Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
File:                     08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json)
Hash identifier:          fmy8L0o/B/BDy89gM9rK+3N+hF6Op++lFkNpE2fZn7U=
Subject key identifier:   E6:00:4A:F3:89:F6:64:B7:EE:87:03:DC:F9:56:47:96:EA:A3:74:B9
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DE5240482BE3C0796380
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.122.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:de:52:40:48:2b:e3:c0:79:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=64d7e9e2-06ff-4eb2-a65b-52fdefc37c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:09:87:7b:71:92:58:c1:7e:e9:d5:5a:9e:
                    07:13:47:c6:51:ec:e3:34:60:d0:dd:89:d1:74:99:
                    44:78:9b:c3:0f:99:e4:93:4f:e9:9a:b9:ab:3c:91:
                    a0:f5:d7:1b:ce:c0:92:27:db:a1:58:c3:51:b7:50:
                    8d:14:9c:7a:bb:c9:fe:36:77:2e:db:7c:70:3a:46:
                    5a:c9:ed:eb:c0:4b:e4:77:ea:ce:30:96:66:b2:75:
                    f0:2e:90:3f:7b:44:99:9c:02:41:47:6f:e7:81:93:
                    ce:a8:35:19:8d:f2:35:57:d6:97:d2:ae:c8:6e:e7:
                    e2:80:a5:98:71:2d:0d:16:e0:e8:18:31:46:c1:8b:
                    e1:f5:57:5b:5f:bc:d4:19:c3:bf:d7:3a:06:91:26:
                    0b:48:c1:9f:14:84:e0:35:3f:2f:03:7c:62:a1:40:
                    38:a4:7e:64:9b:ea:e7:45:34:29:de:51:f2:a8:73:
                    c0:d2:33:28:7f:5f:0b:af:91:e1:1d:6b:c8:b1:66:
                    ec:ce:3d:0d:bd:1c:a3:3b:41:db:a1:24:8e:de:ae:
                    56:86:97:62:db:8a:ac:46:a8:59:b9:07:d3:ee:83:
                    26:37:ab:78:7c:ae:32:43:a8:8e:2e:45:2e:aa:96:
                    38:25:61:18:fb:c8:08:e3:14:5e:ad:f9:25:0a:92:
                    3a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:00:4A:F3:89:F6:64:B7:EE:87:03:DC:F9:56:47:96:EA:A3:74:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:4e:4b:b4:e6:ed:46:0d:8e:dd:9a:55:36:5c:88:ef:71:d2:
         89:f0:54:83:54:1f:82:7a:90:23:1a:f8:29:85:93:1f:e4:63:
         c4:bf:b4:37:2e:0e:c8:e6:c0:b6:09:1a:cc:59:35:86:ca:83:
         0f:eb:f2:16:92:4d:6f:9a:aa:5c:01:13:fa:f4:2c:f6:ff:a0:
         f1:03:d4:e7:9f:dc:21:1d:cd:d4:31:de:18:d8:e8:c0:b7:ab:
         b8:4b:a1:00:80:ca:93:4a:56:0b:e7:4e:93:df:56:ef:4e:97:
         dd:00:e0:95:9b:36:b5:02:f5:f7:52:e7:cb:ff:38:a1:19:e8:
         eb:b5:b4:17:c5:fa:da:8e:82:f9:7a:9d:9a:04:ad:8c:33:7e:
         4a:21:8a:dc:f8:14:ac:96:a2:18:de:e5:28:db:07:73:57:7e:
         57:a5:65:54:d8:fb:c5:9c:f4:4e:a8:88:6c:af:84:bb:3d:a0:
         d6:77:05:53:d4:61:92:6f:d4:a8:ba:80:46:df:d8:06:d3:09:
         4e:4d:ce:c0:f8:06:ab:a9:c0:99:4f:60:4b:ab:8b:7a:fb:38:
         80:0f:37:30:a4:c5:10:65:e8:9b:2f:c7:25:c1:fc:26:3f:aa:
         c4:a9:2c:fc:43:3c:07:46:69:43:76:9e:2c:93:ef:32:a5:29:
         ba:4d:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:35:20 2024 by rpki-client on console-fra.rpki-client.org