-d202039be3e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:a0:a9:c2:09:f5:f6:c3:bd:67:fc:5b:7c:
                    b7:c3:99:1b:f4:c2:95:ac:84:00:5b:14:7b:62:2e:
                    ae:74:df:be:35:ff:13:31:3a:04:97:cd:90:41:45:
                    23:e5:fc:5c:67:ee:63:02:aa:42:e1:21:61:5b:f4:
                    77:49:a0:b1:ac:cb:46:19:08:2a:6f:ba:a2:61:09:
                    d1:4f:03:f9:cc:4b:8d:37:66:ea:17:b0:4a:7c:81:
                    29:89:ca:d2:23:96:73:c1:d6:16:90:be:24:74:f9:
                    85:9f:d1:62:58:cb:ec:76:ae:c1:0f:ae:60:58:94:
                    99:e4:48:b1:ae:ea:2d:9b:ac:d4:34:67:5a:55:4d:
                    5e:ad:32:3b:45:e2:37:52:87:c9:88:e4:9c:50:6b:
                    09:dd:8a:02:7c:de:37:cd:64:d8:5c:e3:3a:19:ed:
                    29:11:c2:58:60:a5:82:ed:f7:86:0a:0b:41:af:d9:
                    96:a5:3a:e3:a2:6b:30:31:d6:56:a5:e1:cd:92:23:
                    6a:b6:b5:92:02:e3:ac:30:e8:8a:6d:a2:ef:52:0d:
                    31:d0:0f:b5:ca:62:d9:db:e7:d2:a4:d5:85:ee:87:
                    0b:c9:94:36:54:41:b2:30:ec:80:6c:1c:db:e1:f4:
                    ba:45:b5:8c:40:89:53:8b:7f:2a:3d:e5:62:5d:d1:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:52:F9:03:1B:C5:68:64:7A:69:2B:D0:69:F4:90:17:60:A3:F6:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/29586f18-3788-3e4f-af9d-49293049fd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:48:f5:d8:84:62:28:a8:1d:6b:09:bb:d8:af:43:76:92:84:
         29:cc:5a:95:95:af:98:f3:f2:98:fe:82:29:d7:6b:b1:3e:c9:
         f5:c3:6a:ff:aa:93:2a:43:37:df:8f:7d:ce:d6:e7:eb:47:c0:
         85:c4:b2:fe:f4:77:b3:4e:e4:f1:e5:00:f7:ec:86:c1:f2:4b:
         7a:62:05:14:84:1c:e4:72:21:01:f3:a2:7c:54:90:50:2c:0e:
         09:ee:2e:72:9e:c6:13:0f:c7:c0:51:2e:6e:68:4f:f5:1c:a1:
         ff:58:d4:7f:65:04:d5:39:e0:6f:03:ad:8a:89:77:c9:4a:6f:
         c2:ec:32:ec:00:e5:1f:2d:cb:96:7b:19:ed:84:92:e9:c1:ff:
         66:fc:95:e0:1f:67:b3:b2:88:5f:9d:23:4b:cc:cf:fb:c3:d7:
         2f:42:be:9a:58:18:9f:1a:05:98:e0:40:fc:56:21:a9:52:61:
         35:08:ac:3b:59:52:db:c8:69:4e:f0:41:7a:69:20:ea:8b:4a:
         62:4c:b0:e6:6f:ae:c4:d7:3c:42:8b:77:e0:12:b7:3a:e1:fa:
         fd:e2:4e:87:c6:69:66:f5:42:b8:7f:e8:06:ad:40:64:67:8c:
         62:4e:73:dc:a1:51:b5:7b:19:6a:1f:35:68:27:78:b6:45:36:
         ea:c0:a2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:04:43 2024 by rpki-client on console-fra.rpki-client.org