Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa
File:                     c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa (raw, json)
Hash identifier:          Wk+XuUdxqb0v+xvp7iPw15U2yOrqEIoiAvKbfhvRNCg=
Subject key identifier:   00:90:63:8F:E0:E0:AB:62:0C:E0:D3:93:CA:9C:BF:8C:76:FF:5F:A5
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D503A03069AA1AC6E21BB180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        172.111.77.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:a0:30:69:aa:1a:c6:e2:1b:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=a0999527-d149-4ac7-8978-9d56d8d7618b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:9e:2d:e8:d3:cf:00:77:2c:66:14:53:69:
                    19:99:01:43:92:a6:12:2c:9a:c9:60:e8:3f:f7:8f:
                    66:7e:4a:10:96:10:e4:3c:d3:66:41:72:8c:8b:b8:
                    50:4f:bb:7e:df:14:1f:aa:43:2d:b4:37:85:2c:57:
                    01:fb:2e:6f:19:01:7b:4b:64:ed:57:14:e1:7e:e2:
                    45:ee:b4:ae:d6:af:bc:3b:5f:29:90:af:c9:c3:a6:
                    45:94:7b:f5:00:e6:c5:d3:ac:a8:a2:38:8e:6c:09:
                    a7:9a:67:05:f8:26:46:ed:13:4d:25:0a:42:f7:dd:
                    99:68:db:13:7b:13:1b:e6:17:2a:a2:e0:22:0b:bc:
                    0b:ae:a2:a4:8f:a6:86:b3:92:e2:36:12:51:aa:37:
                    d9:8a:a8:82:21:92:0a:5a:b6:bf:ab:bf:db:07:67:
                    d1:4d:2f:67:ad:f6:98:b4:27:79:1b:67:95:6b:e8:
                    0f:bc:86:99:47:eb:5d:d8:55:22:72:71:45:d5:31:
                    71:bf:d9:7c:41:b7:14:f7:f9:eb:38:6d:00:10:21:
                    ac:89:49:fb:0c:e4:d4:45:0a:72:06:a6:ad:1d:0a:
                    54:cb:1c:6a:a0:b2:4b:b7:b5:df:af:6c:bc:df:40:
                    a1:28:f1:b5:45:68:b0:35:71:ec:d0:6c:dd:36:4a:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:63:8F:E0:E0:AB:62:0C:E0:D3:93:CA:9C:BF:8C:76:FF:5F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c3ada758-be41-3fc4-b13c-2d1df4788bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.77.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:2d:76:d1:0c:77:fc:53:71:f6:dd:5b:aa:0e:d5:04:ab:
         93:66:61:d9:02:69:bf:73:67:41:bc:f0:c3:ca:41:92:56:74:
         9d:f3:bb:c3:cd:d0:ac:a8:9a:d2:e5:59:fb:3e:de:c3:9f:64:
         34:79:cf:3f:be:3b:65:d6:cd:b0:44:79:6c:1b:a3:c9:15:32:
         b2:e9:94:3f:fe:42:fe:0b:28:61:c3:65:9c:10:34:14:c0:0d:
         e9:f7:cd:5d:5e:23:ef:14:47:7e:af:ef:79:32:ce:64:af:b2:
         0c:f2:d4:d4:75:01:4b:87:45:d2:30:b3:42:29:6f:ef:37:ee:
         ca:fa:53:be:dc:ae:97:10:42:d3:3d:13:0a:2b:6a:dd:1a:4e:
         10:81:45:9e:08:d2:94:43:4c:90:30:1b:fd:f5:c7:aa:cd:ec:
         b7:f5:90:4c:9a:07:5d:f3:78:fa:38:00:8d:0a:27:c7:97:e6:
         66:72:b3:3a:f3:77:c5:ad:80:22:1b:11:54:c8:cb:28:f8:ba:
         00:da:11:6f:98:0f:2e:37:f5:ec:d8:ca:c9:e9:6f:2a:f4:6a:
         34:86:a7:47:3e:4d:e0:e3:ef:ce:e2:a3:41:56:52:02:4d:58:
         d8:b6:c6:ce:75:94:12:43:7c:3c:1c:c2:50:93:56:4d:55:25:
         3c:88:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 23:39:43 2024 by rpki-client on console-fra.rpki-client.org