Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa
File:                     640105e2-5210-3ad1-96b1-5e4188a93a9d.roa (raw, json)
Hash identifier:          rC2dCiEbToqDBTs6isDuaBmVVN5vpc2dD/DTBGOLIO4=
Subject key identifier:   F8:AD:A8:7C:A4:0C:5D:72:0B:C0:42:1B:CF:64:8A:F2:12:3A:25:CC
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858478B510D9E022626C08BD2D100
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa
Signing time:             Tue 15 Oct 2024 01:00:35 +0000
ROA not before:           Tue 15 Oct 2024 01:00:35 +0000
ROA not after:            Mon 13 Jan 2025 02:00:35 +0000
asID:                     16611
IP address blocks:        216.74.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:51:0d:9e:02:26:26:c0:8b:d2:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 15 01:00:35 2024 GMT
            Not After : Jan 13 02:00:35 2025 GMT
        Subject: CN=8a61f8da-4631-452a-916b-b3ebf1ff8f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:f4:f8:39:8c:aa:3e:8d:0f:c4:d3:51:ce:
                    82:d5:01:f6:22:d6:e2:1f:7d:da:f7:00:35:94:e9:
                    f0:b3:18:f9:88:37:fa:58:c3:6c:e0:2c:41:2c:3c:
                    70:6c:c5:ff:54:ac:59:03:50:21:da:ea:dd:e9:d7:
                    b6:32:e5:1a:e1:a7:b0:ac:9e:fb:54:1f:c3:4a:3d:
                    28:04:8b:53:c4:7d:85:5d:e9:9b:0c:57:08:2d:53:
                    ea:8c:aa:bb:98:4d:c3:b1:19:90:b5:72:94:cb:e5:
                    44:19:61:85:3f:20:ee:5d:4c:d9:e9:9a:6f:89:d7:
                    db:04:fe:67:c0:e9:2e:14:f9:3d:db:f9:44:86:45:
                    71:29:9b:73:48:10:61:a6:77:2c:ac:10:d3:59:4e:
                    b6:d8:2f:95:47:2f:b0:7f:cb:fd:53:b3:09:96:be:
                    26:c9:de:0e:5d:c7:1e:1f:b9:05:52:10:8c:7c:b3:
                    74:cb:c6:a1:10:ff:02:74:62:5d:83:02:38:8a:8b:
                    e3:83:a8:05:c1:2e:3b:c8:1b:30:2b:51:84:26:a0:
                    b9:4c:d1:fb:2d:5d:4b:52:8b:43:c4:d8:9f:f4:5f:
                    1c:a8:72:ff:ac:a6:a1:c5:68:d1:19:19:14:c2:83:
                    da:25:dd:18:d4:5a:fd:2e:2f:88:0b:41:3b:47:e3:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AD:A8:7C:A4:0C:5D:72:0B:C0:42:1B:CF:64:8A:F2:12:3A:25:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/640105e2-5210-3ad1-96b1-5e4188a93a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:a8:58:98:22:30:f7:54:29:51:30:a0:53:b1:52:c3:4a:
         bc:c5:ac:7d:b7:4f:cb:d5:0e:df:92:91:d7:9b:c4:79:72:36:
         5c:d1:88:87:e7:4e:50:1c:8b:37:b1:fa:a3:82:00:17:9f:85:
         e3:08:84:47:4a:cd:6e:db:83:9d:34:a7:7e:ae:19:8a:05:a8:
         9b:22:8c:bb:0a:bf:11:56:7b:d0:6d:36:e8:d4:5f:0d:e7:29:
         31:74:5f:0a:b6:8e:f7:fb:ee:b9:62:cb:8e:1d:6a:c5:ea:68:
         e6:32:90:c1:e5:d7:e7:36:ad:33:58:86:d9:64:00:a3:72:be:
         65:6a:71:07:a4:d9:8a:0e:3d:44:99:1a:e3:b2:59:17:01:6f:
         7b:84:1b:c0:63:d7:d1:3a:37:0e:d0:bd:6e:b1:46:1e:76:ea:
         d6:ed:46:43:87:64:78:87:21:f2:3c:b2:44:57:36:d3:56:96:
         89:28:72:89:91:fb:2a:6e:6a:a0:c5:00:e0:33:b2:88:4a:67:
         3b:4f:94:da:96:d1:ee:55:46:29:05:71:16:8d:76:b3:81:f1:
         df:e6:b2:c8:98:09:61:6e:42:49:15:02:3c:1a:9a:46:4b:36:
         35:68:80:20:3d:eb:4c:84:30:08:6c:3f:d2:ca:4f:37:85:2b:
         98:e3:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:29 2024 by rpki-client on console-fra.rpki-client.org