Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa
File:                     b604490b-74cd-3e5b-931b-76222655763c.roa (raw, json)
Hash identifier:          +5B/O48OpkxOwnONsYgoWlmg1jJiASwiEvsFFNTzikQ=
Subject key identifier:   2E:A1:B2:E9:EB:56:AA:4E:93:03:9E:3D:E3:43:B5:DF:3F:C0:27:9A
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847EB4AF56739CC7FD6C7001280
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa
Signing time:             Mon 18 Nov 2024 10:05:57 +0000
ROA not before:           Mon 18 Nov 2024 10:05:57 +0000
ROA not after:            Sun 16 Feb 2025 10:05:57 +0000
asID:                     16509
IP address blocks:        172.111.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:4a:f5:67:39:cc:7f:d6:c7:00:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov 18 10:05:57 2024 GMT
            Not After : Feb 16 10:05:57 2025 GMT
        Subject: CN=ef62c279-4dc9-47ef-b5e4-ce8fc9eb8bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f9:0b:b2:4f:bb:ed:77:5b:e5:6e:d0:26:06:
                    52:13:7b:f4:da:84:db:1c:23:eb:4c:75:57:49:c8:
                    0f:2f:c3:e2:a4:ae:53:17:f6:0c:29:9c:fa:b7:24:
                    02:5d:f6:0b:41:bc:12:47:56:f6:ff:fa:85:66:d5:
                    05:65:7b:ba:8e:9f:f3:d4:08:dc:74:d8:fb:ed:93:
                    15:a5:53:52:26:f2:eb:91:81:18:e2:d3:aa:5f:54:
                    28:a5:99:df:6f:c7:e8:6c:3c:2c:dd:3f:76:08:9d:
                    92:4e:cb:b8:c2:0c:d2:72:21:e2:0e:db:a4:a6:1d:
                    f5:de:79:f7:2e:46:17:81:70:2a:e5:cc:e3:f8:4e:
                    3a:e5:0c:5b:32:d0:d3:0b:4b:9b:91:31:60:1f:a2:
                    0f:ce:10:45:10:00:32:d5:cd:50:a7:87:5c:9a:82:
                    63:8c:9b:b3:a8:42:89:e9:2f:a7:26:ee:22:41:21:
                    fe:11:d9:80:24:82:b0:e3:f8:1d:15:47:98:ed:b9:
                    d2:94:65:a3:a4:1a:10:95:34:4f:cc:43:9d:e3:8b:
                    72:38:85:b5:47:9c:37:24:3f:a9:3d:3f:30:80:80:
                    c7:d7:e9:72:a8:49:83:68:10:d1:e0:df:d2:3b:1b:
                    80:03:bf:12:f5:ad:04:a8:b0:81:32:41:c1:b1:2e:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A1:B2:E9:EB:56:AA:4E:93:03:9E:3D:E3:43:B5:DF:3F:C0:27:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b604490b-74cd-3e5b-931b-76222655763c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:30:ea:41:7f:89:3f:69:71:f9:8e:43:d6:93:c1:92:6f:
         1b:a3:b7:ff:51:09:7d:dc:1a:ac:29:04:53:de:a4:c8:69:af:
         d4:f6:66:73:81:e1:0e:24:45:29:9d:39:87:77:9c:79:ce:37:
         a1:32:a5:e7:e1:44:6b:62:2f:e3:c0:e4:00:61:db:97:85:29:
         fb:d8:53:f6:e1:0c:85:14:df:d9:cb:01:a6:d1:f8:85:89:56:
         d3:70:2c:b3:ff:c2:8d:09:af:b9:8d:dc:9e:5f:8e:50:a9:a6:
         07:7b:ff:ae:90:6b:3f:54:33:78:92:e3:bb:10:50:54:9d:2a:
         03:a4:64:06:5b:ef:f8:94:26:d3:3e:90:ab:ec:6c:59:49:33:
         77:fd:b1:b4:78:bd:42:72:c6:3b:c1:98:18:b9:b2:ad:63:93:
         f3:cd:5b:40:ed:7f:c9:d3:84:2b:ca:01:95:c1:7a:59:67:6c:
         1e:96:59:7e:8a:78:e2:bb:4b:6a:ce:4d:53:77:97:d3:2a:83:
         87:4c:42:eb:27:ec:d6:64:4c:7b:a7:aa:39:6f:2b:6f:96:84:
         72:8e:fb:53:fb:e0:19:ee:eb:2b:31:02:e7:f9:17:86:60:34:
         61:6b:8d:29:2e:3f:60:c6:91:36:f1:c3:f3:0a:ce:30:e3:22:
         0a:31:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:08:19 2024 by rpki-client on console-ams.rpki-client.org