Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa
File:                     9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa (raw, json)
Hash identifier:          rD8d5UJ+bSw5v5E0KCjmfGKqzL/t2fq3Vqon99XQyNg=
Subject key identifier:   89:6B:E0:F9:40:24:D9:0C:95:05:90:4D:FD:CB:F2:E5:A1:6E:7F:57
Certificate issuer:       /CN=052fe149-2c89-4322-a901-3a7f35c17350
Certificate serial:       010D0C9F43285847DDCA0B7DCC617FE763956180
Authority key identifier: 50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa
Signing time:             Wed 13 Nov 2024 14:00:39 +0000
ROA not before:           Wed 13 Nov 2024 14:00:39 +0000
ROA not after:            Tue 11 Feb 2025 14:00:39 +0000
asID:                     3477
IP address blocks:        192.111.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:ca:0b:7d:cc:61:7f:e7:63:95:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052fe149-2c89-4322-a901-3a7f35c17350
        Validity
            Not Before: Nov 13 14:00:39 2024 GMT
            Not After : Feb 11 14:00:39 2025 GMT
        Subject: CN=e6089d05-76eb-4f79-92dc-621d4eed4cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:1b:04:af:a6:a0:6a:a4:7b:ee:ce:62:1b:
                    72:a8:b4:71:1d:65:80:0d:00:63:a0:8c:35:41:c6:
                    68:59:10:42:1d:20:97:c0:ee:e5:6b:95:1d:5d:22:
                    ee:b5:fa:a1:e8:61:1d:50:76:df:b3:64:cf:4e:e1:
                    5d:fb:3f:56:60:90:ec:fc:1f:eb:79:f5:95:b0:68:
                    6d:35:67:62:1b:6b:f0:8d:16:a8:e6:61:3e:c2:26:
                    7b:1f:e4:00:ff:e7:f5:e1:d6:d1:a1:f4:68:95:7f:
                    30:2e:fe:0f:4b:5c:67:78:d5:2c:d3:4f:54:de:a7:
                    be:c0:8d:03:9a:44:94:fb:ae:70:9e:77:76:e5:e3:
                    9d:73:85:54:b6:f6:53:a8:dc:84:c8:43:26:c4:51:
                    b9:f0:a3:b2:7b:f6:75:66:c6:3b:e5:0c:13:57:68:
                    a2:0d:cc:5c:7a:f6:b7:60:9c:f3:22:cb:8f:2b:46:
                    97:e8:e9:0a:d5:c3:63:8d:49:1d:0f:ef:10:ac:c1:
                    17:6a:dd:c7:14:47:2e:75:a4:95:1a:4a:33:03:1a:
                    aa:b9:ba:1f:3c:88:ed:ea:e8:54:17:8b:db:8e:e6:
                    11:1b:b2:2d:5c:ec:d3:45:ab:c5:01:a1:90:08:46:
                    3a:30:83:4c:49:ce:37:35:63:f9:ea:60:c0:9d:1b:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6B:E0:F9:40:24:D9:0C:95:05:90:4D:FD:CB:F2:E5:A1:6E:7F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/9cd5580f-5857-37de-b3c8-353d0e9eb8d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350/052fe149-2c89-4322-a901-3a7f35c17350.crl

            X509v3 Authority Key Identifier:
                keyid:50:20:97:10:96:AD:7B:A9:07:D8:8D:4A:9C:90:3A:6E:F0:43:B9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/052fe149-2c89-4322-a901-3a7f35c17350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:31:9d:2f:be:92:87:89:ec:df:6b:26:18:ef:32:23:7b:c3:
         43:5f:f4:80:26:f6:34:26:05:83:bc:ec:3d:52:12:2a:10:70:
         08:03:d4:9b:fd:2a:dd:eb:2e:0e:4d:44:97:3b:70:a8:84:78:
         31:39:85:f0:ba:fd:37:cc:98:85:a3:08:d0:cb:9a:5b:8b:2d:
         7e:c6:19:c5:2c:8b:9a:a1:14:ec:4f:20:0d:52:7c:f4:9b:d3:
         1e:ee:f9:17:05:8a:9f:13:a7:23:ff:5b:80:6b:86:bf:63:62:
         bc:74:a8:7f:b6:38:ad:ab:9a:89:08:59:ab:84:64:f5:03:c2:
         de:1c:25:fd:5b:b4:9e:bf:7c:68:d8:60:9d:f5:25:24:bb:b4:
         16:d7:be:23:34:25:02:63:54:81:58:2a:5d:94:7c:0a:ad:fb:
         b1:64:ce:d4:b7:0b:7d:94:c3:2d:6b:52:54:b7:a0:dd:a9:c5:
         68:ba:32:d9:86:b4:52:ce:dc:bd:47:6a:4b:eb:2f:7e:b5:47:
         0a:39:01:bd:f6:26:68:05:24:46:5c:81:96:71:01:bc:67:53:
         b5:fc:c2:f7:b4:e1:12:a3:c9:fa:2d:67:93:d3:77:9b:2b:da:
         42:f5:5b:ab:3d:23:c0:86:af:4b:04:92:41:95:11:12:b8:d0:
         0c:dc:b2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:29 2024 by rpki-client on console-ams.rpki-client.org