Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa65da3b-d0c9-3c0c-9990-eafb8a57f73d.roa
File:                     fa65da3b-d0c9-3c0c-9990-eafb8a57f73d.roa (raw, json)
Hash identifier:          XtS7eVULXrkHYkg5dr9vlLJx9Gk17AWd1cQVWi+bqko=
Subject key identifier:   8F:96:72:41:A2:F9:3B:D5:25:FB:21:A1:B1:D3:D1:4D:42:BF:20:BF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D503A4CE2BA4E17A2D3223C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa65da3b-d0c9-3c0c-9990-eafb8a57f73d.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        172.111.74.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:a4:ce:2b:a4:e1:7a:2d:32:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=ff6fbe5c-82e7-4ed6-a7d5-cbcfc3fc645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:64:a8:1e:a7:9d:10:2d:21:4b:ee:15:44:38:
                    8b:69:f2:95:78:4e:53:49:31:b6:fd:ec:30:4b:33:
                    14:6f:f4:19:77:78:9d:97:2c:b3:8d:04:ca:dc:a7:
                    24:84:9b:35:5c:29:40:20:b5:d9:ce:c0:33:c4:af:
                    40:a6:95:ac:8b:d4:c4:bb:08:83:ed:54:37:e1:98:
                    4f:36:82:a3:1d:b8:87:08:6f:17:14:75:10:8c:64:
                    e8:f0:44:10:d4:ab:03:ae:80:29:42:21:1f:d6:0f:
                    94:1d:86:77:ce:e4:90:ea:9c:35:bf:64:dd:97:89:
                    49:c7:81:29:5c:1f:f1:7e:65:c3:ef:13:0e:a5:32:
                    f1:64:32:3f:83:b5:08:cd:0b:db:47:d8:e4:7d:dd:
                    39:e4:29:38:99:11:c2:26:3e:8a:49:65:78:08:12:
                    4d:b1:0f:a0:9e:74:11:2b:02:6e:59:ea:0e:52:cd:
                    b5:7c:8f:85:78:25:92:99:8d:aa:25:a2:b1:ce:e2:
                    29:01:c5:b4:05:d0:e0:0f:52:fc:0f:c1:5b:8f:09:
                    4a:3f:f7:4b:b5:d3:d5:b7:dd:a5:9f:63:3f:6a:ad:
                    36:50:d3:ba:0e:43:c3:4d:51:61:90:e6:03:12:70:
                    43:c7:e4:8c:fe:13:64:09:ec:b0:60:01:4c:88:09:
                    31:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:96:72:41:A2:F9:3B:D5:25:FB:21:A1:B1:D3:D1:4D:42:BF:20:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fa65da3b-d0c9-3c0c-9990-eafb8a57f73d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.74.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:5e:79:2d:09:15:8e:c9:9a:29:fa:85:6b:ca:30:66:bc:
         a1:93:7b:4c:da:81:30:1e:43:16:e9:a6:c7:df:2f:88:c7:20:
         d6:b0:90:57:18:b7:68:b6:9d:63:55:8f:d7:17:e0:2d:e1:03:
         fa:ca:3a:66:22:cd:d8:98:28:53:f3:d2:2c:46:fd:4b:44:55:
         10:93:a1:0a:eb:4c:ea:c0:18:24:64:62:d1:c0:06:d7:b8:99:
         de:54:2d:55:15:31:57:1e:ac:3c:2a:30:99:26:ce:3b:4e:0e:
         23:37:e7:63:c4:1e:38:82:2d:ff:ac:4f:70:2a:e8:42:64:f4:
         c2:15:ad:c2:6a:56:20:cc:27:ec:68:15:c0:a4:4c:6b:4b:e5:
         e5:8b:1a:2e:f9:5f:85:a7:db:08:0d:35:f1:76:69:88:20:87:
         20:32:49:d0:17:cf:2d:d9:0d:c3:c6:df:f4:26:f4:8b:a6:23:
         08:47:5a:a7:e8:76:22:13:a1:df:1b:2a:79:da:c5:34:3b:40:
         be:c2:6a:df:51:bf:ab:2e:cf:cd:79:3a:f3:6c:44:54:65:d4:
         ff:ce:e8:3f:dc:6d:e7:2a:f8:5f:31:ff:c7:5a:0f:99:41:08:
         df:b8:f5:10:46:c5:ff:bd:d7:f7:e9:0e:f9:89:15:5a:13:54:
         4a:23:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 16:42:59 2024 by rpki-client on console-ams.rpki-client.org