Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
File:                     1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa (raw, json)
Hash identifier:          bnw2KjO0OPB21FhVBJ96PUPLAFzoDh7+g5uloTGQwJc=
Subject key identifier:   A4:41:E1:AD:40:22:74:67:A7:79:AF:56:48:7B:C9:27:98:FD:B5:EB
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D669070F3B9CD14D599C84A0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        162.212.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:07:0f:3b:9c:d1:4d:59:9c:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=82758372-7027-4da7-8b83-cbdf91950e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:b2:61:8b:e4:20:05:4d:2c:94:02:84:39:
                    04:89:7f:fe:c9:d6:30:41:d3:e0:2d:96:b1:f2:1d:
                    6e:e2:e4:a2:9f:b0:9c:c4:a8:28:56:e0:21:af:c0:
                    5e:fc:1b:36:51:0e:65:67:5f:c2:58:92:57:b0:f7:
                    17:8b:d2:67:a7:42:b7:80:ca:7d:23:89:cc:60:37:
                    45:e4:1a:b0:9d:bf:24:7e:37:f6:af:8d:08:55:aa:
                    27:4d:b1:b2:55:aa:52:e8:ce:55:6a:a8:34:91:76:
                    d7:a8:d2:ee:7f:7e:f5:97:9c:25:7b:32:5f:9b:a3:
                    c1:98:74:74:1f:db:ed:01:ee:74:7c:48:9f:b8:3f:
                    6f:9a:60:51:0b:f4:d5:ee:a3:3c:53:16:69:bc:c5:
                    bc:27:f2:c0:d4:48:c7:5d:f9:a6:34:0a:2f:61:9c:
                    d8:43:cf:89:c7:18:46:dc:fc:d6:f4:f4:9f:8f:43:
                    17:87:61:d9:91:20:2c:58:4a:5d:95:e8:6a:5b:af:
                    96:8d:a6:6e:f8:ef:ce:ca:14:8d:c0:99:41:cb:9f:
                    96:49:92:83:c5:bb:98:97:6c:44:e2:8a:32:53:9a:
                    19:ba:38:56:87:e7:3e:e7:d6:24:c3:b8:1a:79:9e:
                    44:f8:9d:8c:45:96:06:e1:ca:46:43:77:30:d3:28:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:E1:AD:40:22:74:67:A7:79:AF:56:48:7B:C9:27:98:FD:B5:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ab:a5:9d:35:09:93:ca:c7:cd:8d:62:5d:27:ae:76:80:fa:
         28:ab:18:3e:7b:f7:c3:01:96:81:87:8f:0d:2a:6f:38:18:4f:
         46:c1:d5:ed:1b:e1:ba:39:1e:ab:e7:60:b0:14:d1:52:e2:0f:
         3a:d1:74:02:0f:23:1e:a5:6b:c1:92:55:99:28:6f:14:b6:21:
         e6:19:0f:2b:5f:37:b9:4d:bd:29:07:0a:0f:15:9c:fc:1b:a8:
         f1:81:9f:58:6d:47:cd:13:ef:51:54:3d:3d:8a:b8:dc:13:71:
         c4:4e:e9:b4:7e:8a:f0:24:2b:b7:9a:94:96:1b:4c:e2:e5:d1:
         e9:0e:34:cb:b9:c0:b0:85:4d:74:c0:30:73:ab:34:8b:54:57:
         b8:64:59:b7:12:dd:65:b9:46:a1:11:88:57:14:16:2d:0a:fa:
         99:cf:c5:d0:22:e7:87:4d:2f:f8:42:26:19:54:e2:38:b5:15:
         55:9a:6a:6e:e5:2b:fb:3c:78:92:97:02:85:14:5e:4d:15:b9:
         54:3e:95:55:c2:b2:9f:f7:ef:eb:c5:4c:1c:08:9e:f2:6e:8c:
         e1:8d:cd:b5:5d:6d:30:aa:ba:b4:66:e2:7f:2a:c4:d6:17:e9:
         24:66:5b:b9:e5:52:67:ed:d1:13:4d:ed:0f:50:41:e6:29:43:
         dc:f3:12:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:09:45 2024 by rpki-client on console-fra.rpki-client.org