Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3a69f67-aa1d-393e-b25a-a989f40a5d15.roa
File:                     a3a69f67-aa1d-393e-b25a-a989f40a5d15.roa (raw, json)
Hash identifier:          pJpTTfvX2dUFB5SUqpcmOvvMBk9OUXzxNqRahiuMo2w=
Subject key identifier:   25:B1:53:08:FF:3B:09:59:AD:64:0A:90:CE:3E:45:8A:EC:FD:39:DF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845BDA0430B1567473A2F55C91E
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3a69f67-aa1d-393e-b25a-a989f40a5d15.roa
Signing time:             Thu 02 May 2024 15:56:46 +0000
ROA not before:           Thu 02 May 2024 15:56:46 +0000
ROA not after:            Wed 31 Jul 2024 15:56:46 +0000
asID:                     60117
IP address blocks:        104.224.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:a0:43:0b:15:67:47:3a:2f:55:c9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  2 15:56:46 2024 GMT
            Not After : Jul 31 15:56:46 2024 GMT
        Subject: CN=ac25f169-48d7-47eb-8dc2-2d3da243d63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:ce:e8:4d:23:7c:30:69:f2:b2:3d:ec:af:
                    39:c9:7e:16:ab:12:a9:c8:3e:2b:f7:a3:e2:43:fa:
                    27:5c:1a:ac:b0:21:52:50:50:f5:5a:43:7f:12:4d:
                    6c:30:28:7a:bd:96:18:8a:35:ae:6c:68:03:2b:c2:
                    be:f7:94:1d:d5:de:6c:8d:b7:f3:5e:fe:58:45:dd:
                    ec:ea:44:46:24:02:d9:75:70:55:6e:0a:ed:c6:85:
                    23:18:31:84:89:5a:51:c8:d0:5e:00:22:82:9b:a5:
                    6a:a0:5f:fd:f2:38:af:a0:bd:1b:b0:c6:71:9e:41:
                    e4:f2:93:75:e6:ce:c2:b3:b5:de:8c:06:eb:7e:04:
                    24:f6:49:23:09:5c:48:7f:ea:45:3f:5d:5e:ae:70:
                    22:4d:b9:02:41:7e:2a:9e:1b:7d:04:73:bd:0b:6a:
                    5e:f5:ea:63:9e:80:e9:64:00:c2:d8:23:07:1e:98:
                    51:28:b1:f4:90:79:67:21:30:ce:f0:5b:9e:63:43:
                    14:09:75:b4:c8:12:b9:b0:38:c9:b5:f7:1c:b6:25:
                    20:9c:d0:a3:a6:52:88:f1:9b:a5:ab:aa:93:53:4b:
                    7f:14:30:7a:0f:b7:6c:cf:7d:5c:f7:5a:a8:57:ed:
                    15:40:ec:b4:84:79:20:45:08:f6:d0:21:5d:65:8e:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B1:53:08:FF:3B:09:59:AD:64:0A:90:CE:3E:45:8A:EC:FD:39:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3a69f67-aa1d-393e-b25a-a989f40a5d15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4c:90:14:a1:00:5c:62:24:98:40:ca:d2:62:f7:7d:91:b5:
         c4:e0:a1:f8:22:d3:ac:60:70:fe:c6:f7:42:50:5a:48:41:79:
         14:f2:88:de:27:62:9b:bb:a3:2a:47:1d:24:f5:94:24:d5:17:
         9d:21:0d:66:62:69:93:5b:53:27:43:3a:08:05:ae:96:9c:30:
         73:36:0a:61:92:21:db:9e:a5:99:46:76:da:6c:2f:66:97:77:
         92:1f:f9:94:4d:cc:fc:fd:e1:37:49:01:c2:9c:00:77:fd:35:
         5a:d7:8c:94:2e:b0:53:9e:7f:78:d3:a8:74:8f:fd:f6:7f:9b:
         dd:4f:c6:b2:cb:c2:93:86:08:e3:57:fe:bb:2f:e3:c9:67:c0:
         46:2b:29:a4:f2:ec:6c:09:7c:e4:7e:ea:db:ec:40:96:4b:56:
         07:cc:03:00:be:1e:97:92:9e:b6:a6:57:d3:1c:b1:f1:fb:9a:
         2f:8a:e2:86:06:f2:d8:66:81:aa:d5:7b:54:57:26:61:4b:07:
         d6:08:03:72:20:16:95:ed:52:47:c7:59:56:f4:4b:35:1f:54:
         a2:b2:44:5e:f3:56:26:c9:c5:04:62:16:8a:b7:27:c9:ad:1e:
         e7:b5:01:6c:2c:a0:09:24:5f:2b:e2:d5:c0:09:84:ed:f5:42:
         cf:be:eb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 16:00:08 2024 by rpki-client on console-ams.rpki-client.org