Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/514e4b81-db6f-3755-97ea-8cfb072dea6c.roa
File:                     514e4b81-db6f-3755-97ea-8cfb072dea6c.roa (raw, json)
Hash identifier:          hrddLoJelA4tvIp7sZpLrchy4N4f/vTh2YhGka1GC0E=
Subject key identifier:   C0:51:DF:7A:21:66:86:74:F8:C5:13:F8:F9:55:4B:9E:66:F9:8E:93
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847A47138D2F5AA789D48687E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/514e4b81-db6f-3755-97ea-8cfb072dea6c.roa
Signing time:             Thu 24 Oct 2024 01:00:32 +0000
ROA not before:           Thu 24 Oct 2024 01:00:32 +0000
ROA not after:            Wed 22 Jan 2025 02:00:32 +0000
asID:                     54113
IP address blocks:        172.111.94.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:71:38:d2:f5:aa:78:9d:48:68:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 24 01:00:32 2024 GMT
            Not After : Jan 22 02:00:32 2025 GMT
        Subject: CN=6f6923d5-54b2-4618-8949-dc8a807c5aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:92:5c:d2:2c:bb:b8:ca:59:a7:90:1e:ad:
                    2e:77:d8:20:1a:49:08:da:ce:2b:1f:45:e6:34:13:
                    58:07:67:ed:ea:6f:05:f4:ef:57:67:52:08:15:c3:
                    45:e3:d2:13:d1:da:02:b5:97:86:41:32:84:13:df:
                    30:33:53:fa:17:c4:f5:01:ae:0a:de:6e:57:bd:b9:
                    2e:b5:38:6f:27:39:46:b6:68:14:8d:e4:7b:99:67:
                    eb:fd:96:e4:fe:7d:f0:1d:cf:f9:a7:51:bf:e8:e3:
                    18:b5:de:59:9a:5c:95:52:93:0e:6b:ea:ae:db:14:
                    fc:30:a9:ec:02:bc:62:23:54:fc:f8:c0:46:9e:28:
                    eb:0c:9c:d0:93:3a:1a:18:b9:9d:0b:79:4e:ac:e0:
                    42:7a:a4:a6:bb:bf:b2:13:94:09:d1:9f:87:0a:8d:
                    f5:6f:ce:48:6b:4c:d4:f6:f9:52:ea:dc:93:be:15:
                    c1:bb:62:43:fe:d2:21:db:1d:37:2e:00:ca:ce:16:
                    51:79:37:91:82:e9:a2:ee:8a:71:5e:0a:2a:77:d9:
                    58:8d:1d:52:2f:c7:72:88:a4:e0:ca:77:59:15:f1:
                    7a:cf:c6:18:89:d8:76:f3:67:fb:ec:48:6c:d4:e5:
                    71:89:4d:d8:48:4c:9e:a3:a7:2f:02:83:72:73:d9:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:51:DF:7A:21:66:86:74:F8:C5:13:F8:F9:55:4B:9E:66:F9:8E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/514e4b81-db6f-3755-97ea-8cfb072dea6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.94.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:11:6d:d4:31:f4:bd:55:6b:28:bd:ad:70:da:bb:46:4b:
         a6:e2:f8:88:75:39:60:cf:20:b6:f5:00:e2:3e:ac:28:9e:6c:
         1f:80:73:52:4d:ea:ab:c4:38:77:1f:f6:4a:49:8d:ad:a3:99:
         11:61:87:3b:0f:4c:a7:c8:76:22:d4:01:91:9a:71:f3:2e:d5:
         18:76:67:a9:69:9a:47:bb:41:29:94:28:df:34:72:6d:2a:9a:
         b3:7a:8e:c2:17:9f:10:48:bd:8b:ba:70:ea:27:d3:e1:7b:70:
         7a:48:cd:f8:9b:98:16:6a:ab:9f:54:d8:df:e1:06:bd:b1:81:
         06:b7:37:f0:2b:32:92:31:4b:fb:dd:81:b5:66:73:26:b2:19:
         b9:79:2d:33:7c:80:e7:6e:45:9b:aa:41:db:14:04:04:b0:d3:
         19:55:40:31:8d:e8:01:aa:c3:6e:56:ba:96:83:fd:66:62:49:
         9d:4e:97:e7:62:17:3b:21:45:70:f5:92:46:71:96:d6:ff:56:
         87:f3:16:5e:ab:84:33:0a:69:e9:29:24:63:f1:81:dd:a9:8c:
         4b:61:f2:d2:73:3e:ec:0b:17:bd:cd:d4:5d:2a:f9:14:70:bc:
         48:b3:03:89:08:d8:90:a3:52:ec:ad:2f:e2:0d:30:b0:3c:da:
         75:ff:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:29 2024 by rpki-client on console-ams.rpki-client.org