Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/0890b6b6-de12-3d38-9902-63eb89db2e14.roa
File:                     0890b6b6-de12-3d38-9902-63eb89db2e14.roa (raw, json)
Hash identifier:          txqVFwCcQv1t9WiVqQ+mSz9bEHPd0WrqdyxrFKW94eY=
Subject key identifier:   2E:4A:B0:D4:C4:40:16:32:75:EA:75:3E:23:51:41:E3:0B:1A:26:32
Certificate issuer:       /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial:       010D0C9F4328584586D86964CB966D1446C44840
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/0890b6b6-de12-3d38-9902-63eb89db2e14.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     16276
IP address blocks:        40.160.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:69:64:cb:96:6d:14:46:c4:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=b1358c8e-ed95-4eb6-afde-ef88dd65868f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:61:d3:7f:88:05:6d:e4:e3:5f:ee:fe:d5:
                    15:5b:fd:6b:91:a7:4e:c9:a1:2a:36:39:49:ff:7d:
                    af:1e:16:8c:a6:97:00:9b:e7:4e:01:c3:de:4c:9a:
                    1f:ea:0c:6d:4c:80:a9:ec:25:4a:7e:c4:54:5f:b7:
                    e0:d8:8d:a5:9c:f8:50:dc:e6:87:50:e8:55:93:8d:
                    72:c5:29:9c:5f:8f:0b:3f:d9:61:6c:64:cf:d0:0e:
                    0d:59:f7:05:6f:b0:f0:b7:89:65:34:b5:ea:1b:dc:
                    51:3f:a4:94:7b:4e:c5:35:ca:ac:2a:18:ce:7f:2e:
                    78:da:cf:25:37:71:28:b6:f5:6f:37:fd:4c:67:d5:
                    9f:97:dc:8b:8a:15:3f:d6:c5:5e:7e:02:39:a8:75:
                    8c:4f:0d:12:0b:13:cc:64:46:95:b1:d3:6d:f4:53:
                    cc:aa:64:e3:24:36:88:1d:d2:48:18:a8:46:55:32:
                    50:19:90:53:5e:bd:d7:e1:2d:95:fc:83:45:ff:b2:
                    b5:77:18:b8:ef:77:ac:8e:ca:91:0e:1e:c1:b7:4b:
                    7e:13:aa:5e:4c:8e:85:51:61:9d:73:ac:90:3d:29:
                    1d:d8:96:f0:97:e9:50:93:94:a6:f2:7f:5f:80:50:
                    43:22:66:4e:30:28:4d:24:52:e0:5c:69:8c:d3:30:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:B0:D4:C4:40:16:32:75:EA:75:3E:23:51:41:E3:0B:1A:26:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/0890b6b6-de12-3d38-9902-63eb89db2e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl

            X509v3 Authority Key Identifier:
                keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.160.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:13:ae:26:21:c3:75:1c:10:0c:ce:b3:a8:b5:9d:fc:e9:
         30:fe:8b:41:1b:54:dd:5e:21:bd:d9:1d:b7:11:c2:a4:20:69:
         83:99:5d:fd:f6:cd:13:82:8d:f2:e9:44:e5:30:f2:27:ae:36:
         4a:a3:9c:21:5c:f0:f2:ec:e1:a6:75:40:dc:d0:98:08:92:6c:
         85:95:5e:c1:9c:bf:d7:6f:b4:bd:91:70:09:f7:e2:a7:98:a5:
         89:ec:46:6a:51:1e:52:30:0c:23:3d:a8:ab:a8:c6:e3:c6:9e:
         a5:4f:5f:71:bb:1c:bc:53:27:ee:5c:fd:e5:77:34:12:a0:de:
         54:8f:47:f4:56:81:49:d4:53:10:2d:8a:fb:18:a9:c0:c6:bb:
         59:4a:ca:5a:bc:b8:bb:8d:8b:49:6a:32:3e:b2:56:c8:0a:6b:
         e7:2b:44:dd:e2:d9:bc:ae:91:f5:a2:b5:82:e1:05:54:4e:ff:
         1d:00:07:ee:a1:28:a1:60:d6:35:69:00:51:16:c7:73:bf:67:
         0e:a7:48:20:91:e0:d3:4a:3b:43:94:71:df:bf:23:75:b0:b3:
         5f:db:9b:71:cd:22:21:fa:98:57:a2:74:b0:2f:cc:ae:3f:7e:
         6c:3c:47:51:91:57:16:ee:54:8b:93:9a:98:36:f2:16:ec:30:
         87:02:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:07:17 2024 by rpki-client on console-ams.rpki-client.org