Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa
File:                     8c4b65fb-eb70-3028-9f58-de8f80565386.roa (raw, json)
Hash identifier:          9LTYcWD18WipH3ERc7N3lSzn4txjT3wSRextjedS2C8=
Subject key identifier:   11:BD:2D:CD:24:6C:79:69:A0:BE:85:B1:D1:09:4B:77:5F:03:9E:42
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12E8F15555E7899922FE0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.121.32/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2e:8f:15:55:5e:78:99:92:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=489b3c09-c08f-41ed-be39-59e9f0be4c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:ae:68:c9:a3:af:ee:06:9a:3d:ae:4b:a3:
                    0d:f6:0b:88:66:8b:71:32:c2:0d:fd:ce:88:7d:47:
                    22:2d:3f:a6:dc:2a:33:ae:0d:3f:61:ae:24:e6:d3:
                    0d:fc:e0:52:85:e0:2c:1a:4e:d6:29:b6:e0:65:9b:
                    a8:12:ef:3e:bd:de:8f:81:a2:08:a2:ce:e9:58:c2:
                    87:b1:19:9b:9d:69:12:26:37:3b:93:e4:c2:b7:ab:
                    76:4b:7a:4e:c0:9d:62:c1:37:db:3c:41:20:17:cd:
                    4d:76:4c:47:92:3e:bd:64:fe:ec:20:4e:e8:f2:3c:
                    56:b2:70:a2:7c:63:ba:d8:e8:1c:4e:af:0d:4b:d7:
                    1b:90:41:42:a4:e7:0b:9e:f3:a2:c5:00:19:6f:32:
                    79:1f:4b:68:3e:89:56:e7:61:8a:45:dc:96:4d:bf:
                    ad:b8:21:8d:fc:60:48:89:55:67:f2:32:52:f9:e0:
                    f0:49:f0:0c:a9:1d:2f:92:76:27:60:6a:3b:50:0d:
                    fa:4a:cc:40:be:4d:1f:ee:74:1d:0f:d1:eb:c1:87:
                    8e:d4:6c:ea:ee:05:6f:32:5a:0f:45:3b:d9:a5:54:
                    79:5a:5e:69:b7:77:c2:a8:57:93:3b:82:c3:e1:72:
                    8e:0a:29:9c:49:05:03:32:75:82:a1:40:44:6a:14:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BD:2D:CD:24:6C:79:69:A0:BE:85:B1:D1:09:4B:77:5F:03:9E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8c4b65fb-eb70-3028-9f58-de8f80565386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.121.32/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:4e:b0:33:90:92:45:dc:32:13:45:25:43:99:a2:26:84:
         8c:5e:e8:3c:79:72:ef:2b:a0:aa:ba:d1:61:ca:d1:5e:d1:f6:
         a9:bd:38:fc:8e:5e:82:29:ef:bd:bd:ea:66:53:42:f7:aa:8b:
         e1:2e:50:4a:29:1c:cc:db:4c:3b:7a:e5:13:f3:d7:49:d0:0d:
         17:30:36:cb:af:72:c2:dc:b7:67:3d:ac:8d:78:50:c0:46:e8:
         af:73:d6:9e:c6:d3:fc:e9:5a:e7:da:00:a8:66:4c:8b:c7:1e:
         05:a6:af:6d:70:b5:f4:70:71:0b:14:50:d2:19:36:7f:1c:b4:
         16:39:d9:c2:33:ac:08:b3:ae:98:95:65:0a:1f:32:e8:15:58:
         5b:63:aa:c5:d2:e9:d5:d6:3c:26:6f:d0:04:59:32:4f:f1:65:
         b6:2a:ed:f5:fd:15:35:29:9c:16:7b:bc:38:79:fb:f5:08:56:
         fa:ae:0f:17:dd:5d:66:e9:96:10:a5:bb:f7:7b:c7:4e:ac:06:
         9e:0b:f7:8e:7f:91:f5:5b:93:43:7b:3b:f2:df:87:31:3e:23:
         f1:8d:3c:a0:81:57:a6:bc:39:3c:df:b5:aa:93:7b:d2:7d:b5:
         90:28:e8:45:2c:be:c3:10:2f:d2:43:24:3e:66:49:61:9f:76:
         0f:d5:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org