Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/db8a7879-1feb-3b09-951c-71fc16735d65.roa
File:                     db8a7879-1feb-3b09-951c-71fc16735d65.roa (raw, json)
Hash identifier:          uHR/aUKkRIboXeCDo0R56Vvj7B8/2QF1Gkc/QFpgCEU=
Subject key identifier:   D3:09:E6:9E:B9:31:29:74:E6:65:99:95:90:9C:24:90:DA:C7:74:86
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F43285849C20A055B83143E3860A05080
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/db8a7879-1feb-3b09-951c-71fc16735d65.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     215046
IP address blocks:        172.111.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:05:5b:83:14:3e:38:60:a0:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=302d7fc2-3fce-4438-89f8-0821ac06a912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:b6:32:5f:a4:36:81:ad:38:33:36:48:02:
                    18:48:ee:11:ac:d1:e8:7e:b9:c2:6a:b6:41:13:ba:
                    11:70:dd:22:43:bb:82:43:e1:de:ce:14:5b:9d:5d:
                    66:42:c4:c3:35:61:b4:3e:3e:36:35:2c:89:18:c9:
                    58:62:b5:d5:87:06:2a:bd:f8:11:09:60:c4:be:86:
                    be:78:31:c4:e3:fe:37:a1:18:bf:35:ed:77:ce:db:
                    b8:ab:57:4c:62:b1:41:90:8b:75:0c:a2:00:2e:d1:
                    01:0a:73:ad:ca:ca:66:07:55:aa:7c:b6:22:54:ec:
                    ba:f1:bf:43:6c:79:d9:cd:f2:8e:49:69:30:b2:7e:
                    a2:80:bf:31:05:e3:78:fa:e7:ed:09:f8:d5:0e:2e:
                    e4:06:94:59:14:c6:07:ee:fb:e8:da:dc:26:17:4f:
                    f6:29:c8:e9:f4:86:24:2f:1d:f4:d0:1f:90:03:41:
                    6f:b5:ec:fe:be:23:3c:6c:13:ea:04:f6:20:44:1c:
                    af:6a:56:18:c1:f5:2e:02:01:80:15:74:9c:d6:6a:
                    27:ec:87:4b:46:37:44:98:b7:29:e4:ea:99:dd:d4:
                    ac:79:bb:70:55:6a:60:93:af:aa:d3:8a:49:b5:1b:
                    a7:27:05:83:06:f6:a2:e7:e2:8c:07:e1:f9:a6:b6:
                    cd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:09:E6:9E:B9:31:29:74:E6:65:99:95:90:9C:24:90:DA:C7:74:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/db8a7879-1feb-3b09-951c-71fc16735d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:89:54:12:39:12:65:c8:82:c6:2c:78:b8:73:67:1f:40:55:
         b9:fb:c7:5a:3b:f2:c1:2a:45:30:7f:ad:d0:0d:6e:31:b4:08:
         4b:76:17:f2:85:9c:0e:fd:58:cb:a4:d4:5c:53:7e:06:54:cf:
         f5:b0:0f:1e:d0:02:a2:ef:85:23:aa:50:45:b2:cc:2a:3d:4f:
         59:03:84:a5:13:d5:be:d0:0b:a2:c1:d3:5d:28:e4:a0:7e:4d:
         0e:a1:65:79:a0:87:0b:cf:9a:78:f1:67:f2:e0:a4:f7:5b:cf:
         ee:20:29:4e:df:bf:f5:c3:3f:44:1d:5e:69:e6:60:9e:de:79:
         d6:3a:78:3a:63:72:cf:b6:07:de:81:1b:f4:ab:41:3e:86:c5:
         c6:8a:bd:0a:14:e7:4a:52:3e:4b:4d:80:c3:56:87:73:d0:65:
         a2:f2:b3:f7:65:5e:ab:66:85:ba:0f:96:47:b5:3c:db:ce:88:
         94:76:3a:a8:77:52:ce:d0:97:fa:34:6f:05:f8:bf:71:23:8a:
         a5:a1:58:97:09:42:61:38:75:e8:3e:ab:22:a6:df:f5:14:04:
         22:d9:30:d2:17:15:2b:63:58:4d:30:44:3d:21:23:08:f1:09:
         51:ea:8c:5c:b5:de:ab:9d:bc:41:c9:75:ff:c1:53:d9:cd:cc:
         ef:7d:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:30:45 2025 by rpki-client