Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bb353029-50ad-3ee2-a816-3efeb21573ef.roa
File:                     bb353029-50ad-3ee2-a816-3efeb21573ef.roa (raw, json)
Hash identifier:          lYW9n2HBqKq33MprkDECfM1D82R+N3KbMUalPoJdXYE=
Subject key identifier:   E3:87:BF:DA:9A:7F:98:84:CF:AC:4E:D7:9C:92:E3:5B:57:B6:8E:F9
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584726D087B35E9847BF17E552B0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bb353029-50ad-3ee2-a816-3efeb21573ef.roa
Signing time:             Mon 09 Sep 2024 01:00:31 +0000
ROA not before:           Mon 09 Sep 2024 01:00:31 +0000
ROA not after:            Sun 08 Dec 2024 02:00:31 +0000
asID:                     212238
IP address blocks:        172.111.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:d0:87:b3:5e:98:47:bf:17:e5:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  9 01:00:31 2024 GMT
            Not After : Dec  8 02:00:31 2024 GMT
        Subject: CN=7fb25dd4-8e07-49c9-ad6c-fd8bdfea5f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:8f:e8:de:9d:23:02:a1:54:91:66:cb:87:
                    2a:de:83:0c:3c:71:02:87:e9:de:02:67:35:9e:0a:
                    cc:ea:97:46:f8:23:9f:a8:a1:ce:66:1a:8d:e5:e8:
                    fd:96:c2:ef:3b:77:d8:0f:7a:7a:99:f9:10:dd:64:
                    ed:ec:f6:de:6f:7f:61:08:4a:7e:3c:df:7a:1d:4e:
                    91:7b:72:0a:30:bf:c9:a2:e2:1e:5c:5b:2f:32:46:
                    ba:79:19:6c:f4:eb:8c:ec:a6:fc:9a:82:ad:69:87:
                    01:ae:0a:c5:8f:45:58:0c:f1:ed:28:a6:85:7a:bd:
                    fa:de:74:52:5d:ff:6d:e6:a6:e7:ad:77:45:0f:5c:
                    f3:df:93:b3:21:c2:0c:d7:b2:2e:48:c6:ca:90:7f:
                    98:8e:f1:31:e3:6d:c1:32:4b:c6:11:8e:8e:cf:37:
                    9d:a8:bb:78:d5:4e:88:23:88:b2:be:1f:bd:ef:34:
                    ff:82:2b:92:57:76:cc:f2:00:71:04:d9:f6:f8:41:
                    58:fe:d0:c3:b7:ca:69:59:c0:c8:3c:6e:b0:a4:38:
                    43:33:6c:c1:0a:9c:32:97:a5:0f:38:98:68:4e:e3:
                    9e:14:ed:e5:5a:aa:59:2e:50:be:82:ce:05:b5:4e:
                    c1:a5:79:1c:59:16:3c:2b:6e:87:18:c6:34:97:20:
                    ac:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:BF:DA:9A:7F:98:84:CF:AC:4E:D7:9C:92:E3:5B:57:B6:8E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bb353029-50ad-3ee2-a816-3efeb21573ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:0d:76:d1:bd:bd:59:97:66:f3:8b:15:5d:09:cc:61:ab:
         76:c2:0b:d2:0c:2e:24:49:26:1a:38:20:0e:99:92:4d:5a:bc:
         ad:28:74:75:ea:8d:26:c9:f2:29:a9:a3:b8:d1:b6:1f:3d:27:
         25:6a:9b:c2:3e:45:3b:47:18:59:4d:09:75:34:eb:24:7a:88:
         81:4c:3e:17:e2:01:f6:5c:d8:c6:24:c4:57:c7:45:9e:8c:48:
         02:7c:38:84:49:c3:9f:4b:8c:16:93:50:7a:b8:f6:57:4f:69:
         4f:9b:c6:57:68:13:7f:5e:64:29:30:af:69:3e:8f:09:23:0a:
         9c:52:7b:69:17:df:43:fd:1f:c8:5e:60:3c:33:d0:50:0d:23:
         87:61:14:7d:24:e3:3b:86:a0:7a:d9:b6:9b:2d:61:b1:97:24:
         6b:57:bb:3f:53:9d:ab:07:19:b9:6a:c9:23:d7:40:13:a6:08:
         d0:10:6b:df:58:da:5f:cf:15:4f:27:90:e0:4b:54:24:ab:a8:
         1b:b8:26:07:cf:99:bc:a6:98:e3:76:cb:20:7d:63:b3:f0:1e:
         e2:2c:01:da:de:3f:7b:b1:93:92:37:23:7c:73:04:a7:3a:e6:
         66:6e:93:bf:00:a5:ab:ae:68:a0:33:db:43:41:ea:33:a6:33:
         aa:16:91:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:36 2024 by rpki-client on console-fra.rpki-client.org