Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa
File:                     b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa (raw, json)
Hash identifier:          zXEKDAI4Oim+eAY/rqRK31+6u614gd5aCW4DF969Xf8=
Subject key identifier:   40:AB:72:47:D4:1A:AD:B5:FC:4D:33:39:BB:63:85:5C:C1:71:D2:13
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847766109994D006045A7FB8000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     9009
IP address blocks:        172.94.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:09:99:4d:00:60:45:a7:fb:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=15f1f181-ad6a-4455-a97c-c343b38e6d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:1a:75:dc:4f:a2:6f:c8:1a:00:27:38:f8:
                    78:f6:88:eb:3c:ff:42:6a:a3:3f:26:4f:f0:3f:a2:
                    1d:c7:47:99:a7:7d:4b:2c:46:6d:eb:20:9a:3a:15:
                    ad:52:6b:8f:24:c6:84:e7:b7:17:7d:ea:0a:a6:40:
                    24:90:bf:e1:ef:b4:fd:e7:f2:a4:56:6b:a2:10:85:
                    26:07:e1:29:95:a3:75:41:4d:27:14:65:c5:3f:7f:
                    7c:95:23:62:9b:66:92:7b:46:52:8d:7e:a1:2a:45:
                    9b:ee:6b:be:28:d8:e1:91:b4:cf:18:64:fd:9c:bf:
                    83:e9:0d:e5:2f:83:a9:ed:0a:ee:5b:28:87:3b:66:
                    d8:5c:48:1c:49:25:d0:71:2d:a9:6d:15:9c:4c:0c:
                    cd:62:39:44:33:17:51:85:22:c1:1f:2a:ea:c3:6a:
                    a7:e8:8a:26:65:1f:9c:98:e7:dc:91:c7:71:b7:73:
                    7a:87:98:97:ef:6c:76:70:e2:2a:96:dd:4b:3a:9f:
                    be:f2:f5:8e:66:3e:35:6e:ac:a2:97:a2:45:f5:31:
                    2a:86:a1:13:a6:dd:01:6b:01:90:3e:dc:f2:b4:3d:
                    91:d1:df:ba:3f:b8:31:0f:73:05:86:3a:00:fd:2d:
                    90:3e:2d:f7:0e:c7:b7:5b:98:a7:c0:30:f3:78:80:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AB:72:47:D4:1A:AD:B5:FC:4D:33:39:BB:63:85:5C:C1:71:D2:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f7:01:10:1b:65:70:19:3e:31:ac:07:75:73:cf:dd:b1:e3:
         0f:e8:be:a0:4e:0f:52:ae:06:04:0a:a4:73:05:66:95:b5:16:
         09:41:2a:7d:fd:56:58:16:9b:64:03:68:78:76:d9:9e:36:ce:
         67:54:d9:62:e6:e2:84:4f:9b:52:54:b9:c2:9f:d6:f0:b8:fa:
         54:e4:7c:b5:a7:50:12:18:9e:33:94:02:3f:d6:64:1d:4c:40:
         e0:d1:a5:56:1a:c9:db:74:a0:64:b2:f9:c5:51:ba:81:4b:59:
         2a:b2:69:13:05:ea:7b:56:05:0d:a8:3c:37:e9:17:96:00:b0:
         67:1e:f9:ff:24:02:0e:76:7b:e9:4a:11:0c:6b:ea:73:56:4a:
         62:b2:22:10:02:81:f0:a8:a9:ce:2e:22:db:b4:ca:d2:b5:16:
         b8:1b:d4:77:ba:38:60:3c:7a:ff:4f:08:33:62:50:38:7d:0f:
         66:84:a5:d8:3e:30:2d:e8:94:9f:2d:ca:08:78:50:69:2b:e2:
         f9:02:c8:3b:f9:be:86:db:5a:66:d6:21:ab:95:a9:56:65:c9:
         16:31:72:07:da:6d:45:be:c9:1a:72:f5:5f:e8:91:4a:24:24:
         2a:bb:e6:d6:c3:50:6f:3f:bf:76:38:f4:30:5a:9d:b2:c7:f5:
         cc:09:c2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org