Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa
File:                     f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa (raw, json)
Hash identifier:          Bu7sYk3XcQMcoNFV1Wb3ZnEG/l8lDaxJwh+lgxpcVxk=
Subject key identifier:   78:C6:6F:28:00:EA:B6:C8:2D:A8:97:C8:F2:82:F1:0F:A4:17:4F:49
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858457D1329053341164B13EFB580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        172.111.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:29:05:33:41:16:4b:13:ef:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=73144a86-bd87-498d-88cb-b41f2d00168a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:5d:13:16:dc:e5:de:39:81:e8:dc:eb:02:
                    e4:66:84:13:e0:12:da:90:4f:7c:c2:c0:21:e9:a5:
                    4d:86:cf:58:d0:f7:21:de:e2:13:f8:2f:02:94:16:
                    ff:c4:58:99:0b:56:dd:09:6d:7a:74:db:fd:f8:af:
                    93:4d:fc:af:6e:56:e3:65:da:9e:09:9e:57:30:ff:
                    57:68:59:55:23:40:db:fe:7c:81:db:d2:a4:8f:4d:
                    d7:26:35:6c:11:50:97:7f:a9:b3:b3:71:39:c2:a9:
                    79:eb:3d:7b:09:96:ef:13:d3:1d:15:b9:60:7c:52:
                    2f:2f:4f:af:fd:b7:15:7e:0d:7a:cf:43:2b:f7:c8:
                    44:6a:94:c9:1a:96:fb:c5:2b:76:e4:73:24:c6:76:
                    4f:16:83:19:50:9f:03:54:0b:1a:58:9c:5d:35:28:
                    83:56:9e:11:26:a1:53:c2:30:1c:18:53:20:ff:86:
                    46:3f:e4:a8:47:27:46:f4:bd:03:b0:05:52:4f:31:
                    dd:a9:f8:a9:2d:cc:b0:c6:76:90:bb:c0:c6:d4:94:
                    7c:13:c4:3e:69:57:69:6f:3f:02:37:50:fa:1e:fa:
                    0c:75:f9:8b:94:5a:94:b7:c8:f7:6a:88:f0:f3:ed:
                    d0:f5:c4:f9:86:cd:f3:bb:bf:7d:60:e3:c3:20:8b:
                    bd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C6:6F:28:00:EA:B6:C8:2D:A8:97:C8:F2:82:F1:0F:A4:17:4F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f8e20b3b-4c7f-39db-9341-a82ccf25da4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:ef:d3:b8:df:aa:b1:4d:82:09:b7:d5:0f:d4:c8:c8:ff:
         5d:7a:38:ec:9f:1c:18:14:2b:db:a2:11:d1:d1:2b:14:f0:81:
         89:b8:35:06:24:d9:ed:2e:53:fb:68:06:3f:67:d0:ff:52:33:
         a5:b8:a6:cb:0e:c8:92:c3:56:06:2f:61:da:6a:ae:c0:dd:06:
         ec:9d:84:66:38:bd:39:84:0e:ac:d0:06:32:8e:e3:3d:4c:dc:
         fe:55:8d:ee:02:f9:53:91:53:eb:10:87:14:f2:dc:df:3e:34:
         8c:ba:75:36:5e:d9:37:05:0d:b4:1c:54:14:2c:fd:21:f9:ad:
         2f:c0:b9:cb:39:d0:74:93:07:d0:cd:3e:49:fb:1a:5d:63:2e:
         5a:43:8a:b9:69:1a:dd:eb:5e:06:c5:c6:4f:fc:ab:30:a1:b6:
         8e:46:a8:7b:be:1d:87:56:3d:fa:aa:d8:10:b2:da:59:91:59:
         8d:20:b2:56:27:29:fb:db:43:33:08:80:35:fe:2f:58:e0:1c:
         c6:02:d9:89:88:e5:e2:df:4f:46:1e:94:65:65:b8:78:56:44:
         23:ea:76:e2:46:7f:ee:0f:d7:28:67:5c:4a:27:ee:61:f6:e7:
         60:37:df:d6:16:46:3a:57:5c:f6:35:dd:c4:65:a4:0f:8b:02:
         b8:d6:7d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:38:54 2024 by rpki-client on console-ams.rpki-client.org