Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
File:                     e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa (raw, json)
Hash identifier:          xuLAF6Cq8n25DmxiZAOxdEvat7WlEIa8pmHXdJiIqGs=
Subject key identifier:   1A:01:7F:08:13:A2:B1:9E:F3:35:03:68:8D:D8:73:F1:80:11:FB:27
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285845B21E22E4A7855108D1393300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     212238
IP address blocks:        172.111.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:22:e4:a7:85:51:08:d1:39:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=2a564fae-9c5d-4cc7-9d8f-ff5616568638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:a9:49:11:9b:47:8e:24:11:01:f0:b6:32:
                    cc:a9:a6:ce:53:03:8a:0f:e4:d5:96:3a:1e:84:0d:
                    2a:42:86:f0:1d:0a:2c:92:a8:e7:3c:ec:f8:27:26:
                    9e:65:93:99:cd:f4:67:3c:85:51:0c:65:80:df:05:
                    b4:33:d9:9c:f8:2c:f8:73:67:5f:3a:aa:6d:34:04:
                    e8:95:41:32:66:30:3e:56:63:4e:b8:c8:e8:e4:3c:
                    e4:d4:d7:3f:7a:4f:c0:1d:f2:17:66:f9:55:64:fe:
                    93:6c:4f:05:35:fd:c0:7c:95:33:34:f9:4d:24:38:
                    2f:69:86:6b:fd:ba:62:06:64:f0:0d:8c:19:62:08:
                    6b:06:99:4d:91:3d:84:7c:ad:7c:37:9e:26:ed:81:
                    91:4b:55:74:78:f3:4a:4e:e6:19:61:a5:01:4e:64:
                    02:62:36:b1:50:e3:4c:56:12:64:b2:a7:5e:b8:5a:
                    7f:a8:26:57:b1:48:9d:05:f8:86:81:9c:c3:91:93:
                    d4:9b:c4:75:3d:09:8d:c3:63:a2:4c:27:f8:a4:f4:
                    4f:27:00:41:3f:d7:2b:fc:fc:51:ab:03:94:b8:1d:
                    c3:4e:0a:b0:71:90:82:b3:5c:dd:08:fa:8e:a4:b2:
                    54:23:09:e0:05:f8:4c:cc:63:f0:a0:77:ef:3b:06:
                    b1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:01:7F:08:13:A2:B1:9E:F3:35:03:68:8D:D8:73:F1:80:11:FB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e896b2a5-29cd-342f-b12a-8f1ff76d0a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:b3:6b:3f:fd:3f:19:8e:18:2d:d0:e7:57:05:65:b5:8f:
         73:49:0b:e0:56:ae:13:fd:2b:0d:c3:23:7d:bf:a1:69:ed:e0:
         2a:39:bf:ca:6a:7a:d3:d1:51:8e:64:98:59:01:ba:03:58:a9:
         fa:e6:1a:1c:a6:f4:a7:65:fb:df:a1:25:1f:91:7c:3c:c7:bb:
         0a:d9:b6:3b:96:b1:01:57:2d:65:01:5d:32:88:08:fb:bd:9a:
         67:30:f6:62:59:ae:05:9d:43:e5:20:12:bd:78:9e:e6:b6:ab:
         03:05:3e:cf:8e:d9:26:f2:7f:9f:ef:c1:97:57:81:6d:e0:57:
         74:8e:e1:02:8a:94:2b:9d:cf:1e:5f:42:cf:0e:cc:d8:db:cc:
         cd:52:ce:34:86:cb:e7:04:28:23:08:1a:ce:7c:18:0b:81:a4:
         26:75:1e:f2:6a:f0:1f:31:2d:68:cd:d3:9d:15:14:7a:1f:b1:
         b8:8d:d7:2f:0d:f0:34:63:e8:ef:2e:4b:56:59:fd:b3:31:d5:
         8c:a9:ae:1d:1c:14:19:c2:3f:b1:17:08:10:c1:3c:dd:e7:bc:
         01:39:e7:18:53:2f:57:96:55:67:30:08:02:f1:31:1b:f7:e4:
         1c:14:dc:aa:3d:69:20:bf:d5:19:13:20:f1:c4:5f:66:fd:bf:
         de:55:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:00:06 2024 by rpki-client on console-fra.rpki-client.org