Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
File:                     32edac01-155a-3d0e-a2c1-ab944d3296fa.roa (raw, json)
Hash identifier:          SO2PK61QDKMh8sog3gfcawHPSGp7nzIOrD5SlzChXQY=
Subject key identifier:   E5:92:DA:FA:6F:4D:F2:95:41:B2:E6:D5:32:2B:57:4E:D5:58:39:86
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285848748B209D68807D2E827F9AC4
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        140.106.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:20:9d:68:80:7d:2e:82:7f:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=c412a492-c017-44a5-811a-766ad0de06f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:41:c2:34:cb:ec:b7:82:c6:98:20:5f:70:
                    42:a3:28:9e:95:f2:a1:47:15:39:04:77:12:71:8d:
                    0d:7e:03:2e:65:03:89:e0:12:ca:bc:e1:b9:cb:7a:
                    51:4b:ee:d9:19:97:f1:ab:ea:48:f4:c2:18:c3:31:
                    83:69:9a:86:c8:cd:9d:65:f4:fb:a8:91:fd:ff:5b:
                    10:6f:09:51:5d:61:bb:00:f5:be:6d:58:20:d3:e0:
                    43:07:75:c4:51:b6:4f:74:91:6a:3b:3b:5a:eb:0a:
                    4e:d7:1e:5b:20:8d:b8:14:9d:67:39:9e:85:be:ca:
                    c1:8a:5c:f2:75:17:34:95:86:6a:dd:c6:a5:c9:74:
                    be:f4:37:4e:c4:bb:ec:bc:4a:3b:94:89:ef:7c:5f:
                    5d:2b:d0:4a:69:ac:cf:5c:87:8a:d3:47:b2:20:a6:
                    7f:2c:2f:e8:b1:e0:82:5e:0f:95:d8:73:86:2d:56:
                    84:7d:f0:53:8d:b4:a4:a1:7c:74:06:9e:c0:5c:db:
                    4a:51:c5:a6:70:78:04:3a:be:60:5c:2a:20:c0:0a:
                    65:e5:f6:98:d1:bd:9f:3a:d3:f7:c2:a4:74:04:b6:
                    2a:19:70:71:0f:c9:ef:bf:ac:5f:94:ef:76:2c:50:
                    e7:7a:44:34:43:03:f4:be:d5:40:52:d9:d4:85:06:
                    33:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:DA:FA:6F:4D:F2:95:41:B2:E6:D5:32:2B:57:4E:D5:58:39:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/32edac01-155a-3d0e-a2c1-ab944d3296fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.106.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:cf:42:ba:2e:c7:81:60:d8:8e:6c:61:95:b5:0a:db:5f:
         b9:9e:c2:59:66:bd:e7:af:93:28:c3:ed:77:49:9c:c8:1d:46:
         7b:f4:13:8e:93:8f:e5:4d:90:30:46:14:91:de:92:f9:18:7b:
         35:c9:7d:b8:df:65:7c:7a:33:ae:f8:7a:db:4a:9d:d1:b0:c7:
         6f:3e:8f:6a:aa:b5:ad:ac:39:f4:25:36:60:ba:f3:51:9b:eb:
         7d:5a:71:75:13:44:f9:ab:fb:13:a9:8f:79:38:ce:8a:0d:ad:
         14:be:ce:28:42:b9:15:58:f7:92:fa:af:6d:e9:5e:81:fe:ea:
         67:83:43:a1:62:f0:af:a0:5a:d6:32:e9:84:c4:37:14:33:22:
         be:a5:80:9b:68:d6:b6:c9:75:50:ef:95:99:99:54:57:ec:ec:
         18:53:2f:a9:30:2e:02:b0:5d:59:96:c0:92:cc:a1:ef:b2:53:
         8a:7d:61:ce:47:aa:61:a1:a2:a7:1e:0c:17:d7:48:32:fe:70:
         d2:b4:06:03:0c:64:fc:80:43:27:fd:5d:90:89:75:8f:3c:63:
         bc:e4:3d:7f:88:c4:92:03:0c:59:4d:19:41:0b:e9:56:5c:93:
         cf:20:1e:17:34:0b:38:99:fb:e9:1f:88:50:4a:41:6b:0b:d0:
         bd:3c:9d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:27 2025 by rpki-client