Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a47bd913-c114-34a9-8d9f-608d3c514c0e.roa
File:                     a47bd913-c114-34a9-8d9f-608d3c514c0e.roa (raw, json)
Hash identifier:          WSoYzvhgneKr9KCMjwRfWHIBuuQvURcsePrKyihfPLc=
Subject key identifier:   40:6E:1C:2C:70:F7:C9:74:42:EC:3A:4F:14:53:C3:FC:49:64:3F:09
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847B96CC600FF7E3CDA135C2400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a47bd913-c114-34a9-8d9f-608d3c514c0e.roa
Signing time:             Thu 31 Oct 2024 13:23:40 +0000
ROA not before:           Thu 31 Oct 2024 13:23:40 +0000
ROA not after:            Wed 29 Jan 2025 14:23:40 +0000
asID:                     29802
IP address blocks:        216.74.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b9:6c:c6:00:ff:7e:3c:da:13:5c:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 31 13:23:40 2024 GMT
            Not After : Jan 29 14:23:40 2025 GMT
        Subject: CN=df13f19e-55bb-4b36-ac68-47f7dfb327e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:f5:c6:86:5b:82:e2:2c:a1:d1:53:cf:6a:
                    47:5d:13:21:61:ab:00:5c:c7:b5:16:0b:af:57:6f:
                    50:01:09:35:43:56:be:7c:7a:82:f8:49:d1:9f:45:
                    7e:81:fd:bd:2c:2c:9e:ff:fb:77:25:29:4a:52:8d:
                    1f:d1:65:e4:b6:38:38:f8:9e:7f:ca:b0:96:e4:ad:
                    96:dc:72:67:25:6e:09:da:e9:09:bf:fd:25:d3:77:
                    b9:bf:15:25:20:fc:13:32:7c:e6:a2:a1:14:1a:0a:
                    6c:5b:57:4a:d0:1c:0b:ef:d9:86:51:58:02:61:fc:
                    05:ed:11:41:7e:d9:1d:86:6d:22:c0:17:c1:b9:b7:
                    b5:84:f3:98:3e:dc:6e:c7:8e:cc:03:bc:ad:9c:ee:
                    ce:80:d0:63:c2:48:1a:67:99:ab:b1:9f:15:9e:43:
                    50:39:33:3f:fd:12:6b:cd:bb:06:4c:c7:ff:48:e8:
                    35:4f:b5:63:e0:25:1c:67:19:c8:74:1a:9e:2e:3e:
                    42:d2:42:4c:a2:93:3c:a9:e0:13:79:2e:ad:e4:b3:
                    73:f4:7b:d0:40:b4:4e:7d:1a:b8:a1:e8:92:b4:57:
                    03:fe:8c:9b:06:f8:83:b0:30:97:f6:e7:4a:75:5c:
                    5c:63:50:c7:98:3c:5b:f4:88:db:0d:11:08:f4:ab:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6E:1C:2C:70:F7:C9:74:42:EC:3A:4F:14:53:C3:FC:49:64:3F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a47bd913-c114-34a9-8d9f-608d3c514c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:68:61:67:cf:c3:cc:83:c0:89:ed:9a:95:62:27:a2:33:67:
         72:4b:63:ec:77:40:0c:ef:94:b6:cc:c6:fc:12:f6:2e:58:7d:
         71:ff:56:c6:46:8f:d8:48:9d:53:c4:2f:d8:5a:71:e5:7e:94:
         96:79:8e:00:53:16:cb:b3:f3:e7:74:d6:ff:c1:dc:63:6f:f8:
         fe:f4:c0:cc:f4:d0:44:67:49:e3:4f:34:08:1a:87:f0:cb:37:
         bb:5c:94:2d:92:6c:23:3d:38:3b:c9:3c:be:9b:01:9d:e3:39:
         7c:7d:5f:55:b3:32:a7:ea:f4:04:00:53:e4:c0:4b:58:83:e8:
         02:cd:98:25:a0:d2:7a:f0:fa:ac:f7:cb:d2:80:89:56:f7:5c:
         c7:a9:75:dd:be:6c:80:bb:ef:02:72:e8:7c:26:0a:0d:38:76:
         a4:11:f3:03:68:ea:0c:86:90:aa:59:e4:0a:0b:c0:7a:44:7c:
         cb:2a:28:97:de:68:91:23:74:5c:7f:d5:bc:b5:87:9e:bf:14:
         da:10:93:e1:69:af:6c:80:6d:64:76:c7:0c:35:d7:1c:e5:09:
         d8:24:92:e6:8c:1c:7d:a8:e8:9b:7a:c0:73:e9:79:9c:a7:61:
         8d:b2:14:a1:82:d3:0d:58:25:33:01:34:92:43:fe:09:51:76:
         53:50:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:27 2024 by rpki-client on console-fra.rpki-client.org