Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
File:                     12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa (raw, json)
Hash identifier:          Yw6mNEz0TWU+gb31BG4slyqf5hTFEr7WrisstMZHwrY=
Subject key identifier:   C8:4D:0F:CA:53:1E:88:E2:0A:C3:1E:9D:2A:23:A2:2B:17:29:B9:ED
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12C895E74508B59114710
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.72.48/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2c:89:5e:74:50:8b:59:11:47:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=a7291992-3940-4f6a-8e58-c9e6aea1dbbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:93:cc:fc:0d:ea:8a:05:8e:38:06:ee:5d:9d:
                    36:4d:96:81:19:c0:35:a0:42:3b:dd:8e:bd:01:35:
                    58:b6:d5:0f:2c:9a:ff:77:db:6c:5d:f4:c1:3f:04:
                    58:33:63:f8:26:64:1e:d7:59:33:25:67:61:b7:4c:
                    aa:7f:98:0c:05:c5:2c:e2:a2:04:72:26:4f:31:50:
                    b0:fe:a4:f1:98:e0:01:7a:8e:c1:b7:a8:51:2d:5c:
                    1e:cb:f2:49:75:3d:14:de:4f:bc:0a:ca:a3:ea:2c:
                    d0:27:a4:46:1e:f9:aa:4d:f8:c8:f2:56:ef:6a:c5:
                    df:b1:38:ed:79:f1:93:61:e4:d8:db:fa:e6:f5:52:
                    74:91:db:ec:f2:db:f5:32:20:83:c7:8b:fb:bb:fc:
                    77:82:bd:85:22:4c:c7:22:57:39:e6:80:4c:07:90:
                    8a:8d:3a:00:06:b2:8f:7f:be:25:b1:70:86:9e:cb:
                    62:cb:e3:22:65:a3:5f:81:20:dc:2c:c1:72:44:8e:
                    b2:4f:3b:7c:3c:de:84:a5:8e:b4:08:09:ca:3f:46:
                    24:d1:01:e6:73:f6:82:3f:90:c3:f3:de:56:b7:87:
                    d7:1c:d6:04:77:86:43:85:27:8a:0a:8f:ec:2c:d6:
                    07:9b:4c:a7:a9:a5:d9:d7:9b:b3:99:74:dc:15:1d:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4D:0F:CA:53:1E:88:E2:0A:C3:1E:9D:2A:23:A2:2B:17:29:B9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/12b9cd40-c7d1-36f3-9e21-296be7d43dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.72.48/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:d8:ae:ca:f0:ce:33:a5:c3:63:98:8f:70:7a:1a:eb:3d:
         f7:20:52:c9:01:ce:fb:11:ab:28:35:aa:b4:da:9f:30:12:5a:
         dc:dc:85:5d:4b:a0:80:45:eb:e0:25:9a:b3:87:42:85:c9:8e:
         11:1a:b0:8c:bf:1d:3e:24:53:25:ff:85:ae:34:59:44:b4:32:
         03:70:cc:cf:c3:6a:84:5b:97:81:ca:b4:84:ce:b3:39:56:e9:
         ff:6e:b0:b7:93:6c:16:2e:3f:c2:84:ea:ae:23:5d:e5:e9:4f:
         2a:43:b4:a4:5d:63:8e:39:e7:e6:c9:0f:e6:2b:7b:0a:a0:84:
         ec:27:b3:79:fc:c0:87:f2:82:c5:18:f6:76:1e:c5:2b:68:ea:
         a0:d6:79:ad:68:9c:d8:84:13:dd:71:9c:82:a7:65:f8:b7:9c:
         37:25:c4:79:7d:aa:55:45:10:8f:79:6f:47:60:17:25:2c:c2:
         2c:52:10:7b:bd:b1:b9:d1:66:d0:03:8a:2d:6e:32:cd:36:32:
         4e:b1:3c:30:14:9b:94:89:72:86:f8:c0:dd:2d:bc:3e:85:05:
         a8:8e:77:82:26:86:f0:68:c4:cb:49:2c:0e:3f:29:9c:36:9e:
         c2:b4:50:c5:9b:10:7d:4f:06:c8:52:9d:17:3c:f2:15:4d:2d:
         44:01:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org