Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
File:                     e12e2431-417f-3d44-b89c-e080667218a6.roa (raw, json)
Hash identifier:          3J1rF3fUZgY4JgJYPTiWFMTsw2xo0NUh7GQ8v6h7NdI=
Subject key identifier:   FA:5B:0F:5C:8A:9C:A7:4F:04:9B:8F:0D:79:35:B9:90:AD:98:3B:CB
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F43285845777DE5EA55414B5C55459E00
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     394080
IP address blocks:        172.110.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:e5:ea:55:41:4b:5c:55:45:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=c763d5ee-a5ff-4da7-9c65-f26a8b520dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:02:11:11:68:ff:76:8e:02:77:f4:dd:26:
                    45:16:4a:1f:8d:0c:87:b4:61:5e:3f:38:24:e4:16:
                    5c:53:ec:e4:c3:b5:47:be:10:ec:97:8c:40:3f:f7:
                    2d:82:59:f2:1e:a5:b5:45:52:40:91:00:54:6e:05:
                    b7:f0:50:56:eb:5e:9f:20:47:78:7e:f0:9b:6c:54:
                    f2:32:46:c2:34:c4:05:2e:a2:03:ff:e4:b5:ac:cc:
                    34:d4:91:56:79:48:04:b6:24:2a:8c:3c:92:09:bd:
                    27:58:52:51:fd:9e:1f:ef:29:47:a6:4f:05:4a:ba:
                    be:82:3e:18:26:32:19:90:81:03:c1:4b:b6:b4:5f:
                    fc:73:32:d8:3b:19:5e:80:52:b2:ab:1d:25:7e:6a:
                    3c:df:d3:07:91:f9:bb:27:6f:bd:b8:e3:ce:36:b6:
                    37:ac:fd:e0:1a:77:6d:d6:e5:8f:eb:4f:cc:f5:15:
                    4d:83:7b:39:e4:fe:df:fd:4c:f0:60:23:27:e5:2a:
                    a1:b7:78:9e:41:71:0b:d7:fe:30:76:2c:5e:45:31:
                    f8:84:a2:06:75:e9:3d:62:34:f0:65:19:b2:9e:05:
                    07:23:03:a4:0d:4b:42:32:57:46:9e:6a:d8:dc:80:
                    79:a4:36:c4:ce:91:1e:d4:e5:ed:9d:04:60:c7:0f:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5B:0F:5C:8A:9C:A7:4F:04:9B:8F:0D:79:35:B9:90:AD:98:3B:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2d:48:8a:aa:84:fd:59:10:87:0c:b6:9b:f1:40:82:ca:1f:
         d3:3b:13:69:21:16:38:57:fe:5e:cd:0f:c6:51:f1:d4:d7:c3:
         a1:a0:a7:93:83:d4:71:47:c7:86:f5:d2:81:26:28:9f:e3:53:
         62:ae:d4:d1:40:cf:2a:51:0e:43:bf:ee:7c:bd:31:06:d5:66:
         3a:fd:ff:4e:86:15:72:c6:8c:6c:9b:24:73:5c:99:6d:70:79:
         b1:2d:44:65:26:5d:30:98:2d:5e:5a:7f:e3:da:72:66:9d:db:
         8a:12:fe:45:58:23:ba:09:8f:11:cf:d7:88:18:7b:ed:c0:9c:
         63:0e:ae:bb:49:cb:46:6a:7a:b9:52:c6:d8:83:7d:d5:51:ab:
         b2:9e:65:94:21:f9:b9:6a:d0:f2:e5:68:f4:ab:5a:1c:2c:1c:
         c3:7d:e5:cd:17:1b:f6:e6:ea:6f:aa:43:dc:bb:85:ea:ec:2e:
         da:2b:7e:bd:4b:13:55:36:bb:96:87:1f:90:b0:c3:b8:33:9e:
         7d:e2:b9:59:aa:35:55:f1:90:38:66:89:ec:34:35:04:05:07:
         34:82:1b:29:fd:32:b2:4f:9c:6b:b6:d6:c9:61:da:74:e8:38:
         e4:85:57:3f:31:a5:7a:ad:d2:d7:8b:3f:95:8e:77:8c:15:15:
         6f:7f:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:25 2024 by rpki-client on console-ams.rpki-client.org