Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
File:                     0cb626ec-8048-350f-9f19-eb8f88558842.roa (raw, json)
Hash identifier:          Sz0OS9/imkJxx9d5IYfvVddiAkHoF+OPMJ/J/c8L2C0=
Subject key identifier:   09:E6:2A:D6:FB:50:88:B3:C3:A7:A7:9B:BF:29:EA:A2:8B:0C:32:64
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DD82A8B6BE31F2442780
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.138.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:dd:82:a8:b6:be:31:f2:44:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=9ecaa32c-b24d-4e40-8f9a-419372ec8fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:58:19:a6:6a:c1:58:31:bb:a7:e5:1d:9b:51:
                    cb:1e:46:06:08:7e:d5:81:bf:9d:1f:ce:f5:29:28:
                    24:d2:dd:c6:ad:6d:af:5a:28:1a:0d:c2:7c:ac:cc:
                    72:8c:fb:2d:20:8c:09:8b:db:01:80:0e:e1:9c:1b:
                    d5:92:22:c3:84:fe:5d:da:e2:98:4d:e0:3e:fa:5c:
                    3c:c0:f6:ef:44:15:db:f5:95:02:96:c4:d7:30:39:
                    e0:e2:98:e5:01:7a:09:38:2d:3f:db:40:9e:02:d6:
                    17:51:4f:08:1e:fb:7f:ef:7c:61:de:05:88:79:c5:
                    0a:0d:ac:a5:0c:b5:0f:c2:ee:91:28:f0:3e:71:84:
                    f7:f3:e6:48:33:65:4b:3e:f2:ce:33:8c:b5:45:6d:
                    cb:19:ff:8f:88:ad:1c:74:a3:9f:9f:1d:e3:d2:9f:
                    91:11:0c:c2:40:94:6e:98:6d:9e:1d:be:21:6f:2a:
                    41:23:bd:09:51:99:fc:26:d8:84:87:69:71:1f:5b:
                    fb:ee:b9:4c:ce:e8:c6:74:9d:3d:bb:90:37:96:ca:
                    75:cf:91:8c:7a:00:94:84:ec:56:cf:84:be:f3:22:
                    3e:33:c5:07:00:8f:cd:d8:1b:0c:3a:e1:29:6c:f6:
                    de:fe:7f:39:5a:71:86:b6:50:e4:49:b8:98:f3:96:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E6:2A:D6:FB:50:88:B3:C3:A7:A7:9B:BF:29:EA:A2:8B:0C:32:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/0cb626ec-8048-350f-9f19-eb8f88558842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.138.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:40:04:a3:d0:e9:12:a8:02:eb:21:b6:22:f6:a8:63:67:75:
         53:e7:29:59:a9:53:46:c3:d8:d8:30:2d:79:30:e9:76:3d:29:
         db:e5:44:46:f0:67:6d:32:e3:c7:60:be:fc:d2:8b:2d:8d:51:
         6d:98:f2:6f:c3:3e:19:89:b4:96:7a:bb:68:0c:99:c4:2c:99:
         ff:ff:b5:db:f1:be:42:dc:77:5c:4f:13:e8:29:6e:7b:8c:6d:
         56:f0:28:3c:60:5b:47:67:ca:bf:e2:40:48:e7:91:44:63:57:
         45:18:b3:92:fb:fa:0e:b6:57:27:bc:f7:ea:c8:90:c5:fa:e3:
         4b:27:5b:30:94:48:e9:cd:6a:25:09:d4:57:82:ee:4f:57:88:
         e3:ed:cf:bf:94:a3:dc:1d:48:a4:59:98:dc:f3:2f:11:31:b0:
         db:56:46:56:58:18:46:e7:de:78:f5:b2:bf:cf:3f:35:07:f4:
         35:dd:15:d3:73:51:0f:4c:2b:26:75:cc:ac:00:b5:4b:04:76:
         55:15:a3:49:b1:bd:e8:8c:44:93:e3:4b:09:b1:21:51:98:5b:
         20:13:37:2c:68:9a:43:ae:4c:2b:2a:b2:c4:61:4f:85:44:ca:
         58:b2:10:67:98:7a:c5:15:dc:ea:d3:75:11:00:b0:14:99:d7:
         21:ce:1f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:48:23 2024 by rpki-client on console-ams.rpki-client.org