Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/20415ee0-eb56-3f53-9f30-1041759987a2.roa
File:                     20415ee0-eb56-3f53-9f30-1041759987a2.roa (raw, json)
Hash identifier:          bsoHyiykWh29S7AwQhDPJRmMsX9lTjG9ADJ4vGx8alo=
Subject key identifier:   FB:C7:DF:3F:D3:26:01:06:8C:25:41:B8:DF:2D:6D:CF:4A:4F:4C:14
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F43285844C7BA6A8CCC19E964DC712D80
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/20415ee0-eb56-3f53-9f30-1041759987a2.roa
Signing time:             Sun 04 Feb 2024 14:00:31 +0000
ROA not before:           Sun 04 Feb 2024 14:00:31 +0000
ROA not after:            Sat 04 May 2024 13:00:31 +0000
asID:                     396998
IP address blocks:        172.111.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c7:ba:6a:8c:cc:19:e9:64:dc:71:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Feb  4 14:00:31 2024 GMT
            Not After : May  4 13:00:31 2024 GMT
        Subject: CN=65bf387a-39e9-4ab6-8c91-9356f2a4fc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:af:bd:eb:4a:c4:04:e5:9b:16:21:32:1b:
                    bb:be:15:2e:76:cf:a8:65:4b:e4:56:c7:59:0c:d0:
                    69:d4:02:7c:ef:9a:c5:66:aa:73:ff:47:a5:08:5d:
                    02:ae:c9:00:4f:76:70:d0:78:91:53:05:ff:b8:d1:
                    66:42:8f:53:16:c9:14:77:9d:64:29:f9:1e:f8:5e:
                    23:3c:8c:22:71:5d:12:65:6c:8f:99:b2:5c:df:d4:
                    45:ff:90:af:e9:3e:c7:42:07:e7:7a:42:32:24:77:
                    d9:1f:ce:e7:e2:5d:4b:b9:50:93:b5:1c:68:51:f1:
                    2e:22:37:f0:92:8d:56:7b:c3:a3:40:66:61:66:02:
                    73:3c:19:29:0f:ef:ad:96:5f:93:18:99:1f:49:b7:
                    3e:fe:26:f8:0d:7f:45:d4:86:4b:5b:08:5c:d9:db:
                    45:41:53:61:e2:73:ab:73:2d:84:c9:59:db:b2:ad:
                    f9:5c:23:9b:d7:0c:0c:f2:1a:cd:5a:55:a1:41:3f:
                    72:22:8f:5b:c8:5c:20:3e:58:c2:e6:6f:b1:12:0c:
                    71:65:50:32:9f:ec:c4:aa:bc:dc:9a:f5:87:05:9e:
                    5a:af:5f:eb:4e:50:51:1e:47:c0:c6:b1:b0:01:ee:
                    0c:8e:59:f4:3b:4b:b4:83:7a:af:30:78:3e:aa:69:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C7:DF:3F:D3:26:01:06:8C:25:41:B8:DF:2D:6D:CF:4A:4F:4C:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/20415ee0-eb56-3f53-9f30-1041759987a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:0b:58:8d:28:19:d6:88:c9:00:73:66:23:c7:cc:5d:ba:
         fd:5d:c1:f6:c1:be:4e:69:c1:62:92:50:97:a8:0f:fc:51:0b:
         29:35:8f:69:a8:48:74:93:95:2c:36:4a:80:15:ef:7c:a4:ab:
         70:dd:25:fc:28:8e:b7:48:cf:d5:aa:de:a1:d4:63:d7:f7:21:
         2f:fb:03:eb:29:7d:32:a2:e7:2c:f8:d3:7c:f3:6c:ce:cc:ae:
         8d:31:8a:3a:43:36:07:ab:46:4c:cd:c3:80:d0:df:19:62:12:
         7e:d7:aa:af:46:2e:44:9c:f0:2a:be:33:87:75:1e:61:82:3f:
         d1:ac:24:ef:03:35:a9:1f:2e:b4:32:39:0f:33:a0:94:83:24:
         fd:1f:b8:2b:28:21:5f:a2:e9:b7:aa:91:fc:c1:ce:5b:1d:e9:
         73:e3:e9:79:5c:b7:6a:9b:70:07:c7:19:d3:db:6d:2f:26:0f:
         8c:57:e1:c9:90:a0:c9:76:7e:d6:f0:a8:7f:05:00:20:a3:97:
         88:6f:80:69:e1:12:b3:be:b5:30:48:47:1d:26:c1:04:d5:7e:
         ed:47:d7:3d:b6:e0:6d:3f:e6:41:1d:ac:27:23:f7:c7:9c:d6:
         32:bb:d6:df:f2:fb:d0:5e:b2:ea:a3:10:df:09:7d:b4:96:7e:
         aa:eb:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 17:20:47 2024 by rpki-client on console-fra.rpki-client.org