Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/19666a1a-e9f7-372f-b91a-430ebf090625.roa
File:                     19666a1a-e9f7-372f-b91a-430ebf090625.roa (raw, json)
Hash identifier:          3X09NzbBINowHHPpLufpEeeFqHEKxg5iergJpiChDy8=
Subject key identifier:   13:CF:CA:3C:A8:75:B3:36:10:04:80:B1:B4:77:AC:70:3C:07:2B:AA
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584797E14855A3CF479CF2EA1E80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/19666a1a-e9f7-372f-b91a-430ebf090625.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     11290
IP address blocks:        24.75.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:48:55:a3:cf:47:9c:f2:ea:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=3605b353-dc80-4869-822b-626103222737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:47:c9:ad:56:8e:bc:90:ea:dd:34:86:0a:
                    31:3a:74:8e:bb:e9:71:e8:21:7f:b7:80:4f:45:ea:
                    b0:45:79:08:00:66:ab:90:69:4c:17:96:08:f3:4a:
                    99:33:89:da:5f:b0:6b:90:ea:0d:71:65:40:b4:67:
                    46:e8:5a:ea:d4:d5:f6:56:2b:7e:2c:b3:b9:fa:aa:
                    95:d3:e1:1a:f2:10:95:63:67:46:eb:01:21:ff:52:
                    26:4d:ee:bd:66:7e:e0:30:38:a3:08:ae:fd:e8:4b:
                    53:5e:24:8e:1b:c4:c4:10:62:5b:9d:4b:6c:25:49:
                    61:60:1c:c6:20:73:4d:8f:26:c3:37:ca:a9:1f:12:
                    e7:f1:4c:f3:20:2f:5b:c7:71:55:01:43:11:cc:3b:
                    18:ce:ce:9e:27:6c:8d:63:e2:6e:c1:e2:59:bd:e2:
                    ef:a5:47:93:6e:17:f4:78:2d:0b:4c:01:61:2f:d8:
                    da:90:01:5d:fc:2a:e7:97:bd:98:63:a4:15:e0:cd:
                    9a:3c:a3:0c:fb:ed:24:4b:f4:a0:b8:a4:da:ee:8b:
                    c7:06:23:3e:ad:08:c2:33:70:b7:a1:f9:43:bd:9f:
                    33:f9:3f:b9:f0:9e:25:dc:eb:89:7d:2c:50:78:52:
                    d3:6b:df:91:b1:6b:03:63:db:e4:a8:78:fc:7f:c3:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:CA:3C:A8:75:B3:36:10:04:80:B1:B4:77:AC:70:3C:07:2B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/19666a1a-e9f7-372f-b91a-430ebf090625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.75.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:3e:dc:d1:ba:57:72:50:62:8c:89:71:85:b5:a5:1a:39:
         b7:ba:fd:c2:14:0f:bf:95:aa:b2:f3:bb:b5:3c:8f:a7:92:9f:
         81:19:1d:ab:a4:76:16:cd:fc:59:51:b7:70:e8:e9:0c:0b:5b:
         26:6e:57:15:f5:65:92:89:a5:3c:f6:d8:08:5d:86:f1:2e:99:
         ae:27:33:11:f3:70:32:ee:c6:90:04:fb:a5:2f:fe:e5:a4:ab:
         7f:c7:a7:4d:fb:53:67:42:0c:cc:ba:ae:47:b9:e1:0d:4e:9a:
         d4:1c:91:04:ff:17:97:6f:55:8e:8e:5b:a2:f3:78:92:ec:b1:
         40:93:b0:84:8b:46:37:b5:62:50:f5:6d:01:d0:62:94:19:5b:
         54:37:6b:9f:9f:83:3c:dd:40:42:55:e1:fb:7a:05:f2:93:b8:
         d0:5f:c5:06:9b:86:e6:80:ad:3d:20:e7:40:1c:f9:2c:52:70:
         40:19:0d:9a:71:39:b1:5b:b3:19:1f:8c:d5:2e:26:24:a5:cb:
         dc:45:a1:17:e4:f6:a1:ba:f8:34:e3:34:6e:26:8d:fe:ab:d9:
         35:ed:35:82:27:57:31:96:75:0c:af:bc:f7:6f:d9:73:aa:b3:
         16:22:a4:b3:49:bf:6e:ec:2a:63:36:72:11:4a:7a:0e:41:3d:
         3c:9d:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:23 2024 by rpki-client on console-fra.rpki-client.org