Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
File:                     3523baea-e454-3068-b7aa-2b5588e904f2.roa (raw, json)
Hash identifier:          hba1qtJr0+bgbOWD8AOIBZYdvUFkun/0BIoNbMh4h2c=
Subject key identifier:   EA:03:5B:5A:63:E7:19:25:1F:77:2A:D2:0C:69:37:B1:45:41:58:64
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D503A10116FFD2437EB7AD40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        172.111.124.64/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:a1:01:16:ff:d2:43:7e:b7:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=622495bb-30c7-43f1-b625-42bd79c44249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a1:fc:ac:09:55:e2:a7:fb:49:7c:2b:83:4a:
                    95:b0:25:58:39:7a:98:18:88:c8:7c:2f:2c:f9:6c:
                    aa:3d:40:65:90:d4:57:8e:dc:82:5d:17:fd:03:c9:
                    44:d1:2d:19:e1:37:2e:2f:45:58:3a:c6:bc:4c:c7:
                    d6:3f:df:ec:40:2c:a7:a0:5c:97:86:ab:36:5d:d3:
                    56:b0:7a:1c:9b:0b:2a:4e:8a:33:95:24:20:80:33:
                    a0:f4:0a:d4:68:2d:c0:d6:bf:d7:7f:ba:16:76:77:
                    ad:27:ed:34:9f:c1:09:18:3c:c1:58:94:34:f8:e0:
                    9e:de:d6:74:6a:80:81:fe:16:5b:06:e0:54:39:6f:
                    64:8a:5c:8a:f9:21:d4:26:cd:04:2a:ee:87:b7:23:
                    c1:7c:0c:b8:03:6a:55:8a:84:c4:e8:bd:e4:2c:58:
                    bd:a2:28:ee:49:89:be:9e:a8:5d:1e:3c:4a:26:3c:
                    d5:a7:9e:ef:30:b8:10:17:39:44:4a:47:6c:42:e7:
                    f0:bd:0b:04:05:26:0f:98:fc:08:b0:9e:95:04:aa:
                    88:2b:c4:21:7c:03:fc:a5:d8:71:4c:f6:40:51:6b:
                    13:6d:fb:5f:a1:90:0d:4f:e4:f2:12:65:b8:c2:b9:
                    7a:1b:f5:6a:2b:ae:e6:5c:7d:74:0a:56:62:71:07:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:5B:5A:63:E7:19:25:1F:77:2A:D2:0C:69:37:B1:45:41:58:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3523baea-e454-3068-b7aa-2b5588e904f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.124.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:a3:85:ba:e8:08:3a:71:14:af:34:87:a3:b7:e1:11:f4:e6:
         b6:cf:ae:f4:41:82:39:dc:27:9e:50:9f:50:b3:6b:ae:06:1f:
         b4:de:b6:ce:92:a4:41:fa:dd:9c:88:be:51:ec:0f:8b:e6:44:
         30:79:d7:4a:83:00:41:a5:6c:9f:78:0d:db:b5:95:79:93:18:
         ae:08:5d:c0:84:4b:22:f9:8f:16:27:83:ba:53:57:3c:40:01:
         17:ff:0e:d5:14:c4:0e:37:e8:69:07:af:5f:eb:88:1f:6b:ab:
         e7:52:4c:74:6e:0e:41:74:a8:bf:c5:8d:2f:d8:ff:21:53:1f:
         a7:fb:85:59:ad:ed:a8:0f:a8:78:cb:00:b2:72:06:bd:3b:f3:
         eb:7b:14:e9:f2:28:2e:09:b1:e8:57:cf:e3:f8:9d:a8:1b:1b:
         54:7c:da:90:8d:3f:a5:a1:45:5a:75:8d:d0:26:b0:4f:f0:a3:
         25:c5:39:4a:66:e3:3a:59:0a:ee:87:10:4f:51:74:91:53:6a:
         1d:84:7a:f9:2b:33:bc:b2:f7:f8:15:cc:07:9f:19:d1:ea:e3:
         91:78:65:51:be:49:9a:67:39:19:be:db:1a:29:7d:3c:90:aa:
         12:91:03:ca:16:a5:dc:e2:ee:10:87:ea:6f:39:3e:40:69:86:
         4c:20:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:39:43 2024 by rpki-client on console-fra.rpki-client.org