Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa
File:                     33cbec81-889f-3f90-9a5b-e098fa182512.roa (raw, json)
Hash identifier:          aMStxUt4djWRYt9sWQ+tXLo1V3pRMjj2k4sEC9uxXeQ=
Subject key identifier:   D6:DF:51:9D:FC:FD:23:85:8F:EA:FB:8D:65:A6:F5:1B:44:4E:06:AC
Certificate issuer:       /CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
Certificate serial:       010D0C9F432858458C6DD32E359B2F8C12595C00
Authority key identifier: C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa
Signing time:             Mon 15 Apr 2024 01:00:26 +0000
ROA not before:           Mon 15 Apr 2024 01:00:26 +0000
ROA not after:            Sun 14 Jul 2024 01:00:26 +0000
asID:                     7212
IP address blocks:        192.111.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8c:6d:d3:2e:35:9b:2f:8c:12:59:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac00894-5e17-4e14-b8eb-b7fb348ad1c2
        Validity
            Not Before: Apr 15 01:00:26 2024 GMT
            Not After : Jul 14 01:00:26 2024 GMT
        Subject: CN=87b28ce5-3b35-4306-83b5-d1affa8b6356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:b2:15:7c:bd:06:79:43:0f:77:9c:1f:4a:
                    8b:99:13:e4:df:d7:3b:53:dd:b4:81:c5:57:7a:5d:
                    de:b1:2a:22:f6:6b:9f:d9:18:c2:ca:9e:23:05:6a:
                    9a:b1:68:e7:00:71:26:cc:20:62:9c:8a:a2:b3:c9:
                    40:84:a7:e2:7e:c3:43:cb:b5:d0:8e:2b:10:08:35:
                    dd:47:1b:96:22:60:5e:8a:dc:9e:52:a0:f0:7a:ee:
                    b8:ba:25:ce:e3:dd:cd:62:c7:12:c7:74:95:40:8f:
                    c2:22:5b:29:37:a6:c3:39:9a:17:c3:40:69:60:e8:
                    ac:a8:fa:82:4a:dc:4e:b6:6f:f3:fe:b9:79:fd:3a:
                    e0:b7:cb:38:b0:46:a8:7d:ff:94:3a:3f:5f:54:59:
                    6c:f6:15:7f:a6:c1:46:87:57:95:9b:29:6d:b9:68:
                    87:d9:d9:76:61:d9:6d:c2:5f:68:ca:f0:83:1c:e1:
                    f2:3f:3c:34:7d:5c:a0:51:13:6d:b0:e9:93:58:73:
                    83:fb:77:f6:58:e1:64:8a:74:8a:2d:90:a3:ca:48:
                    aa:97:9c:b9:25:20:3d:6f:d9:57:ab:38:ff:7b:1f:
                    c8:16:9b:7a:74:f3:63:16:a4:cf:aa:6a:23:68:e3:
                    54:7b:cb:7e:e2:7c:f6:38:94:5f:9f:b8:3b:61:ae:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:51:9D:FC:FD:23:85:8F:EA:FB:8D:65:A6:F5:1B:44:4E:06:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/33cbec81-889f-3f90-9a5b-e098fa182512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:8C:CC:6E:6F:7A:24:1F:57:0A:B0:C1:A2:A8:C9:7C:FA:31:BD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eac00894-5e17-4e14-b8eb-b7fb348ad1c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9c:b0:af:d7:2e:f3:44:4c:8b:d0:47:24:41:89:11:b4:0e:
         9e:82:2e:75:91:20:18:c4:d5:49:dc:dd:fc:d5:29:7f:1c:28:
         7f:0b:aa:67:e0:56:f9:d1:8f:a5:4d:9f:68:31:2c:20:01:50:
         12:2d:be:7b:b7:61:31:49:1a:eb:b9:95:9e:52:91:1e:c8:15:
         0b:fd:e7:15:55:b5:74:a7:41:1a:1e:12:d9:04:29:dd:f3:1d:
         c0:36:36:7f:72:e3:d3:bd:d3:96:a8:aa:11:1a:90:06:96:02:
         de:d9:4d:9b:77:1f:97:8d:d5:5e:2b:88:23:47:9b:71:da:60:
         2b:39:aa:29:8f:ee:ac:0a:15:6b:e6:2b:23:39:02:d9:dc:db:
         09:55:c2:b2:70:b0:32:f6:77:16:3a:25:b7:9a:4f:5a:3b:ff:
         35:1a:58:c1:40:37:46:0c:d7:bd:d2:66:d7:e1:56:5f:f0:43:
         9d:01:d1:33:6c:21:fc:91:de:36:84:01:38:2f:14:7a:27:15:
         8a:14:e0:ec:65:3e:03:31:96:3b:49:6b:1e:d4:1c:e9:cc:e7:
         be:a2:3f:ed:ed:e1:fa:62:a3:e5:14:2c:1d:40:58:bc:d8:25:
         8f:64:e7:58:3b:c2:f9:92:6b:df:1c:90:82:5b:6f:34:05:7a:
         71:a4:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:28:45 2024 by rpki-client on console-ams.rpki-client.org