Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa
File:                     623bb9fc-c963-3f91-a5c8-8cb92677297b.roa (raw, json)
Hash identifier:          s0fPD1i7FnN9EiLeOvrtbiIBhnAPisc+QpxxggWKhSg=
Subject key identifier:   BC:CD:48:E1:BD:52:BD:8E:14:32:D2:80:7E:0F:27:60:7C:64:2E:E5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847DD67C567DB37DE2AF7C0FCF0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa
Signing time:             Wed 13 Nov 2024 10:42:41 +0000
ROA not before:           Wed 13 Nov 2024 10:42:41 +0000
ROA not after:            Tue 11 Feb 2025 10:42:41 +0000
asID:                     53356
IP address blocks:        172.111.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:67:c5:67:db:37:de:2a:f7:c0:fc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 13 10:42:41 2024 GMT
            Not After : Feb 11 10:42:41 2025 GMT
        Subject: CN=54a7c6c5-ac80-4650-969f-229545c4cb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:ee:e3:bf:6f:15:dc:ed:bf:46:c8:4a:24:
                    de:3f:00:5b:20:9d:c6:20:7a:a3:e8:42:e3:56:46:
                    e2:55:9e:80:ae:79:ca:d4:7e:95:4b:7f:a3:b6:88:
                    0d:a0:34:c4:07:ec:84:b3:87:40:5e:5a:4f:a9:b4:
                    61:e5:7a:52:55:22:66:31:7b:9a:17:83:75:13:ac:
                    72:dd:9b:cf:2c:a5:32:ac:15:f7:36:fa:86:ef:b4:
                    30:b7:54:b3:63:1e:be:b0:be:13:55:f9:0e:f5:5f:
                    81:98:c6:0e:58:ec:33:03:6c:2e:69:e6:ea:88:75:
                    5d:d0:d2:02:e4:39:2d:8c:ce:44:9d:97:b4:e0:8e:
                    0d:9c:cf:f3:f1:91:49:e3:75:5d:13:9c:93:7c:91:
                    29:c7:82:6f:dd:3a:ce:ee:0d:3e:1a:0e:58:eb:0d:
                    82:99:f5:d4:60:a2:15:09:b8:24:ac:13:0a:47:b9:
                    2c:52:26:af:73:db:da:24:7d:98:b1:39:74:fc:08:
                    db:3b:1e:f0:5f:96:4b:71:24:f3:9f:03:d1:62:bd:
                    e6:45:3b:7e:1e:86:22:06:f1:db:7f:29:78:0c:4f:
                    b4:30:31:09:56:fd:70:31:65:6e:89:66:a2:1e:dd:
                    a7:2d:86:3e:5b:c6:85:e6:ef:95:b7:e7:9b:d6:81:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:48:E1:BD:52:BD:8E:14:32:D2:80:7E:0F:27:60:7C:64:2E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/623bb9fc-c963-3f91-a5c8-8cb92677297b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:d2:db:c9:43:2d:b2:32:d8:43:f2:22:4d:df:65:7c:e1:
         5f:6f:d0:d2:59:fa:90:4e:b8:f7:40:75:fe:57:b3:91:4b:a9:
         35:eb:ce:62:4d:9b:f0:ff:0c:e1:a2:f1:9f:5f:b1:d3:63:f8:
         61:d8:b9:8e:8f:31:5d:e2:94:fb:e3:81:84:83:3b:9d:65:fa:
         59:5e:bd:42:4c:74:99:e8:ad:07:a9:90:83:82:ba:f7:f2:10:
         1f:e4:61:08:21:e0:9b:e7:6f:ef:77:06:a1:89:2c:14:8e:bf:
         64:af:cd:be:13:cb:a8:c3:a9:e1:2f:83:18:76:cf:74:2c:fd:
         18:9b:bf:10:6b:9b:6a:06:b8:33:6d:f0:19:62:c7:19:12:13:
         4a:6a:2c:51:c5:21:32:dc:0b:02:1b:59:17:08:29:05:72:b7:
         a9:ef:5b:76:11:90:12:2b:f1:fe:25:0b:4f:b1:2e:f4:b5:fd:
         c1:bf:19:77:04:ed:63:c2:08:ad:92:9a:20:ed:f1:95:1e:fa:
         b3:64:60:86:ae:e5:b9:e2:b6:f7:9a:d2:7a:a8:94:e0:82:47:
         d5:9d:8c:ce:46:cb:6e:ae:f4:75:eb:77:55:ef:29:b9:f9:03:
         44:32:c5:a6:24:0d:10:0b:22:a8:61:56:3e:d5:1a:fb:08:f7:
         41:ba:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:37:55 2024 by rpki-client on console-ams.rpki-client.org