Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
File:                     372b639d-5c46-306f-9666-b8d03b1e82dc.roa (raw, json)
Hash identifier:          mB8/Cv9YE2cISP73GGNKMJFudrJa6hC1vuiES3H2Ao4=
Subject key identifier:   5B:51:DF:79:82:55:DD:28:6C:D2:AC:57:22:D5:9B:83:FD:B5:36:6C
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D66907AD91454645F66B2E80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        104.244.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:07:ad:91:45:46:45:f6:6b:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=eedd6519-f854-458e-9a5b-b91836c12322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:18:72:7e:07:2c:3b:8d:87:2b:4c:a8:77:
                    f1:d3:08:36:31:9b:8a:9d:9e:18:1c:1e:a1:13:1f:
                    71:cc:14:ce:52:16:29:1a:3f:d9:9f:29:59:9f:90:
                    e7:c4:67:70:e5:50:51:9f:2e:fd:6a:54:0b:84:60:
                    5c:11:49:37:3b:d1:42:7b:ed:2d:3e:23:e4:1a:f6:
                    59:ae:5e:30:cf:7f:bd:bb:45:fd:e2:fa:83:ef:ff:
                    ce:e2:2c:a5:88:41:ed:0f:58:4e:eb:b5:e6:e0:a5:
                    1e:b3:f1:96:26:ae:bf:c5:18:b2:ed:86:bc:31:c0:
                    bf:75:ba:ce:8b:fd:18:d9:7a:18:22:37:c6:0a:72:
                    71:c0:e2:ec:d5:ce:c6:e5:f8:77:04:f9:b6:32:e9:
                    b9:9b:24:c8:b5:71:06:bf:a9:0e:85:b9:b7:00:0e:
                    6e:6b:69:54:73:16:cd:5b:35:34:a9:b4:09:0c:fa:
                    03:3c:2e:4a:5b:bd:32:6e:31:fc:e8:59:08:23:58:
                    04:9b:18:68:24:1e:db:ac:80:86:65:46:78:ea:af:
                    02:e6:9c:31:69:3d:2b:c2:23:3f:bf:5c:04:4d:da:
                    3b:6e:80:3d:4e:a3:78:be:95:66:c9:9a:5b:df:b0:
                    57:46:11:b9:15:45:8c:34:f7:6f:f8:16:1f:6b:80:
                    07:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:51:DF:79:82:55:DD:28:6C:D2:AC:57:22:D5:9B:83:FD:B5:36:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/372b639d-5c46-306f-9666-b8d03b1e82dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:01:77:9d:ed:1b:70:ad:15:bc:54:60:b3:57:af:a3:f9:
         54:21:34:05:31:e3:b9:f1:64:3a:44:91:1e:35:7e:73:5c:cb:
         cc:dc:8b:da:de:33:f7:80:23:41:04:0b:a2:d1:e6:48:fc:33:
         5d:6a:fd:a0:a9:e8:06:3c:5a:9f:ed:a8:53:d5:a8:a8:f6:0e:
         99:78:97:e7:6e:1b:6e:15:7a:19:e2:9f:e9:6e:02:5f:4d:31:
         cb:1d:0f:d8:5e:8f:32:be:d0:99:03:04:40:39:36:ba:ad:0c:
         33:52:69:5c:a3:87:ee:a5:52:01:ba:e9:b3:80:70:39:46:c7:
         70:1d:e6:47:e0:cc:12:a3:5e:8d:44:e1:62:fe:01:a2:0e:c1:
         96:89:11:81:03:da:35:f4:e0:d8:81:61:45:8f:3a:60:46:23:
         77:2a:bd:5a:2d:5e:2b:17:2d:1a:8c:c2:0c:2b:3e:16:6d:4a:
         83:8a:f7:cf:73:d0:05:28:9e:94:df:88:2e:58:eb:96:a5:e3:
         13:ef:b9:d1:aa:5b:8d:81:74:75:fc:0f:c1:81:14:11:14:46:
         77:69:7c:f2:8a:08:b2:ef:73:68:71:0b:a3:c6:05:66:1a:8e:
         a2:14:bd:70:bf:8e:98:d5:09:d1:bd:95:f5:4f:30:6c:50:2f:
         e3:bb:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:02:59 2024 by rpki-client on console-ams.rpki-client.org