Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e680e86-b486-313a-a154-53368267bd5d.roa
File:                     0e680e86-b486-313a-a154-53368267bd5d.roa (raw, json)
Hash identifier:          h17wfELrwsed2bkhOvMno2Hd7WeLBrQaoEWt9fTWn0M=
Subject key identifier:   B8:49:55:F8:89:83:0F:D5:2E:B6:B3:B2:D5:4B:7B:6A:07:E7:1D:56
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847EE40F21A8B4CE3A7C2FE41C0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e680e86-b486-313a-a154-53368267bd5d.roa
Signing time:             Tue 19 Nov 2024 11:33:12 +0000
ROA not before:           Tue 19 Nov 2024 11:33:12 +0000
ROA not after:            Mon 17 Feb 2025 11:33:12 +0000
asID:                     5065
IP address blocks:        172.111.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:40:f2:1a:8b:4c:e3:a7:c2:fe:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 19 11:33:12 2024 GMT
            Not After : Feb 17 11:33:12 2025 GMT
        Subject: CN=ac96f077-f91c-4719-be9a-81aebcb3daef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:da:54:f2:f3:66:8d:c4:5d:49:15:40:60:35:
                    d8:2f:98:b6:71:12:0c:e2:8e:3a:c9:69:93:5c:6a:
                    05:31:7e:3b:b2:90:e2:e6:75:78:3a:9c:4d:e9:33:
                    1b:d1:7a:da:f6:f5:95:93:8e:e0:ed:2f:8c:c2:30:
                    91:dc:c8:72:48:be:44:99:64:58:21:bd:2e:ae:74:
                    48:fc:0a:1c:5a:6f:8a:81:a6:8b:d2:47:96:9b:a9:
                    11:4e:39:aa:5a:8a:70:c6:a2:22:9b:6f:79:1f:a9:
                    7a:bb:c0:5e:df:d7:68:30:d2:dd:88:d5:0d:70:e6:
                    e9:b6:43:8f:76:8b:1a:a3:e0:38:72:01:8f:e6:37:
                    80:96:c0:49:a4:38:36:ee:fe:9d:74:b4:a2:19:e8:
                    d6:d0:23:83:fb:99:12:08:72:18:4d:89:2a:60:78:
                    4d:0a:71:ef:56:7b:d8:1f:44:82:b4:59:e1:c4:83:
                    bc:a8:90:ce:19:a3:a5:8c:cc:2d:51:26:b2:3a:f8:
                    a5:f1:2b:fc:e7:81:51:d8:6c:31:bb:dc:91:8a:84:
                    0f:6c:20:05:43:89:82:93:aa:3a:e9:f6:6d:cd:c5:
                    f2:26:65:f5:24:71:ff:e9:cf:f8:be:01:8b:5c:65:
                    76:cc:5c:d0:a9:12:a8:a8:11:33:30:25:b7:f8:83:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:49:55:F8:89:83:0F:D5:2E:B6:B3:B2:D5:4B:7B:6A:07:E7:1D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e680e86-b486-313a-a154-53368267bd5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:69:93:9c:be:a7:40:31:19:c3:b9:1f:55:c2:72:cd:ca:
         db:58:db:ab:8b:aa:9d:c3:b7:07:bd:7d:21:9d:41:14:e6:00:
         6a:bd:a1:96:6d:df:2e:9d:7a:f1:2d:c5:db:b5:e8:58:86:5a:
         ab:dd:e5:31:89:11:f3:9b:ae:16:18:db:6b:fd:11:23:81:27:
         4d:58:05:54:b3:c3:24:07:b8:6f:8d:56:a5:f1:e3:35:f3:cc:
         63:bd:ba:9d:cb:f2:7d:87:8a:5c:7e:d1:ca:ce:fc:22:e4:28:
         f4:8a:58:1e:94:cb:78:06:95:bf:05:9a:9b:22:4d:8c:ca:e9:
         1b:10:80:2f:3f:22:cc:a7:fe:a3:38:4c:a8:26:8f:3b:7c:97:
         b2:82:bf:ee:e2:6c:31:0a:57:43:c9:59:ad:bf:b6:e7:5c:c1:
         7d:ba:c4:b6:9f:9b:ef:c3:24:c3:1d:52:8e:df:c3:5b:e1:d6:
         9c:b7:1b:7b:4b:37:12:2b:ce:c2:78:1b:28:ed:dd:94:73:50:
         af:1e:29:b1:3b:00:b5:da:6e:6a:d8:ba:4c:4e:09:9c:8b:fe:
         cf:5b:93:da:73:93:0c:32:39:cd:00:88:e1:da:03:91:b5:b6:
         9c:5d:78:4c:8d:39:a9:9c:ba:64:4c:96:f6:49:a3:7f:ec:82:
         b0:82:73:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:35 2024 by rpki-client on console-fra.rpki-client.org