Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
File:                     32edac01-155a-3d0e-a2c1-ab944d3296fa.roa (raw, json)
Hash identifier:          2V4zgDfttuuD5pDGSstoGIZUyLQaD/pYOk51TctIdtE=
Subject key identifier:   B9:2A:47:56:23:27:1B:34:A9:2F:CC:97:EA:1B:A0:F8:E5:89:B1:C6
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D6690767A3F0B163883D8800
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        140.106.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:07:67:a3:f0:b1:63:88:3d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=712e3460-c0ac-4c73-a43f-10c8b485c9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:13:42:31:15:ff:25:c4:ca:70:54:12:a1:d6:
                    01:fb:80:38:43:d6:a1:6a:47:e5:37:5a:ec:1f:a4:
                    3e:3d:cb:46:67:6d:a4:b3:af:68:c5:83:7d:ba:f5:
                    94:15:bf:04:95:24:86:98:16:04:bf:e6:d8:f6:3d:
                    10:2e:f9:82:7a:eb:d9:59:d7:ef:9c:f1:c0:77:8c:
                    db:f6:b0:a8:b6:f1:af:95:cf:47:99:a9:7c:2e:8b:
                    bd:14:2b:7c:b9:f2:19:e4:a4:c6:12:96:64:a7:b1:
                    22:3d:32:52:82:b0:cb:a1:52:09:59:bf:4e:20:cc:
                    49:00:29:a7:01:98:57:67:e5:e5:b7:de:d7:b5:45:
                    fb:19:a8:13:a5:44:2d:4e:a2:8f:ed:c8:d9:9d:a6:
                    d3:39:c3:66:17:81:42:26:94:3d:a5:a4:36:38:6e:
                    5c:10:b4:b6:a0:ea:78:cc:08:94:6d:4c:90:0f:d3:
                    b2:47:d6:2e:6f:8f:7d:21:d0:58:e5:a6:ce:91:61:
                    a1:17:f0:83:56:70:dc:41:30:7d:b6:9a:43:58:33:
                    fd:2f:53:0b:22:96:8d:0d:77:d6:c1:89:a9:7a:71:
                    80:63:95:d4:d4:f5:da:3c:26:c7:bd:ec:ce:0c:43:
                    9a:84:d6:85:dc:b6:96:47:7d:ce:f0:87:84:25:88:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2A:47:56:23:27:1B:34:A9:2F:CC:97:EA:1B:A0:F8:E5:89:B1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:81:29:12:8d:d4:45:e8:d6:e0:8e:d5:48:5b:bd:f5:62:1f:
         b6:e8:ff:69:08:ca:a2:31:78:c7:89:f1:e9:82:18:0f:02:a2:
         44:69:9b:4d:f0:bf:c0:19:7a:06:e9:96:81:7e:6e:ed:b3:7c:
         cc:22:9d:37:58:0b:49:b2:df:a7:69:cc:88:45:12:34:3e:5d:
         16:aa:57:56:a1:61:94:2d:d9:a3:2f:84:0b:25:82:44:83:ea:
         63:9b:c0:a7:47:95:95:f0:64:22:0a:92:68:c4:68:67:b0:56:
         c2:64:ba:ed:2f:b0:4c:d2:57:4f:96:82:33:0c:6d:c4:70:ba:
         e9:ce:07:29:ee:a4:0d:4a:17:f6:c6:72:01:21:df:16:e1:80:
         96:7a:1e:39:a4:1c:73:60:a7:71:24:03:ff:62:3e:5f:d6:5d:
         b7:33:fa:a5:7d:9e:46:1e:69:2f:26:eb:04:7c:4e:6d:89:f7:
         ee:76:a9:b5:28:65:f3:9a:ab:64:9f:cd:e7:d9:5c:75:bb:ab:
         bf:93:ff:67:fb:9a:a3:f7:11:53:87:1c:5b:da:d9:01:d6:be:
         bc:d5:93:da:d0:8f:3e:23:78:ec:31:fe:41:bb:e7:53:ec:32:
         6f:f8:dc:07:e4:d9:fe:bb:78:11:cc:43:78:d2:cc:26:d4:d2:
         c0:ed:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:20 2024 by rpki-client on console-ams.rpki-client.org