Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa
File:                     edc6c20f-1455-3e54-83dd-1c7f052d0279.roa (raw, json)
Hash identifier:          7tBTDWL/Jh6daFgaAdznw08u0MgQAog7Z52Pqu8s/kY=
Subject key identifier:   DC:B5:C8:22:99:63:63:85:72:E1:BF:FE:B4:3C:A0:DD:71:A7:B0:78
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B136751DD07423BA39B2E0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.68.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:36:75:1d:d0:74:23:ba:39:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=4d510c1c-ee6f-4c56-bf21-ce81a39e06b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:bb:b9:f6:8b:8e:84:71:ca:54:55:a5:b0:
                    e6:1c:d5:f1:35:e5:1e:fd:9a:f1:09:2c:ec:48:9f:
                    6d:fe:9b:c4:30:bc:42:69:c1:d1:5e:35:3a:96:90:
                    ce:c8:30:06:d5:1a:a5:a7:fa:ff:80:53:69:1b:ec:
                    43:bb:40:5d:67:47:a9:19:95:f2:52:89:57:85:84:
                    40:9b:a7:b4:66:19:23:03:7a:66:ea:91:31:11:48:
                    1d:9e:91:7b:90:94:22:8d:77:f4:6a:51:f2:1b:04:
                    5d:5d:10:cb:df:89:94:f1:94:91:66:15:e7:b2:84:
                    27:fa:d4:2d:ca:26:3a:0f:af:67:71:86:99:3a:19:
                    f7:a6:10:bc:70:7f:b4:18:c6:06:e0:87:3d:6b:4f:
                    7c:98:7e:6c:15:4f:c0:3c:b0:bc:5d:25:d2:7f:7b:
                    69:da:48:82:cc:0e:f5:7e:4f:d4:81:ee:09:de:5e:
                    43:6f:f9:15:4b:03:39:d1:c9:a2:38:ec:97:1e:27:
                    72:b0:f7:14:a3:12:51:22:39:16:4b:a3:88:6c:2c:
                    25:ba:08:e1:b0:a9:db:a7:d2:e9:d0:4c:06:20:86:
                    56:7e:bd:0c:c0:89:da:fd:56:49:a4:0a:ad:83:80:
                    db:d0:26:c3:0a:ad:57:80:4c:1f:5b:ab:1e:d2:04:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B5:C8:22:99:63:63:85:72:E1:BF:FE:B4:3C:A0:DD:71:A7:B0:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/edc6c20f-1455-3e54-83dd-1c7f052d0279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.68.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0c:15:2a:e2:18:3c:3a:8f:63:81:e6:bb:bb:d5:54:d4:19:
         d2:e1:6f:77:f7:e6:4f:7c:d6:8c:ef:0b:66:34:7c:bd:0a:84:
         2c:46:50:6e:9c:3d:88:f5:65:e3:d7:d1:d6:17:56:0c:eb:73:
         be:d4:49:b9:78:be:63:33:09:62:f2:25:4b:01:53:39:15:44:
         6f:e3:8d:84:5d:0b:71:c0:c9:6c:41:0b:6e:b4:05:00:78:d3:
         56:60:77:23:fa:26:c5:3b:85:7c:55:4f:ce:9f:08:e8:ea:20:
         7c:d1:7d:1b:8f:3d:7a:71:a1:23:a4:38:b2:36:51:a4:2c:70:
         8e:e7:df:e3:72:1e:70:e6:2e:27:b2:d0:f1:f1:05:1e:db:4f:
         a5:fc:5d:a1:55:1c:b6:de:0f:cc:73:72:40:d9:9f:09:20:f4:
         79:42:e4:c4:74:2a:24:0e:f5:44:69:08:cf:7d:37:07:0a:17:
         10:ee:2f:0e:fa:f8:7f:70:0a:1f:bd:67:e7:db:b2:bc:fb:55:
         a6:64:34:fa:c2:22:ee:4d:da:45:e9:26:22:a5:59:47:01:9a:
         e4:14:fd:43:50:58:82:34:17:5a:ca:75:1d:bf:61:cc:ad:34:
         c4:f0:5c:29:26:96:56:c4:7f:fa:ec:6d:54:c6:fb:bd:67:8a:
         c3:fe:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org