Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
File:                     08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json)
Hash identifier:          w6wMtTyyvHXdJcRbLgvowoLcJmu37CwsTMj34F6tuKY=
Subject key identifier:   D5:71:E6:05:D5:CE:2C:A9:85:EC:75:01:75:CB:21:02:C7:3C:3C:1F
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F432858487755E533177B075FC39D86A0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     11290
IP address blocks:        24.122.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:e5:33:17:7b:07:5f:c3:9d:86:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=86fedc94-5aab-4c66-9575-3887a19f3afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:cf:f3:4f:34:3b:88:90:ab:d8:f9:07:31:
                    09:2e:0d:b9:72:99:82:02:8c:d9:37:b9:e9:fe:d8:
                    cd:cc:be:50:07:98:06:ce:9f:70:b7:3b:b5:0c:52:
                    11:db:e4:0f:b4:c0:d2:38:76:a8:50:55:0d:ff:79:
                    ed:e1:60:70:97:a4:20:29:95:f1:bb:8a:97:6c:36:
                    1c:58:6c:6f:dd:bf:e9:46:27:c7:c1:97:8f:ac:35:
                    cc:ef:a9:86:b9:52:55:f7:8f:8f:a0:85:df:a5:76:
                    57:5a:34:32:e8:01:38:39:80:66:68:07:c4:e3:6d:
                    1d:ff:07:fd:14:8e:54:16:c4:5b:85:b4:9c:c5:85:
                    db:d1:60:14:32:a9:91:97:00:f8:db:ce:0f:e2:8a:
                    cc:48:92:ff:dd:94:14:bc:18:e6:d1:20:87:2c:1a:
                    06:7f:56:61:51:99:fd:67:02:c1:61:f8:ab:f5:39:
                    a1:44:05:ce:42:07:42:dc:62:ff:38:40:9a:a7:1a:
                    d3:c0:3f:f1:c2:6c:29:1b:97:b4:82:90:2a:a2:72:
                    02:f4:2e:2c:df:6f:e7:85:63:9d:d8:d9:71:b8:55:
                    8e:9e:65:75:0d:32:5b:8e:86:32:fd:57:51:85:9a:
                    cd:40:a7:c2:0e:ed:71:88:ea:b4:46:6d:9b:15:d4:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:71:E6:05:D5:CE:2C:A9:85:EC:75:01:75:CB:21:02:C7:3C:3C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:05:93:eb:1d:be:4f:32:cc:0e:0f:2b:88:8c:1e:64:3e:1c:
         ba:97:dd:53:d3:55:2b:4a:3f:de:bb:7c:4a:6c:70:90:a3:78:
         87:3c:f6:1c:35:6f:54:75:99:c1:0b:f2:aa:8d:6d:be:30:0b:
         20:48:bd:c2:34:15:73:15:4b:ca:f6:14:5d:ad:9b:bc:e3:f4:
         a6:71:cc:40:93:2f:e8:6a:73:83:97:a4:87:79:55:fb:e5:31:
         3e:e0:91:25:ff:e7:6b:e6:e2:31:f4:81:37:91:be:62:87:1e:
         9e:a4:c8:c4:9c:74:d9:17:1f:bd:1c:a7:f5:bb:15:d9:85:e9:
         0b:e8:e0:8b:43:85:78:b8:37:42:59:da:f5:74:51:5e:95:6e:
         99:a0:d1:67:bb:ac:35:ea:d3:3b:d1:32:08:cb:13:48:1c:57:
         d7:db:f9:f9:64:a0:be:04:4e:4a:43:a1:e0:85:7d:2c:4c:15:
         c3:4d:4b:93:70:47:58:f4:7d:53:0f:b5:84:a1:d9:e7:d2:10:
         d0:a6:e4:70:44:00:93:9a:b0:af:a6:7e:ae:9b:56:af:49:54:
         78:49:c8:a3:94:ef:f6:7b:23:7e:3d:46:c4:e8:77:7a:2a:29:
         fd:af:45:e5:5a:b4:49:1a:28:f5:db:4a:bf:28:2d:80:b6:c7:
         3a:36:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:42 2025 by rpki-client