Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa
File:                     b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa (raw, json)
Hash identifier:          JHm763dGlqNamAFrQtOZszT2emBWozaykXh7rpynPtI=
Subject key identifier:   BB:21:DD:BB:00:A3:3F:59:51:67:35:41:84:2B:17:22:44:0A:89:1D
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1333FDA2B75C6AEE61200
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.122.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:33:3f:da:2b:75:c6:ae:e6:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=19abff43-3add-4600-a503-75ca4f1f3f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:cf:b2:2a:05:ff:29:62:c7:2d:8d:86:03:
                    f6:98:5b:c9:2b:29:f8:0a:57:44:b0:1f:f9:eb:12:
                    b7:2d:58:33:aa:57:8b:b3:fd:76:a5:04:bd:14:bd:
                    f0:f7:c6:21:c2:96:4e:03:58:9e:63:5e:ac:fd:38:
                    8b:65:c9:2c:00:6a:fc:61:ab:d3:c4:71:c2:0c:c9:
                    09:53:b3:f9:88:67:09:42:b5:f5:b1:bf:80:0e:cc:
                    6a:bd:56:25:4e:bc:1d:63:86:a6:34:96:e1:be:ee:
                    9c:69:1a:9a:a9:e1:69:63:20:46:3d:2e:a5:0f:e0:
                    ff:3c:b6:77:8f:84:33:ec:c6:de:9f:ae:64:ed:6c:
                    8c:4b:18:cd:e0:39:36:ef:03:db:38:76:cf:d1:56:
                    21:9d:ba:88:98:8b:04:d4:1e:cc:45:67:4d:17:af:
                    20:ba:7c:1e:76:0b:c5:0d:5a:49:5c:34:f7:9a:0a:
                    1c:02:26:ec:32:8e:23:c1:a9:66:4f:50:1c:16:c7:
                    99:dd:57:41:2d:3b:f8:08:8e:03:6c:98:8f:f2:1e:
                    45:57:1e:38:76:96:16:f1:b2:5a:77:2c:ca:ee:a7:
                    c1:8e:4e:62:0b:e9:7b:9e:2a:13:ae:1e:8a:d9:32:
                    7f:c4:36:65:9d:60:43:03:5f:fa:e3:fc:f9:b7:f4:
                    9b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:21:DD:BB:00:A3:3F:59:51:67:35:41:84:2B:17:22:44:0A:89:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b8698ce2-5a6b-3a61-84e6-4f24949e5dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.122.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:98:f2:16:c2:9c:26:8e:39:8a:e8:59:73:72:b6:25:a7:da:
         de:95:3d:7a:a3:db:bb:04:4d:af:04:9c:d3:66:9f:d5:3a:1a:
         4e:c4:15:32:20:95:45:79:09:64:ca:6d:22:99:a3:4a:15:33:
         67:99:82:e5:1f:9d:33:3a:a8:fa:d5:6c:f1:2d:95:1e:b9:9a:
         47:28:c9:79:20:fb:d7:d0:8c:61:5b:c0:d3:2d:00:7c:af:a6:
         11:34:2a:23:60:71:92:d3:ca:5e:53:4f:a2:9b:cc:d3:1c:40:
         34:9f:2e:89:79:57:1c:2a:55:db:45:3a:30:19:2e:ca:66:e0:
         76:09:1c:89:40:9b:cb:73:a6:42:a3:12:31:4d:0a:a4:87:3e:
         a8:7f:13:50:49:55:f9:d5:67:9f:ed:b9:7f:18:2d:ee:35:02:
         b2:c5:e8:6d:dd:43:80:64:b0:92:87:63:2b:da:51:a8:b2:f9:
         8c:e8:16:98:1d:ae:66:0b:82:e9:f8:ae:fb:f3:f8:c0:67:4b:
         39:51:a5:db:46:09:d0:f4:5d:28:f5:85:b6:bb:71:4a:68:c5:
         fb:e5:36:b8:ab:5e:96:48:cc:d5:c0:2f:0f:ed:37:12:9b:f1:
         2d:74:a5:d1:9c:79:df:68:03:2a:6b:18:2b:85:b4:db:97:0c:
         bd:fe:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org