Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/a51d7f7c-3c0a-30f3-bb7f-fefe5601958b.roa
File:                     a51d7f7c-3c0a-30f3-bb7f-fefe5601958b.roa (raw, json)
Hash identifier:          nBjP2gsNXIQ0Q8X0hLmfzXUjMspRjzld2Py1ifv0Qcg=
Subject key identifier:   CF:3C:4F:31:34:2E:0C:9A:1C:49:A5:6C:C6:D3:3D:1F:D7:AA:38:4A
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F432858472B007C2B33852141320E0200
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/a51d7f7c-3c0a-30f3-bb7f-fefe5601958b.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     215046
IP address blocks:        172.111.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:7c:2b:33:85:21:41:32:0e:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=2f3e97ce-84f6-4a7c-b390-3efd7c48da6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e8:e0:ff:2f:c8:7f:62:04:58:9e:c6:e7:c9:
                    7c:dc:be:b8:3b:d2:44:e9:a8:e9:b8:74:d3:b1:d6:
                    9e:bb:4d:21:52:c2:7a:1a:33:d9:9c:6e:f5:0e:36:
                    4e:fa:43:98:ff:4f:d2:cc:36:ba:36:b9:69:3a:d3:
                    c8:90:98:55:dc:ce:3f:f1:a5:10:1e:ab:e2:44:e0:
                    3e:da:03:b5:84:9a:49:42:df:8a:5a:6b:6a:03:64:
                    95:60:3f:0e:cc:26:c9:ec:71:35:f8:3b:7a:a1:5a:
                    9c:5c:d2:d4:a0:96:2a:6e:eb:14:44:82:a1:f0:cf:
                    63:43:49:1c:e1:9d:3e:77:0f:6b:ee:a7:4d:f9:f1:
                    b7:eb:05:99:14:d5:04:57:eb:4b:5a:d6:ae:37:39:
                    79:1f:01:4c:ee:89:2b:e5:e5:8d:41:fc:65:7b:1c:
                    80:aa:34:69:87:3c:df:f8:d3:06:96:d0:4a:7f:16:
                    a4:f9:39:18:da:33:7e:a3:29:40:8a:37:13:f7:32:
                    e9:26:af:2e:2e:00:0b:f3:b9:c1:eb:ad:41:73:8e:
                    dc:a2:87:8d:ac:0c:fa:8e:2d:c9:77:90:2a:46:e8:
                    bd:3b:e5:32:4f:1d:07:78:f3:02:5e:38:73:43:7d:
                    ab:46:e1:10:86:ed:04:61:60:67:29:41:40:16:e7:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3C:4F:31:34:2E:0C:9A:1C:49:A5:6C:C6:D3:3D:1F:D7:AA:38:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/a51d7f7c-3c0a-30f3-bb7f-fefe5601958b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:9d:7b:50:30:6e:a1:6e:49:35:48:e9:c6:a2:87:4b:bb:
         32:b8:21:e8:8d:51:30:2d:aa:81:2b:2e:4a:6a:69:84:3e:8c:
         c2:2b:7f:db:d8:a8:0e:84:8c:5d:78:d5:9c:7c:14:cf:85:21:
         bc:2a:dd:8c:cb:cd:c7:6c:d1:89:4e:7f:d1:39:b9:63:ff:c0:
         30:eb:8d:db:01:13:30:74:3e:e4:07:55:fb:4a:fc:51:90:60:
         b9:49:c8:fa:cf:46:e8:d7:dc:5a:1c:ce:5f:e2:55:60:bf:17:
         ba:41:45:77:d4:62:f8:39:aa:c2:70:51:90:dd:18:0a:dd:2a:
         be:25:1c:bb:05:72:19:4a:b8:ad:e1:c3:40:a2:a3:2a:aa:21:
         08:0e:9f:91:2d:f7:f5:e7:27:31:ee:d1:0d:60:2b:ce:d9:10:
         79:76:6f:a5:a1:b9:83:ef:42:cf:d0:ff:a6:75:5b:0d:26:0a:
         ae:3e:33:a6:d8:ad:16:70:99:fc:ea:73:b5:73:db:ca:42:f6:
         40:cb:f1:4d:61:8c:fc:68:94:37:4f:9a:ba:12:42:18:23:d6:
         26:a4:8b:08:fe:a9:58:ff:5b:da:6b:b6:19:6c:1c:75:88:c2:
         4b:90:2f:98:0d:41:c3:8d:fa:ea:d2:e8:73:ab:c3:6f:15:a1:
         a8:45:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:47 2024 by rpki-client on console-fra.rpki-client.org