Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e59bbb0a-f900-3456-bfe6-3f532106edb2.roa
File:                     e59bbb0a-f900-3456-bfe6-3f532106edb2.roa (raw, json)
Hash identifier:          mdGVnpzvIq05Ndu14oHCAZlFlfZvLier30BEvctLxDU=
Subject key identifier:   C3:BA:C3:59:D3:D8:86:85:C7:F5:95:CE:5A:12:5E:3A:C5:74:9D:0A
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584899785505B9B51D70685D9E40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e59bbb0a-f900-3456-bfe6-3f532106edb2.roa
Signing time:             Sun 19 Jan 2025 19:28:01 +0000
ROA not before:           Sun 19 Jan 2025 19:28:01 +0000
ROA not after:            Sat 19 Apr 2025 18:28:01 +0000
asID:                     834
IP address blocks:        104.224.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:99:78:55:05:b9:b5:1d:70:68:5d:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 19 19:28:01 2025 GMT
            Not After : Apr 19 18:28:01 2025 GMT
        Subject: CN=f0f84b2e-2185-4a3d-acb8-95169fdc69fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:3b:39:9e:52:7c:c8:85:36:a5:13:c8:ae:
                    39:0a:34:fc:e4:18:31:82:ad:03:81:32:5b:96:f0:
                    69:35:72:ec:4e:c8:fe:04:39:0a:07:f1:ba:04:b6:
                    be:68:31:05:45:4a:3a:b7:1a:fc:4a:1a:68:2e:77:
                    0b:69:b8:72:65:88:e7:06:da:57:ce:5f:a0:49:f2:
                    84:e4:c1:a5:78:5c:e8:b5:22:c6:69:d3:cc:4d:83:
                    da:11:a2:79:ea:6f:11:39:a9:1a:e6:52:ca:f8:f5:
                    30:7f:e1:90:b1:ad:75:4b:54:42:f5:53:5c:c3:04:
                    9d:20:20:ab:ff:a6:a4:75:e6:5a:8c:20:ff:6d:60:
                    25:ee:bb:e9:13:c7:3d:e8:d2:5c:a3:83:f5:ce:0c:
                    27:22:6c:7b:bb:94:5d:65:53:c8:d7:42:44:5f:8a:
                    09:34:8d:f0:af:f9:ac:c0:90:97:c8:e2:13:02:cb:
                    db:47:ef:ab:c5:f9:c1:e5:85:3c:4d:f0:ef:22:8a:
                    eb:e7:7a:f4:4e:8c:7b:6b:43:3d:e7:a8:ed:90:3d:
                    ae:1f:02:6e:3b:7a:46:6f:7e:11:12:9f:7a:0b:90:
                    e7:ee:42:8a:bc:6c:ba:0f:90:a7:96:cd:b0:00:8d:
                    81:ea:88:21:f3:88:c1:75:fd:27:b6:8e:b6:bd:f5:
                    d5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BA:C3:59:D3:D8:86:85:C7:F5:95:CE:5A:12:5E:3A:C5:74:9D:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e59bbb0a-f900-3456-bfe6-3f532106edb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:9e:24:e4:0f:90:fa:48:f2:32:15:9b:25:f8:2c:3d:46:98:
         1f:65:d5:87:65:23:c1:85:10:8d:bf:ef:13:51:94:38:71:55:
         91:0e:8f:00:52:a3:31:a0:17:3e:3e:eb:22:a5:d8:d1:ea:6c:
         8a:7a:0b:47:9b:b1:6d:b0:71:79:ee:b7:66:42:58:af:be:89:
         48:17:5b:a2:21:6e:66:4d:fe:0b:af:f9:29:93:2c:40:45:51:
         2c:59:7f:9a:2e:fd:e8:6c:94:bf:e2:ae:76:61:aa:ec:4c:fa:
         e1:fa:ce:72:d7:b6:f1:80:d1:57:22:cc:91:3c:14:2b:8c:ee:
         2e:45:2e:33:e2:59:63:21:b7:a7:fd:23:80:be:06:70:68:60:
         18:88:11:41:d6:e2:5e:71:54:da:12:db:3f:98:43:0d:74:77:
         41:76:0d:90:4e:d3:24:00:82:17:b0:30:aa:bf:5d:7e:ca:f6:
         94:eb:7c:f0:e1:c1:2f:45:bb:79:02:13:1b:d4:bc:61:92:fa:
         1e:91:ba:eb:b6:e3:02:b3:78:85:53:ce:25:88:3d:5f:b4:75:
         24:b4:fb:21:7c:f3:86:f6:c5:31:1f:9f:6f:8b:8c:aa:a3:38:
         ab:8f:8c:68:e4:b7:fe:ff:99:3f:97:bb:84:ae:bb:64:54:17:
         a5:fe:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:47:05 2025 by rpki-client