Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa
File:                     39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa (raw, json)
Hash identifier:          HbHlEq0gm1oSao/Q06SB4o1KyLf60Esdw/vT52HQuCs=
Subject key identifier:   DE:9D:BA:E0:A3:17:71:54:0B:6C:7D:7F:1F:C9:5B:73:1F:97:ED:3E
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845B21E21959EF0F469AA5A8980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        172.111.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:21:95:9e:f0:f4:69:aa:5a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=156bc348-601c-4c50-9c80-a7bea758725a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1d:0a:fd:bc:16:70:b6:44:a7:bc:c0:c0:f6:
                    d6:c5:8a:b5:ee:b4:8f:fc:cb:9a:38:c0:13:89:e0:
                    c7:76:75:a7:d3:db:39:ad:90:f7:3e:c5:d6:d1:1b:
                    25:78:6b:e3:66:02:38:40:c1:b3:f3:06:87:6f:4a:
                    80:90:b6:e3:47:a3:30:ae:61:df:f3:b8:99:72:a0:
                    bb:ee:25:e5:3c:2d:3e:f2:cb:30:8d:24:0a:f0:80:
                    b2:2d:44:ea:8f:dc:52:8b:11:41:4b:ee:02:60:c5:
                    c0:a8:b4:e7:19:97:44:16:7a:81:8b:06:52:44:a5:
                    c1:2c:a9:33:d3:15:e1:13:39:d5:51:80:3a:26:6e:
                    bc:52:17:af:9d:1d:93:a8:d0:90:79:a9:89:83:04:
                    a1:54:54:fa:f1:3d:7a:db:a4:ba:5d:b5:87:e4:8f:
                    63:6c:7a:4d:d3:fd:af:f8:96:a9:91:87:96:9f:96:
                    e6:52:76:88:c5:0d:62:f2:85:8c:f3:75:2b:21:55:
                    ed:46:9b:bd:f3:e8:ee:65:f6:c9:17:1d:cb:13:3f:
                    bd:73:8c:ad:9c:03:a5:57:84:55:68:c5:ad:20:57:
                    ff:91:ca:82:6a:b1:d7:50:4c:24:b3:ee:65:34:11:
                    38:a0:0c:38:d6:04:39:b1:15:02:c8:c8:21:d8:bc:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:BA:E0:A3:17:71:54:0B:6C:7D:7F:1F:C9:5B:73:1F:97:ED:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/39c57105-2f6d-3871-b65f-c5cca5ed24a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:04:79:16:bf:63:c2:58:9a:de:5e:fd:ff:fa:37:29:92:6e:
         0e:83:e7:a6:d7:ab:a3:ed:6f:85:28:b0:91:99:db:e0:24:3f:
         81:0f:d1:20:d7:8a:ab:c8:8d:ef:a0:63:d9:b7:87:dd:9f:c7:
         c1:7c:ad:bc:f7:c5:96:39:38:f7:e6:d5:f0:c9:50:53:ea:9d:
         26:7b:5e:87:c7:ac:31:95:99:a1:5e:3d:97:cc:92:60:e0:b1:
         19:a8:cb:c1:af:93:8f:01:78:f9:64:bc:00:54:8b:22:65:e0:
         89:78:00:f1:19:de:aa:f3:d0:50:7b:30:25:7b:0f:83:10:98:
         da:7c:03:44:1b:3a:94:27:54:d9:7c:b9:ca:70:15:e3:5d:6d:
         a3:e0:10:a8:7e:e9:d6:c9:1b:c5:97:9d:1e:49:45:b2:59:36:
         02:cc:8b:c8:a6:ba:8b:4c:3e:8a:63:79:56:cf:fc:f4:de:91:
         c0:89:ea:14:3f:12:1b:32:df:f6:86:8c:b6:5a:cd:a2:a3:d0:
         97:b4:1a:50:39:52:41:28:f1:72:63:65:bd:97:6d:41:db:d1:
         5c:51:9c:d7:04:3d:30:7b:24:0b:b5:e5:48:f0:08:8c:04:b8:
         91:d8:cc:4f:1e:02:6c:23:8c:14:f6:b1:25:7f:0e:ca:a7:3c:
         e6:15:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:00:05 2024 by rpki-client on console-fra.rpki-client.org