Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa
File:                     f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa (raw, json)
Hash identifier:          E8KX3LSnYe8K4c7M630dan5pGQZzEDlzGviiKRhSY4A=
Subject key identifier:   94:44:02:28:BE:C9:C2:51:63:F3:11:44:59:D2:84:98:C2:75:E4:A5
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F43285847792BB06F8072D2E9A1C02D90
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa
Signing time:             Tue 08 Oct 2024 13:00:40 +0000
ROA not before:           Tue 08 Oct 2024 13:00:40 +0000
ROA not after:            Mon 06 Jan 2025 14:00:40 +0000
asID:                     207590
IP address blocks:        172.111.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:2b:b0:6f:80:72:d2:e9:a1:c0:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Oct  8 13:00:40 2024 GMT
            Not After : Jan  6 14:00:40 2025 GMT
        Subject: CN=5f4541fd-ae70-4cd6-b3f6-952479f6715a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:8b:c4:0b:25:fc:30:45:02:fa:d4:28:15:
                    4a:e5:ae:a6:21:09:a5:c4:a4:8a:3f:61:e6:74:4e:
                    76:ad:70:90:f6:88:1a:68:35:21:33:3b:05:78:09:
                    3c:e6:4b:10:c6:61:9a:04:fa:c1:8e:bf:b8:7d:f0:
                    fd:8a:2d:1c:c8:0c:84:d2:15:38:0a:67:14:8c:44:
                    16:0e:c7:1f:4c:45:1a:6a:ce:80:f6:9e:4e:e1:8c:
                    85:e4:4f:f4:c9:3f:7b:e0:ff:92:55:05:0c:28:4c:
                    b4:d7:6d:90:6b:54:1c:de:40:8d:fa:34:0c:b2:41:
                    02:e2:df:4c:a1:97:35:8e:7d:da:f3:e8:39:18:cc:
                    66:22:c7:19:ec:2f:a8:f6:62:73:24:38:29:60:e8:
                    4e:bc:1a:d3:72:4b:ec:9e:7c:7f:dc:cf:5a:a6:5e:
                    56:fc:b1:96:b8:6f:98:7c:9f:3d:96:1e:7a:7d:cc:
                    b7:e3:ea:1b:df:26:a6:8d:27:69:c5:84:5c:f1:72:
                    42:40:4a:e4:05:72:92:ca:a7:76:43:d9:76:1a:88:
                    ca:39:89:d3:42:44:2e:db:b3:9b:9e:21:b5:74:50:
                    96:1d:88:b1:e1:a1:d3:3c:d0:e8:02:f5:46:df:c4:
                    33:a3:a7:43:96:91:3c:17:15:92:62:a5:0a:25:c4:
                    0c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:44:02:28:BE:C9:C2:51:63:F3:11:44:59:D2:84:98:C2:75:E4:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/f3c90cc2-def1-3d76-83bd-4dc98c7c2133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:fd:42:5d:70:d4:35:98:7b:df:0f:f2:9f:4f:4e:a3:86:
         7d:19:79:5d:06:ba:67:6d:e9:a0:c7:2b:92:9a:31:8c:8d:28:
         f2:25:92:ee:7b:54:fc:9e:4a:95:fb:b7:4a:40:d8:84:9c:24:
         f0:e8:fe:db:27:7d:da:26:cd:25:67:51:a7:45:da:53:8e:b3:
         f1:dc:db:08:bf:7a:c2:42:eb:75:d4:6a:a2:f0:95:29:74:f0:
         05:a7:aa:50:c3:dd:49:98:55:b5:32:88:04:1b:87:ff:37:d7:
         7f:0f:1c:a3:fc:b6:e9:8d:70:92:5d:d3:9d:10:99:95:a0:a0:
         ec:50:b6:c2:fb:3c:54:95:74:c2:17:36:cd:f2:44:69:d4:40:
         87:69:27:2e:b1:bf:7f:db:83:92:09:c0:05:4d:9c:ee:2e:ba:
         2f:ae:96:95:c9:c8:af:a3:4a:ea:b8:66:4f:68:4c:f2:44:11:
         92:53:13:ea:8f:fc:7f:92:56:75:65:4a:7a:d9:60:ea:41:be:
         b4:c6:ca:df:ff:af:56:06:f7:3a:de:28:28:ea:b3:d9:f9:91:
         0e:4f:f5:31:e0:61:a9:fb:bb:ba:ed:63:6a:8d:ed:ca:3e:5d:
         9c:7a:73:33:86:e6:6b:4c:22:94:fd:c2:68:40:26:4d:1a:a7:
         55:03:6c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:42 2024 by rpki-client on console-fra.rpki-client.org