Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa
File:                     60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa (raw, json)
Hash identifier:          ukZT7yeRHOVKBElUXMOzWwAfxovM2ZlUQFCuhKD9qsw=
Subject key identifier:   1C:E9:44:89:43:9B:9F:DD:8D:12:C0:D3:8F:19:19:04:3B:AB:D2:29
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1325E56B31078419C4E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.73.192/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:32:5e:56:b3:10:78:41:9c:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=ea371814-71df-45fb-bc41-6f0064bc3137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:8a:cb:37:e9:10:22:c7:3a:7f:89:bd:68:
                    29:a9:1f:41:a5:8a:de:ee:ca:ba:d5:04:9c:09:e4:
                    f2:cd:17:32:ff:ca:a4:db:96:b1:70:85:e1:4b:e8:
                    57:e1:6c:44:e2:88:0b:30:00:b4:a0:3d:6e:33:5b:
                    d1:8f:4d:e6:85:4b:a1:f4:de:a1:8b:10:02:c9:0f:
                    46:c9:04:fd:b3:6b:4b:dd:b6:96:1f:5b:bd:05:e1:
                    6f:d7:60:8d:80:f1:44:90:09:92:06:09:43:21:fd:
                    32:80:ab:5e:3a:9b:c7:af:d4:21:77:ce:4c:3b:cd:
                    5c:4d:48:42:16:eb:38:eb:27:99:f5:6a:d2:52:8c:
                    52:ab:54:cd:12:83:94:11:e2:5c:32:47:8a:3c:50:
                    53:dc:a5:1d:1e:fe:47:74:bd:74:70:8c:44:f4:a7:
                    f4:93:0f:4e:d8:b4:02:33:bf:5d:63:ac:c7:c0:1d:
                    ce:93:32:6f:22:64:92:98:b8:e8:8b:c7:7a:42:bf:
                    88:6c:e3:77:f1:dc:79:08:58:46:d1:80:38:35:08:
                    e8:45:b3:1c:5e:12:25:79:62:48:90:d8:4b:3a:23:
                    76:47:45:6f:9b:99:20:72:23:0f:0c:a3:e3:11:10:
                    ae:6c:71:9b:78:64:38:1b:50:53:bf:4b:f3:7c:b3:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:44:89:43:9B:9F:DD:8D:12:C0:D3:8F:19:19:04:3B:AB:D2:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.73.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:0e:51:1c:e3:32:fa:40:e8:78:68:86:8f:c9:35:2c:26:
         6a:4c:98:74:15:9f:b6:2b:89:bb:7f:4f:0c:7b:c6:ad:2f:80:
         fa:2d:0e:4c:3f:bd:6b:f5:0a:0c:e7:af:bf:b8:8e:da:aa:64:
         c2:22:24:9a:18:af:43:ba:20:92:00:ab:5a:24:d0:9f:e3:e2:
         dd:4d:89:8f:54:f1:78:04:64:d1:3d:51:cc:30:db:4a:cb:32:
         bc:0d:6c:6d:4e:09:98:3e:a8:71:d4:0d:c1:bf:46:bc:24:55:
         57:ef:83:73:2d:72:7a:16:23:bc:6f:d7:d0:82:d0:2d:69:4d:
         f4:7b:53:c9:7e:75:00:e7:ca:cd:39:97:74:b0:95:8b:64:59:
         4b:f5:45:d2:76:3c:44:bf:5c:a3:66:2d:d6:3a:97:91:8c:0d:
         f4:6b:a9:5d:76:c2:e1:8d:5f:16:d7:8a:3c:2d:90:fc:2f:c8:
         b6:5e:1d:5e:88:42:24:41:c0:67:8b:74:ad:44:ac:c0:40:c1:
         69:1b:f8:de:8d:c0:2d:36:70:39:9a:d2:e6:98:45:fd:7a:e7:
         6a:17:63:35:c2:27:fa:71:c6:e0:13:41:86:47:96:82:ff:81:
         e1:45:18:90:1d:8b:5e:0c:e8:a9:30:c6:df:86:3b:ce:81:ff:
         9d:79:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:32 2024 by rpki-client on console-fra.rpki-client.org