Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
File:                     faee21e8-c5a4-3d46-95b6-41c129d39826.roa (raw, json)
Hash identifier:          tCzBcOrtKWYA/NSJs/LvPcnC8E0En0Wd860VuWI2K2I=
Subject key identifier:   2E:34:D8:ED:6D:71:F2:42:1D:5A:0B:42:C2:69:7E:F2:AA:B9:FB:45
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42A92D12FC92B137DAB40
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        172.111.114.0/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2a:92:d1:2f:c9:2b:13:7d:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=142477b4-b84c-4f60-828f-8d44fc0b7439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:b4:1d:dd:2e:4d:26:58:75:51:4e:a3:04:
                    73:22:ce:8c:97:e0:49:d7:b3:5e:3d:9f:60:85:5c:
                    90:81:0e:3e:c8:48:6a:04:7d:d8:53:f3:5d:b4:e5:
                    ec:0c:f9:b5:06:3d:6b:b5:37:e4:2d:3f:ba:dc:5d:
                    b5:f7:fb:94:63:36:93:28:cd:97:b0:67:52:06:62:
                    60:d8:a3:0a:bc:4a:5f:9e:3f:2e:ce:7e:f8:28:28:
                    70:0d:7a:26:ab:e7:54:0d:84:64:1a:0e:04:7f:8a:
                    61:7a:7d:d6:dd:bf:62:0e:c6:23:10:4c:1f:cd:1f:
                    ac:cb:08:14:ad:f4:df:17:b1:f2:51:ef:be:03:4a:
                    48:73:74:f9:64:dc:ca:58:98:af:d9:50:6f:6d:93:
                    84:0b:e8:cd:d5:3d:ac:06:c7:9a:2d:c3:46:1c:ba:
                    f1:13:24:9f:ea:d4:16:1f:64:82:1e:98:94:17:f6:
                    59:bc:23:45:c8:b8:79:09:b2:c6:99:29:dd:74:aa:
                    21:61:2f:f9:9f:a9:20:7b:f2:16:06:08:1e:1a:a3:
                    a8:39:de:9f:2a:de:b4:17:ed:70:14:ab:c2:14:97:
                    3b:84:56:fa:23:89:c8:5f:ef:ee:ed:c0:e2:6d:66:
                    14:a8:39:02:0b:1d:64:e7:fa:a2:75:2d:93:09:b9:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:D8:ED:6D:71:F2:42:1D:5A:0B:42:C2:69:7E:F2:AA:B9:FB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/faee21e8-c5a4-3d46-95b6-41c129d39826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.114.0/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:ba:25:9e:38:cf:db:76:cd:76:8c:86:89:14:45:55:5a:
         f3:44:49:33:db:14:b3:d3:01:78:b6:a2:d9:b4:7f:64:dc:87:
         86:0b:28:30:db:60:14:ab:df:1a:68:27:8b:f1:dc:d0:ff:ca:
         f3:cb:21:2a:d8:59:09:74:f1:74:86:b8:76:23:bc:f5:03:8d:
         d1:76:d7:00:f8:f8:2b:fd:c4:f4:be:96:6c:9d:e9:15:b2:a2:
         11:55:b3:74:09:2a:d8:14:08:25:fc:b2:a4:bb:7c:31:e9:2a:
         bc:e5:d0:1a:33:66:ce:fe:ae:5c:b3:08:bf:c1:df:50:ba:21:
         7d:bf:16:e4:c1:2a:8d:fd:6b:bd:c3:ff:16:c9:41:42:d6:1e:
         93:15:4b:54:d9:3d:f8:8d:60:ec:21:e6:fa:a7:e7:5d:4e:1b:
         6f:f6:3f:63:06:17:29:1e:af:93:b3:f1:3b:ac:2b:73:3f:04:
         9b:75:10:d7:11:80:a2:ce:b4:12:2f:f2:d8:e9:de:92:55:22:
         af:74:23:03:6b:b5:b2:c3:1e:d9:c0:3f:33:41:99:ae:bd:35:
         6a:16:6d:ea:a9:45:3d:15:bb:ce:b7:8f:dc:86:7a:48:b0:6c:
         5f:af:7a:72:a2:e2:ab:e4:e2:e5:14:71:0b:42:54:49:78:ab:
         b4:b1:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:56:00 2025 by rpki-client