Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a31df781-be84-3d52-8689-de83b7869728.roa
File:                     a31df781-be84-3d52-8689-de83b7869728.roa (raw, json)
Hash identifier:          +0gFy5l0yhfNPNMRryGNd/Tb0tGAO3yI6F2j4mYie+0=
Subject key identifier:   45:63:EB:B7:D1:AA:D1:20:8C:C4:75:55:86:62:4A:54:DF:DC:38:EC
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858479AABED94C2C344E93450CE80
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a31df781-be84-3d52-8689-de83b7869728.roa
Signing time:             Sun 20 Oct 2024 13:00:42 +0000
ROA not before:           Sun 20 Oct 2024 13:00:42 +0000
ROA not after:            Sat 18 Jan 2025 14:00:42 +0000
asID:                     62894
IP address blocks:        164.116.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:ab:ed:94:c2:c3:44:e9:34:50:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Oct 20 13:00:42 2024 GMT
            Not After : Jan 18 14:00:42 2025 GMT
        Subject: CN=8042134c-8529-493c-a80b-3dbfd479ca5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:8e:04:ff:da:a6:51:d2:bf:ed:cf:6c:7a:
                    49:12:9f:a9:30:b6:31:61:09:f3:8e:c6:71:e8:4b:
                    6c:6a:6e:4b:d3:c8:7c:58:3a:5f:01:2a:85:19:50:
                    7e:55:bf:82:d9:dd:34:42:2e:c6:87:e8:ff:48:f1:
                    bd:58:69:cb:41:fe:95:79:8b:0a:04:48:e4:00:cd:
                    a5:03:36:1b:4e:7b:8c:be:4f:fa:58:c7:7b:c0:9c:
                    b4:13:03:9d:bb:a8:1d:91:2d:d0:32:96:d7:bd:b3:
                    0e:0c:9c:76:79:1a:22:17:d6:06:1f:eb:a6:ae:fa:
                    a9:2b:26:67:b5:a3:59:2d:f4:e6:8c:7b:01:ab:1b:
                    70:7a:b8:77:59:4d:35:cf:7c:7b:44:15:f3:a2:84:
                    b3:cf:0e:1f:65:2c:a6:82:18:92:e9:ce:15:4a:4c:
                    f5:a6:4e:35:a0:21:5e:38:57:9c:55:2e:97:4d:ee:
                    e1:24:94:c2:69:63:38:d3:2a:e0:f4:10:43:dc:c5:
                    88:f4:ca:a1:6c:34:6b:9b:6e:cb:0f:46:2f:e2:89:
                    18:cc:02:69:07:07:e1:83:f1:a5:09:63:8c:d3:69:
                    6b:3c:5a:b1:46:6d:12:86:8d:30:00:30:cf:93:55:
                    69:3d:e1:1a:40:78:48:52:61:6d:42:cd:f8:54:5b:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:EB:B7:D1:AA:D1:20:8C:C4:75:55:86:62:4A:54:DF:DC:38:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/a31df781-be84-3d52-8689-de83b7869728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ef:78:5e:3d:25:73:cd:c3:f5:90:bf:c7:0a:a7:f7:d8:9f:
         3d:3f:a9:04:91:ff:15:16:78:25:45:38:f5:27:da:ca:e4:22:
         06:26:e2:f6:4a:ff:21:19:ec:eb:6d:86:1a:d0:4b:73:32:13:
         ad:94:a0:11:ed:82:01:d0:11:9d:13:22:a9:33:b8:6e:e4:22:
         6c:9d:a6:2e:00:80:25:e6:ce:87:58:90:a8:e7:27:34:c3:c9:
         3c:bd:b9:89:8d:db:81:de:11:d4:0b:84:fa:1b:8a:ea:f2:ad:
         92:26:17:dd:b8:c5:29:78:72:3d:c7:50:b2:f5:d3:05:4b:f6:
         20:8a:8d:49:3e:3c:27:eb:c7:9d:19:55:72:a4:ab:a4:e5:1d:
         3b:8a:1f:f6:8a:3e:88:9c:38:fb:3b:90:db:9a:77:64:e2:27:
         4f:92:03:0a:cc:0a:d7:22:23:06:c9:4c:67:d3:a7:00:00:5e:
         2d:07:52:02:59:cb:b1:45:dd:ab:70:ee:bf:c1:7c:8d:b1:3c:
         4b:1a:16:8e:c9:3d:8c:2d:ea:6d:87:52:f9:3d:51:d4:2a:4e:
         97:e5:12:99:e4:a8:25:d3:93:f9:60:db:80:44:d0:73:35:ca:
         c5:04:8a:a3:38:19:54:95:45:54:e2:13:fa:06:dc:b5:dc:1f:
         97:fb:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:26 2024 by rpki-client on console-fra.rpki-client.org