Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
File:                     d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa (raw, json)
Hash identifier:          yFgG+7mSth/avP8cB7zSRC1xtSUCdIOh1PlzA623GFg=
Subject key identifier:   AB:30:AE:46:2D:DE:46:83:FA:4C:77:91:53:63:21:1D:52:78:4E:D1
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F43285847802653F3D83FD5D2735C6300
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     399686
IP address blocks:        172.111.0.0/22 maxlen: 24
                          172.111.0.0/24 maxlen: 24
                          172.111.1.0/24 maxlen: 24
                          172.111.2.0/24 maxlen: 24
                          172.111.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:53:f3:d8:3f:d5:d2:73:5c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=e6a9fe50-0021-4a12-98d5-bdfe996c1400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7b:33:56:86:af:42:4f:1c:39:75:91:51:8a:
                    ba:60:d6:af:f5:f9:6d:70:0d:fd:99:8f:f8:66:0e:
                    9f:4c:7e:e4:29:2a:8a:dd:5a:b4:aa:61:65:16:59:
                    ea:a0:96:c5:6c:78:6b:47:67:6f:3d:a0:75:08:27:
                    13:4a:5a:3d:8c:b9:0a:b0:c5:a0:83:fb:dd:12:4f:
                    e7:be:e7:50:ea:31:ac:d6:dc:70:3c:f7:68:6f:e4:
                    9b:b6:8d:f7:1f:c8:84:f8:ee:de:cf:6c:be:4e:78:
                    d1:b9:81:4d:9c:6f:2d:7b:e8:c2:98:17:c9:df:59:
                    27:e6:b2:7d:c5:96:be:f6:ba:80:3d:81:d8:37:91:
                    17:70:cc:a1:ea:53:25:d8:cc:49:b0:ed:aa:7d:56:
                    48:0f:d6:77:0a:8b:1c:0c:b2:01:6c:39:13:df:43:
                    3c:72:52:f0:7e:3d:7b:f9:37:3f:42:9c:c3:6d:3c:
                    05:7b:29:a8:0c:ea:cb:c7:90:34:e5:0e:7a:e1:46:
                    02:c7:d5:e2:25:86:22:35:6e:c4:35:9c:ea:38:bc:
                    93:8d:81:6d:db:43:7c:44:64:fa:2e:c4:0d:09:f3:
                    a0:1c:78:64:3c:d6:f8:e8:31:05:97:b6:59:72:85:
                    75:5a:bd:86:9e:47:e3:46:c6:bc:b9:cf:fe:7b:ff:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:30:AE:46:2D:DE:46:83:FA:4C:77:91:53:63:21:1D:52:78:4E:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier:
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:79:fa:3d:3a:d4:79:04:a0:9e:a1:e7:2c:03:7f:f7:e1:2a:
         ad:c9:56:e2:07:ac:61:a4:48:50:29:4e:cf:cb:6b:09:e0:c7:
         aa:c4:6d:97:56:b9:23:d2:fb:fb:36:3a:ef:6c:42:a7:cf:18:
         d5:40:2a:ba:7d:6e:f5:f7:45:eb:57:05:d6:43:c6:2f:b6:87:
         f8:73:f9:5c:99:b6:e0:d0:76:c5:d3:e4:52:29:9e:81:5e:d6:
         0f:37:66:b9:ad:ef:f5:a8:30:38:5f:97:19:29:4f:77:f2:dd:
         81:89:cf:55:75:97:4e:0e:bf:49:b8:94:19:df:e8:07:80:a6:
         78:88:50:9f:4b:4a:2f:58:9d:b4:3f:74:b2:9d:0c:5f:96:17:
         2e:43:13:42:61:2c:41:9f:a3:25:ec:76:44:b6:b5:82:ff:48:
         36:1e:de:30:9c:17:24:12:6e:3a:bb:24:72:23:3a:82:5f:35:
         c4:0a:ca:b1:61:54:d5:fa:92:ab:a9:f4:65:fa:21:9c:b0:f4:
         af:3b:5c:1b:47:d3:ae:19:c5:88:73:cf:82:16:e0:5d:2f:f0:
         8c:9a:27:64:29:a9:e5:82:0d:35:72:1d:d8:5c:07:9c:50:78:
         38:06:47:78:0a:9f:cc:c0:ba:49:fe:ee:cf:dd:15:0c:da:d3:
         5b:99:ce:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:19 2024 by rpki-client on console-ams.rpki-client.org