Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
File:                     1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa (raw, json)
Hash identifier:          lP+eyNRzA635/nLN4gKYC1p2524uq+/Tzra3YnsSGbE=
Subject key identifier:   1E:E6:7A:1A:09:12:BF:0B:51:88:83:71:AE:4E:C5:0F:02:EA:46:84
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584795169157256B033A6CBD2360
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        162.212.8.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:91:57:25:6b:03:3a:6c:bd:23:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=1a352abe-746c-4f3b-8642-2b154a84c121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:81:31:e3:c2:b4:fb:ec:fd:19:81:3f:8f:
                    7a:c3:ee:34:1b:be:b1:c9:56:cf:81:45:76:13:d3:
                    fb:2d:9f:cc:ca:ff:94:e4:1c:47:01:3f:67:bb:74:
                    f3:7f:1b:3d:70:39:32:15:c0:b8:8f:2f:cc:a1:0d:
                    83:36:0c:e5:5d:34:5d:3c:43:69:54:29:7e:87:ad:
                    89:10:7b:24:b8:a4:ec:51:53:ac:b3:17:53:fe:42:
                    1b:70:c0:97:08:59:24:f8:2c:82:f2:90:f6:00:4d:
                    03:93:26:f9:cc:3a:d1:b5:74:09:a1:36:84:0c:89:
                    43:48:43:fc:ac:43:3e:08:b5:96:16:a1:f1:1a:39:
                    9a:2b:a1:dc:e2:c0:93:39:be:c3:87:ed:7f:01:28:
                    48:a5:1b:4e:42:57:b9:48:3a:e0:1d:17:83:12:19:
                    8b:40:95:44:51:57:6f:4b:c7:16:37:46:69:2b:fd:
                    77:7e:03:06:ab:1a:b0:0e:c7:c5:10:2e:e9:37:1c:
                    0e:55:46:2e:c4:eb:fb:1d:03:08:f7:8a:1d:2f:b4:
                    0e:03:2d:09:6a:fe:37:6f:2b:c5:73:e5:82:40:27:
                    49:97:55:d0:5e:40:f8:7f:33:54:f6:db:24:a9:5a:
                    6e:b5:56:0f:32:4a:76:08:4c:bf:84:fd:67:a5:9d:
                    37:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E6:7A:1A:09:12:BF:0B:51:88:83:71:AE:4E:C5:0F:02:EA:46:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:aa:f5:bb:09:d6:84:38:53:03:e2:08:c4:db:ce:20:4e:
         02:2a:5f:b1:7e:35:3a:22:3b:6b:0c:a5:fb:df:da:cc:80:dd:
         40:32:49:c3:04:d2:0d:d8:3a:bc:07:13:48:28:ad:b8:92:39:
         cc:8e:fc:fe:fb:bc:95:89:3e:18:b3:58:6c:b1:84:14:28:31:
         3c:a9:1b:ef:be:8d:b1:81:a6:42:9f:da:b2:d9:a4:8b:0e:01:
         81:20:39:e9:db:b6:e8:68:45:f2:83:6f:42:06:12:3d:75:f4:
         cd:b9:3b:62:94:69:a1:56:cc:69:5f:42:4e:f6:01:ce:85:04:
         d6:25:b1:24:d5:9f:82:5d:07:05:23:1b:65:45:45:b0:02:f3:
         c5:f2:21:b8:8b:30:61:bc:5b:c1:e2:ac:95:d1:20:38:8c:b9:
         27:b0:a0:c0:cd:df:d0:f6:18:5e:db:bf:0a:37:69:6b:8d:50:
         4d:90:0d:8a:c8:8a:0d:51:f3:7f:ca:64:e3:98:db:87:6a:f2:
         1f:d2:e8:eb:c9:eb:dd:8f:35:3d:e0:85:8e:71:54:85:11:c8:
         7f:8a:85:61:f7:27:40:bf:51:76:e4:7e:7c:14:c7:fa:22:51:
         67:95:ff:4e:ad:67:1c:a0:d9:27:df:af:a7:25:4b:6b:1d:cc:
         1a:ca:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:12 2024 by rpki-client on console-ams.rpki-client.org