Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa
File:                     1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa (raw, json)
Hash identifier:          tmnc4ot2BePeYfqgWfuvlzIEBjSQvn2j4OBJD1ZIDPw=
Subject key identifier:   59:23:6A:E1:44:FF:95:DF:90:F1:71:F4:3F:0C:C5:B1:29:F7:4E:7D
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584615394E836A2CC8A712524C00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa
Signing time:             Mon 03 Jun 2024 01:00:25 +0000
ROA not before:           Mon 03 Jun 2024 01:00:25 +0000
ROA not after:            Sun 01 Sep 2024 01:00:25 +0000
asID:                     54113
IP address blocks:        157.5.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:15:39:4e:83:6a:2c:c8:a7:12:52:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jun  3 01:00:25 2024 GMT
            Not After : Sep  1 01:00:25 2024 GMT
        Subject: CN=f17591ce-e5ba-427c-9754-b4e01308cc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:24:2f:46:c3:11:24:a0:4b:62:ab:9b:45:
                    54:5d:8d:00:d1:20:32:0c:dc:ed:7c:73:00:51:6a:
                    39:18:6a:58:08:dd:b0:73:7c:37:02:a8:c6:b3:26:
                    4d:61:e3:7a:84:54:ce:4d:de:42:20:ee:46:f1:7d:
                    61:aa:07:47:ca:93:83:a2:fd:82:8b:0b:41:11:7d:
                    c3:f6:26:eb:7a:80:9d:48:ad:00:79:6f:3f:ef:69:
                    5b:66:09:f0:53:2e:84:37:39:64:b3:56:27:a1:c1:
                    ed:05:ec:50:93:ec:62:ad:79:08:0b:ce:48:f7:46:
                    cb:01:a0:cf:be:da:6e:b7:5d:ee:45:31:0b:c8:d9:
                    72:6b:13:9e:b5:17:f4:80:67:e1:9a:ab:43:e5:22:
                    1f:10:cb:2b:4f:88:da:af:0d:72:3f:e5:48:3d:e2:
                    89:d0:85:be:7d:40:0d:b9:65:51:bc:77:98:5d:e5:
                    5e:05:05:cf:19:b2:3f:9a:cd:99:9f:4d:be:59:a5:
                    4a:46:65:a8:e2:8b:3f:56:51:6a:45:41:7a:ab:dc:
                    b4:f4:a1:9e:a0:d2:4f:8b:03:93:70:08:51:96:61:
                    97:5f:6a:72:17:d7:67:71:ef:34:5c:5d:c3:e7:dc:
                    06:2b:0f:ef:1a:f7:70:29:ce:1c:eb:96:54:ee:37:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:6A:E1:44:FF:95:DF:90:F1:71:F4:3F:0C:C5:B1:29:F7:4E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1ab1172f-cd6a-31f6-a9d5-c4968df9b075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:a9:9a:5d:bc:53:6a:91:32:06:e1:a1:75:c1:45:ef:f7:
         69:86:b0:82:46:a7:d5:c0:c3:bd:43:81:1a:2a:b7:8a:dc:c4:
         06:6e:50:7c:d4:56:58:d3:c9:20:cc:7a:e3:85:33:8a:94:6f:
         07:2a:8a:9c:00:0d:87:7a:cb:31:20:f2:16:47:6e:7e:10:67:
         b8:b8:e0:3a:b1:7e:e2:c1:fd:92:51:c5:11:ac:21:3e:92:67:
         bb:08:e3:ad:d6:66:c5:3c:b8:44:15:2a:9e:43:05:83:f4:38:
         d6:d7:cf:eb:33:ec:32:ab:3d:a8:ca:49:d7:8f:2c:a6:3e:71:
         01:60:bb:45:03:a8:d8:6d:15:35:05:4e:fb:da:d0:1e:fc:03:
         df:34:a3:58:52:13:b2:5f:7e:9e:24:63:a1:72:b4:80:06:99:
         be:83:13:16:e9:74:aa:6a:31:d0:d7:14:65:7e:16:81:92:90:
         44:e3:6b:f0:82:d6:68:45:92:67:15:d2:c8:6b:17:8d:92:2b:
         af:18:32:f7:51:e9:cd:e8:2f:23:9a:78:09:a6:13:d5:bb:75:
         1e:3c:40:79:0c:7c:da:91:e8:5c:c2:f2:db:a5:15:2e:7e:67:
         16:66:73:6a:de:bc:79:8a:e0:3d:d1:48:ef:41:09:39:96:4c:
         f5:17:c5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 22:48:19 2024 by rpki-client on console-fra.rpki-client.org