Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
File:                     faee21e8-c5a4-3d46-95b6-41c129d39826.roa (raw, json)
Hash identifier:          iDyTy/sN8NE8fraGjUEWlwjEHxJNmaf2IQBU1bAb2q8=
Subject key identifier:   2C:51:8C:1B:16:2A:3B:EF:04:D4:0E:9A:91:00:E1:53:00:60:07:86
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12E3CB15FCC4B2AD74480
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        172.111.114.0/27 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2e:3c:b1:5f:cc:4b:2a:d7:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=28c61a74-59d3-4e67-b891-b9e15bf4e338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:d6:ee:c7:5a:4a:03:5a:6d:58:b0:b1:9b:
                    5a:ac:ed:37:1b:24:fc:99:d9:46:cc:b4:62:72:c2:
                    8b:be:7e:3a:2c:6f:a7:2e:10:75:c4:d4:27:a0:f4:
                    5c:80:02:57:eb:4e:0d:9d:a9:6b:bb:c8:a2:2a:b0:
                    43:2b:16:ac:2d:35:fc:1f:f0:42:04:c4:fa:fc:43:
                    cd:ae:4c:b3:06:46:71:5e:6b:ff:9b:e1:52:35:f3:
                    79:13:51:d3:bd:98:4e:76:ff:3b:a6:3c:fd:c0:bf:
                    5a:8c:be:e8:f4:ec:fe:31:98:bd:da:a0:e8:c8:27:
                    96:92:93:d9:18:45:c6:a8:10:6c:44:e8:59:a7:78:
                    87:1d:28:8a:fc:13:18:72:4e:b9:c9:9e:1f:d2:94:
                    5f:f3:26:e2:f9:90:2e:32:b4:e2:6f:f4:f9:8e:7d:
                    da:26:a2:3a:0f:be:3f:a4:98:03:be:e8:28:ca:a5:
                    ff:ae:cc:b5:a4:1f:99:23:ce:21:a7:4b:c5:ad:b3:
                    d8:ae:46:a1:ce:d9:5b:37:65:2e:5b:00:4d:62:52:
                    52:89:88:07:79:07:80:57:8a:fe:89:87:24:ca:c4:
                    0a:84:ef:92:01:b8:0e:6b:9a:a6:0f:20:56:e8:46:
                    84:39:58:24:61:7c:fe:d1:c3:c9:52:5e:36:1d:53:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:51:8C:1B:16:2A:3B:EF:04:D4:0E:9A:91:00:E1:53:00:60:07:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.114.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:8a:03:f7:ad:4d:a6:28:45:d9:86:c3:fd:06:af:be:0f:40:
         27:9d:7d:5d:dc:91:91:2d:f2:5f:15:89:be:cf:60:36:14:0c:
         1c:fb:c7:2d:fa:fb:8e:92:31:54:af:17:ea:f6:44:7e:be:da:
         c0:6a:0f:cd:68:e8:29:6d:fa:c1:8a:49:78:43:60:d2:07:04:
         58:02:fc:f9:34:38:4b:19:f1:72:ae:11:76:e6:0f:27:0e:01:
         f4:3d:c2:98:9b:c9:67:cc:0b:05:bf:cb:f6:d1:aa:8f:26:6b:
         29:99:c8:56:b9:3c:af:d7:f9:f0:b0:5b:03:50:93:e5:26:e1:
         94:67:ce:9d:27:57:f3:7f:7b:04:f8:1b:bf:6f:9f:a1:0f:57:
         ac:59:9a:10:28:d4:28:d3:53:d6:b0:7b:f1:5b:eb:de:b2:0a:
         7e:f5:30:3b:74:03:d6:a7:8c:92:19:10:7a:86:6d:1f:dc:31:
         67:ff:d6:e9:a0:58:5f:5e:44:f4:b9:2b:35:80:f2:96:53:d0:
         a7:a6:8a:79:04:d1:ee:57:fc:78:f1:5a:9a:3e:69:61:6f:b0:
         9d:28:9c:47:1c:82:8f:09:43:c6:d3:53:41:f8:2c:8a:f6:f4:
         d1:c5:c5:95:ea:9f:eb:9a:f6:87:2e:84:39:90:ab:8b:3e:63:
         a7:c8:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:33 2024 by rpki-client on console-ams.rpki-client.org