Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a8a6192b-acde-30c6-b783-50c009cf5baa.roa
File:                     a8a6192b-acde-30c6-b783-50c009cf5baa.roa (raw, json)
Hash identifier:          urMALuFagoND1H35bH17VzqCXXi1EAg7QOF8B0/8ZCM=
Subject key identifier:   CE:EA:8A:A8:15:0C:AA:98:95:C7:BD:92:39:2E:11:8A:AA:F2:50:A6
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1362E198CE4571BC17980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a8a6192b-acde-30c6-b783-50c009cf5baa.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.65.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:36:2e:19:8c:e4:57:1b:c1:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=59228a2d-7ddb-42bc-96b4-e34f3df9a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:85:4c:32:1a:a2:de:ca:24:e1:e4:9c:e4:
                    67:ee:76:90:05:65:94:f8:68:83:51:4a:f5:19:aa:
                    5f:29:d4:c7:67:36:b2:06:b1:be:ae:01:43:3c:36:
                    3e:b5:11:d8:f7:bc:ce:7c:68:bc:54:ed:16:3b:a4:
                    c9:63:8b:56:9f:8a:a0:79:ee:f1:f8:b2:71:c9:25:
                    7c:3e:4e:2f:85:d4:c0:9e:7f:36:6b:f5:b1:86:47:
                    f6:f8:6b:23:75:53:81:ba:1d:74:bb:15:84:04:25:
                    ac:8e:c8:1f:33:08:8a:99:77:a3:92:6a:e1:de:6e:
                    57:95:db:f6:7d:4a:60:13:20:e5:a3:b1:27:6a:7d:
                    3e:30:c5:40:6a:02:2b:7d:50:04:9a:f7:f1:19:95:
                    08:ba:35:cb:54:5a:b7:29:20:89:56:5f:06:72:1d:
                    b3:17:2e:9b:c9:20:bd:60:30:13:3a:95:c1:3b:8b:
                    e6:ef:41:41:56:e4:84:26:95:72:e7:4e:4d:c5:58:
                    ce:35:08:23:4e:b7:a6:34:93:d8:ae:d5:e0:16:65:
                    69:14:65:5e:66:cf:43:79:99:ca:d0:d3:e5:36:2c:
                    90:4e:2e:4f:d8:d7:7d:31:46:40:ff:3c:da:93:dd:
                    40:e8:2c:23:54:9e:1f:39:70:6f:25:3f:45:64:c6:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EA:8A:A8:15:0C:AA:98:95:C7:BD:92:39:2E:11:8A:AA:F2:50:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a8a6192b-acde-30c6-b783-50c009cf5baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.65.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f0:73:36:8f:c2:b5:6e:76:75:5c:e7:9a:8d:50:e6:04:ab:
         77:68:45:0d:56:95:c8:58:6e:0b:4a:ce:e7:f9:b7:34:d2:c4:
         97:83:bf:79:40:c0:09:97:3f:32:8d:17:fd:b5:35:eb:a3:f0:
         75:64:62:a3:39:fa:91:ed:bf:c1:77:8a:6d:11:39:52:6b:12:
         3c:e8:c5:b9:80:fa:30:f5:f4:e8:ff:f1:91:f0:31:cf:83:0f:
         41:3b:a8:7a:0e:69:af:bb:45:51:0f:f2:5c:5c:56:58:07:c2:
         dd:3b:26:9f:1f:bc:a6:ef:7c:7e:a5:23:5a:a5:49:16:fc:f4:
         69:84:44:4a:18:0f:88:fe:4e:90:96:01:94:c9:e9:79:23:0e:
         14:b1:55:30:35:47:33:27:3c:11:06:a9:8d:4d:d3:7c:cf:5a:
         67:80:42:24:90:0b:30:40:85:dc:71:30:01:10:32:d4:59:27:
         be:42:e1:40:94:71:db:85:74:ff:93:e8:9d:81:a7:a8:ee:64:
         34:b5:a1:36:cf:64:26:af:15:ce:42:07:50:3e:e8:6e:f8:67:
         62:5c:5e:02:5c:88:24:b3:34:e3:73:64:a9:e9:d1:ef:83:95:
         a8:01:2c:20:cd:c2:93:94:b3:4d:3b:b4:86:51:fb:f3:02:7f:
         fd:68:f1:36
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeTsTYuGYzkVxvBeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
NTkyMjhhMmQtN2RkYi00MmJjLTk2YjQtZTM0ZjNkZjlhMDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz+FTDIaot7KJOHknORn7naQBWWU+GiDUUr1
GapfKdTHZzayBrG+rgFDPDY+tRHY97zOfGi8VO0WO6TJY4tWn4qgee7x+LJxySV8
Pk4vhdTAnn82a/Wxhkf2+GsjdVOBuh10uxWEBCWsjsgfMwiKmXejkmrh3m5Xldv2
fUpgEyDlo7Enan0+MMVAagIrfVAEmvfxGZUIujXLVFq3KSCJVl8Gch2zFy6bySC9
YDATOpXBO4vm70FBVuSEJpVy505NxVjONQgjTremNJPYrtXgFmVpFGVeZs9DeZnK
0NPlNiyQTi5P2Nd9MUZA/zzak91A6CwjVJ4fOXBvJT9FZMbJIwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM7qiqgVDKqYlce9kjkuEYqq8lCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYThhNjE5MmItYWNkZS0z
MGM2LWI3ODMtNTBjMDA5Y2Y1YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHrG9BgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAM8HM2j8K1bnZ1XOeajVDmBKt3aEUNVpXIWG4LSs7n+bc00sSXg795
QMAJlz8yjRf9tTXro/B1ZGKjOfqR7b/Bd4ptETlSaxI86MW5gPow9fTo//GR8DHP
gw9BO6h6Dmmvu0VRD/JcXFZYB8LdOyafH7ym73x+pSNapUkW/PRphERKGA+I/k6Q
lgGUyel5Iw4UsVUwNUczJzwRBqmNTdN8z1pngEIkkAswQIXccTABEDLUWSe+QuFA
lHHbhXT/k+idgaeo7mQ0taE2z2QmrxXOQgdQPuhu+GdiXF4CXIgkszTjc2Sp6dHv
g5WoASwgzcKTlLNNO7SGUfvzAn/9aPE2
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org