Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6a2bba8b-3816-3bc2-b9e4-e0b392afa1b5.roa
File:                     6a2bba8b-3816-3bc2-b9e4-e0b392afa1b5.roa (raw, json)
Hash identifier:          iIxdoSdmK+O8BcqEn7cDvSlFfXEOqkZpi/VETPG7zVk=
Subject key identifier:   14:D1:E8:17:F2:8C:85:2D:AD:33:6A:3F:75:EC:F6:BA:13:2F:28:F1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B14290E4E0C3A60BDCBE80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6a2bba8b-3816-3bc2-b9e4-e0b392afa1b5.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:42:90:e4:e0:c3:a6:0b:dc:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=d4e3e931-7225-4851-b85b-ac24f8c005f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:99:1b:78:be:89:d2:a3:cc:df:1c:f1:2b:8b:
                    a7:8c:9d:b7:2f:e5:18:7a:1a:c9:b0:ac:35:51:4b:
                    75:d4:79:60:f7:12:e4:48:b6:40:28:c1:78:32:2c:
                    01:d3:fe:7a:58:08:8e:e3:12:ab:00:51:7b:ad:78:
                    95:76:a9:c7:55:37:1d:27:61:cb:bc:33:2c:ee:b5:
                    ba:9b:ca:22:c0:3e:7e:49:5b:9e:b8:91:52:51:56:
                    2f:52:f3:d0:93:11:99:e5:46:da:75:29:7a:83:33:
                    15:c8:cb:00:3a:67:c2:f3:a0:dc:00:eb:e3:11:97:
                    c6:0a:b4:d1:d7:cf:9a:a9:59:bd:80:ff:ab:79:f9:
                    46:7d:e8:69:5f:8b:fe:6b:32:d1:a4:1b:b9:df:5e:
                    fc:6e:fb:e3:bd:3b:a7:a5:ea:a4:9d:0d:64:20:2b:
                    04:eb:c6:97:4a:88:65:7e:f5:98:07:54:ea:1b:10:
                    14:bb:b7:10:6b:26:af:de:e1:bd:ad:47:f9:56:80:
                    ac:60:d3:fd:54:35:54:2a:59:c8:b6:60:6d:06:3b:
                    99:e4:d5:10:08:37:c2:db:41:ff:87:4a:17:60:54:
                    e8:95:82:47:e0:88:8d:4d:25:df:d6:36:58:2f:62:
                    b7:09:d0:ed:93:24:fd:9a:48:82:2d:bb:10:be:fc:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D1:E8:17:F2:8C:85:2D:AD:33:6A:3F:75:EC:F6:BA:13:2F:28:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/6a2bba8b-3816-3bc2-b9e4-e0b392afa1b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:88:f6:70:c8:4a:3a:32:4e:f1:ae:55:77:cc:7a:98:ec:
         04:df:fb:28:2e:52:e7:fd:e5:74:a4:46:e1:8b:ae:19:29:b1:
         33:9c:15:f5:45:8c:f4:2e:ee:d1:02:cc:85:f4:4d:76:5b:98:
         6d:27:73:83:b7:e2:3d:0f:ed:a0:a5:6f:7c:3d:4f:58:45:55:
         0d:0d:b9:61:51:5b:14:4a:3e:44:77:39:8b:83:2a:3f:a0:66:
         4c:64:f2:1f:b6:f6:65:dd:1c:17:8c:0e:2d:f1:bf:2b:a9:51:
         0f:d0:f1:ce:27:b1:d7:84:07:7c:9b:8e:ec:ae:a9:d0:24:f7:
         84:b1:ea:69:78:bf:bf:d8:4c:f3:10:cf:1a:4e:90:f0:46:00:
         69:a8:7f:bc:40:d8:a0:7a:81:91:36:23:b5:9f:b4:4e:aa:e8:
         38:3b:1d:2d:a5:ae:a6:83:98:aa:ac:fb:46:3e:ed:59:a3:cb:
         e4:8b:55:b9:6a:18:7c:13:fa:fe:af:bf:90:ad:1c:3d:6d:a7:
         9f:5b:6c:59:d0:39:85:90:a7:44:ae:0d:55:6c:16:ce:ea:6c:
         26:d5:6d:83:c6:20:28:65:0b:8d:73:6e:9a:07:14:72:ef:ab:
         18:b5:2c:45:91:8a:59:f6:f2:e1:fb:64:f8:82:b6:1b:e5:2a:
         83:a6:fe:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:32 2024 by rpki-client on console-fra.rpki-client.org