Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa
File:                     89707528-a4b0-3570-9d8a-88acb7809bc6.roa (raw, json)
Hash identifier:          X9NO49jWhc8MuvXigIEfpjkR0Uy0hBAXHm8kzsKYGXQ=
Subject key identifier:   4E:92:ED:31:CC:2D:CB:88:B0:BC:52:0E:D9:4B:3E:8A:D9:B8:85:BE
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847DF2F59D09FF70B6B395FEF80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     54113
IP address blocks:        172.111.66.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:59:d0:9f:f7:0b:6b:39:5f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=e1a9ab11-0460-4e26-8ac1-cbd6ae26a3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:80:dc:54:50:1b:36:73:e2:26:10:7a:d4:
                    16:7d:65:64:10:85:7f:57:42:8e:64:aa:db:b1:bc:
                    26:44:88:cb:48:7a:f3:80:96:4a:20:3b:b9:76:7f:
                    d2:da:03:3b:d4:ed:e8:71:84:bf:e1:f6:a3:80:69:
                    cf:6c:d4:4d:36:f5:81:d6:bb:c4:e7:7b:cd:cb:39:
                    a9:a5:aa:a7:6c:19:2a:d8:e6:f1:b0:49:4c:d2:55:
                    25:bc:cc:10:35:42:78:bf:18:93:55:08:75:23:63:
                    47:83:cd:33:1c:4c:fa:42:f8:81:e1:8b:9c:ec:cb:
                    08:6e:e7:c8:bc:a0:fd:06:b6:f8:ae:32:f5:87:91:
                    21:52:04:23:0b:b7:69:a2:6a:28:3d:a0:69:73:f5:
                    71:d5:d2:0c:aa:99:5a:77:b8:59:45:e4:b3:2d:b5:
                    dc:a5:fd:37:dc:64:1a:52:b2:ce:83:ce:f2:7d:bc:
                    81:15:41:87:d4:a0:fb:12:8c:61:46:a0:96:f0:95:
                    3a:0a:7a:eb:03:52:4d:c2:cf:ab:37:6a:31:0f:3f:
                    3a:12:73:88:70:ff:70:1f:92:43:a3:6e:24:d8:4f:
                    c5:5e:f5:d9:8f:13:05:13:9d:4f:29:57:95:42:66:
                    ab:82:b0:69:73:75:29:4d:35:5c:3e:24:3f:4b:33:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:92:ED:31:CC:2D:CB:88:B0:BC:52:0E:D9:4B:3E:8A:D9:B8:85:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89707528-a4b0-3570-9d8a-88acb7809bc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.66.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:58:25:c7:41:97:45:bd:af:af:7d:c4:4e:38:02:70:da:
         00:f6:f1:24:60:32:9d:84:8c:30:e3:a8:30:d4:3b:8b:ab:e1:
         b3:fd:97:a3:30:d3:4e:22:f0:46:c0:ed:06:50:bd:a6:8b:84:
         bb:00:6e:f8:73:cd:e7:b6:24:ca:f2:43:cd:5e:e0:9d:7a:0e:
         0c:24:c3:37:c1:25:3e:80:ea:62:ed:d6:d6:35:8d:ad:3e:81:
         77:7c:2e:98:c3:cb:a9:8f:44:87:27:8c:30:eb:d3:fd:97:d7:
         f5:73:4e:30:f5:1f:4b:24:ed:bf:15:51:86:8f:6f:23:e1:a7:
         d9:12:48:df:f8:db:c2:5a:ce:83:43:d8:80:6c:d7:fc:26:6b:
         14:43:53:cc:ac:e2:3c:13:48:df:b6:4a:4e:0b:da:98:df:64:
         30:c8:14:b8:e1:cf:57:55:92:9c:aa:44:8d:a9:23:92:4c:4b:
         8d:41:18:85:8c:94:57:60:f1:74:1d:0a:65:ea:86:79:a0:2a:
         1a:08:36:28:78:1f:4e:b8:a2:81:3e:c8:f8:54:c1:b3:5c:04:
         50:32:f8:59:5d:44:d8:fc:01:cc:c9:55:8c:3a:c8:f9:d5:01:
         2c:45:99:e5:19:7a:14:bb:fd:4f:c7:1d:7c:8f:7b:8d:df:12:
         4d:b6:ce:0b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEffL1nQn/cLazlf74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MTExNDAyMDAyN1oXDTI1MDIxMjAyMDAyN1owLzEtMCsGA1UEAxMk
ZTFhOWFiMTEtMDQ2MC00ZTI2LThhYzEtY2JkNmFlMjZhM2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps+A3FRQGzZz4iYQetQWfWVkEIV/V0KOZKrb
sbwmRIjLSHrzgJZKIDu5dn/S2gM71O3ocYS/4fajgGnPbNRNNvWB1rvE53vNyzmp
paqnbBkq2ObxsElM0lUlvMwQNUJ4vxiTVQh1I2NHg80zHEz6QviB4Yuc7MsIbufI
vKD9Brb4rjL1h5EhUgQjC7dpomooPaBpc/Vx1dIMqplad7hZReSzLbXcpf033GQa
UrLOg87yfbyBFUGH1KD7EoxhRqCW8JU6CnrrA1JNws+rN2oxDz86EnOIcP9wH5JD
o24k2E/FXvXZjxMFE51PKVeVQmargrBpc3UpTTVcPiQ/SzNJwwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE6S7THMLcuIsLxSDtlLPorZuIW+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODk3MDc1MjgtYTRiMC0z
NTcwLTlkOGEtODhhY2I3ODA5YmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9CADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAP2Fglx0GXRb2vr33ETjgCcNoA9vEkYDKdhIww46gw1DuLq+Gz/Zej
MNNOIvBGwO0GUL2mi4S7AG74c83ntiTK8kPNXuCdeg4MJMM3wSU+gOpi7dbWNY2t
PoF3fC6Yw8upj0SHJ4ww69P9l9f1c04w9R9LJO2/FVGGj28j4afZEkjf+NvCWs6D
Q9iAbNf8JmsUQ1PMrOI8E0jftkpOC9qY32QwyBS44c9XVZKcqkSNqSOSTEuNQRiF
jJRXYPF0HQpl6oZ5oCoaCDYoeB9OuKKBPsj4VMGzXARQMvhZXUTY/AHMyVWMOsj5
1QEsRZnlGXoUu/1Pxx18j3uN3xJNts4L
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org