Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa
File:                     cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa (raw, json)
Hash identifier:          C4Jl7vTeJZScJb9o09IHKxz1v0xhwAj93/TjBlXRLPg=
Subject key identifier:   12:52:54:E3:6A:7E:10:3E:C9:30:4C:73:B7:FD:A7:AB:EB:B0:B9:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858473095DD127FC5B6F7C1A7B300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     63949
IP address blocks:        172.235.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:dd:12:7f:c5:b6:f7:c1:a7:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=4ba704bc-1119-4e80-8750-a2bd8ee711bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:dc:e4:e2:15:cf:b0:ec:62:54:12:97:27:
                    73:36:b2:c3:cf:11:59:ee:30:c5:ed:ea:68:b9:e0:
                    94:ba:7d:46:b5:97:80:51:17:7b:06:3e:d2:e4:75:
                    4b:7a:24:9f:37:ac:44:0d:0e:cb:42:4d:19:10:85:
                    6c:73:3a:71:8d:bf:8c:44:2f:59:cd:5b:13:d3:d2:
                    89:fe:27:eb:d1:5b:ef:e2:40:31:d2:3e:23:23:2a:
                    31:31:6b:aa:74:36:4d:60:ae:f8:c6:3f:27:5a:78:
                    22:06:77:d7:b9:50:2e:fc:91:10:96:85:b6:ff:85:
                    3d:cf:f7:5c:d1:53:49:15:9b:77:fb:fa:d0:06:94:
                    af:97:95:7c:55:93:77:d8:ac:17:d2:c4:28:3c:e9:
                    85:ef:1c:e6:a8:de:f1:41:15:4e:48:51:d3:d5:c5:
                    db:81:45:ff:06:27:f2:77:d5:d0:bc:13:5c:8f:d6:
                    c5:80:2e:f9:3e:24:89:10:99:01:51:11:a8:d3:45:
                    28:a8:e4:7e:1f:2b:dc:04:13:07:8a:76:f0:59:92:
                    88:92:42:b6:4c:46:8b:06:55:e0:46:37:90:2d:9e:
                    39:8a:7b:a9:2b:97:98:2a:e8:c5:ca:cc:22:36:e4:
                    71:9b:ed:67:5c:75:74:68:a3:10:d0:75:0a:06:db:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:52:54:E3:6A:7E:10:3E:C9:30:4C:73:B7:FD:A7:AB:EB:B0:B9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:6a:34:eb:e0:f9:7d:79:cc:0f:0b:b7:35:11:09:5f:c9:
         ea:2f:97:05:fe:e4:7b:a8:70:e4:a5:6d:d2:5d:e1:ef:7d:a5:
         42:89:b3:3b:a7:ce:70:c6:1f:8f:03:3e:ff:30:4a:9a:6c:c5:
         91:bf:25:bc:ea:4e:c1:a5:03:62:b8:ac:23:eb:d4:57:db:0e:
         55:be:81:83:83:76:8a:c9:21:8b:c3:66:7a:e6:b8:f6:ca:95:
         e4:67:07:22:46:c0:cb:b8:e0:c0:3e:8c:a6:fa:a0:41:6b:b5:
         3f:8f:c8:13:31:a0:42:bb:2a:ae:27:c2:4a:a0:fe:7c:0a:45:
         6f:f9:76:a1:ca:6b:1b:5a:89:e4:4b:3c:05:e8:db:8d:2d:ab:
         91:1d:e5:df:6d:ae:db:c7:d9:9a:9f:99:46:ef:7a:4a:bb:fb:
         eb:a1:42:24:b2:e3:5d:7a:d7:77:2f:d5:2b:e9:d5:f1:57:48:
         42:b8:ee:1d:b2:37:9e:63:e1:3f:4c:87:b1:dd:02:06:e1:23:
         a9:92:b7:97:4a:ac:92:17:da:ac:64:87:75:cc:22:29:6d:79:
         4e:14:e0:e8:2e:3e:78:e3:9c:46:29:ed:85:10:aa:97:50:f2:
         97:ed:1c:6b:4c:86:e0:cc:86:18:d2:f9:00:bb:ac:2e:52:9c:
         86:96:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:32:54 2024 by rpki-client on console-ams.rpki-client.org