Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8656d718-7ca2-3508-8013-708ac20f739f.roa
File:                     8656d718-7ca2-3508-8013-708ac20f739f.roa (raw, json)
Hash identifier:          EAX/DsLqnakcmm3WqRrsK6v1BmCl+HNwK/FR0cM6Uy4=
Subject key identifier:   7C:02:B4:4A:DB:89:87:8C:49:93:C1:B6:6A:7F:0F:A6:19:1B:E0:5D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844F8956380EC565E4E53501180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8656d718-7ca2-3508-8013-708ac20f739f.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     30712
IP address blocks:        184.105.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:63:80:ec:56:5e:4e:53:50:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=2a474c72-11ad-42a5-b52c-6da8cc16ece5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:b3:4c:57:ad:38:7a:fc:77:c8:c8:86:e9:
                    f7:d9:fb:a6:a4:1e:a3:9b:e4:3e:eb:09:47:13:de:
                    ab:85:36:16:a9:06:db:83:0c:20:8b:1c:c1:aa:01:
                    81:37:2d:75:5e:87:b4:7d:0d:26:4a:0f:80:d0:c3:
                    9b:7d:f2:12:2d:9a:3f:3d:f0:e5:c6:98:9f:f5:b7:
                    4a:e9:0e:26:09:62:8d:83:46:34:3c:5c:ac:47:86:
                    35:95:2c:0d:ab:20:13:e6:33:64:41:7d:7d:97:37:
                    1d:ad:cc:f1:3f:8a:20:92:b5:7b:4f:c7:31:91:07:
                    64:29:7c:2a:dd:2d:10:8a:17:a8:37:a2:a1:8c:02:
                    e0:3d:5f:30:71:8c:90:52:c1:aa:89:3c:44:11:b2:
                    b7:29:d0:ee:54:bd:0f:04:6b:b3:95:88:f5:f6:e5:
                    ef:e5:31:fc:f0:69:ec:05:4e:a4:40:72:c9:2d:78:
                    17:87:33:6c:dc:77:ae:91:79:f0:77:23:12:df:7e:
                    fe:26:79:06:35:5e:03:6e:ee:4e:c2:44:9e:78:19:
                    4b:0f:ac:84:99:58:48:71:e3:4f:70:e7:64:9e:11:
                    10:0a:1f:bb:c2:60:04:1a:36:8c:65:bb:09:c8:b7:
                    fb:dc:de:73:d9:26:90:3d:0d:f7:41:0f:9d:73:80:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:02:B4:4A:DB:89:87:8C:49:93:C1:B6:6A:7F:0F:A6:19:1B:E0:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8656d718-7ca2-3508-8013-708ac20f739f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:59:53:3c:30:40:2d:94:3d:7b:a1:5e:7e:9e:69:6f:74:
         de:9f:c2:99:cc:2e:11:80:de:6d:fa:eb:cc:bc:53:2b:3e:03:
         50:49:2f:04:c2:1a:8d:e8:68:5e:5d:39:4f:27:c2:f7:69:86:
         b8:9d:db:d3:3d:c1:63:5e:8e:c6:87:dd:5f:4e:3d:96:2d:f6:
         15:65:3d:5c:32:72:b9:66:11:fd:77:92:7a:4f:a0:9d:b2:26:
         a0:b5:9b:6d:d3:76:e0:30:72:3b:4e:95:54:24:61:76:b9:99:
         65:03:5b:97:b8:0c:e0:63:36:c0:76:67:7a:e9:60:42:ca:34:
         30:4d:fd:d2:33:6b:62:f9:2a:93:f3:12:57:59:e2:1d:d3:bc:
         eb:12:af:b1:e0:93:8e:d9:55:1b:a2:5e:76:e3:47:04:e7:ea:
         99:f1:be:5c:92:5b:27:08:7f:af:52:df:6a:40:0a:23:4f:c4:
         b8:8d:c3:0b:6a:be:2b:78:8f:10:30:50:47:8f:27:bc:c4:14:
         e0:f8:fb:78:d3:69:01:a3:bf:20:de:9a:ca:74:d5:54:e2:97:
         07:d7:6e:e8:8b:f4:84:8e:66:5b:1d:1f:ea:66:1b:14:ae:3d:
         07:b7:fc:bd:06:15:f7:71:b3:db:d3:5d:a3:8e:58:50:b2:d9:
         46:78:b1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 12:02:17 2024 by rpki-client on console-fra.rpki-client.org