Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa
File:                     3eff0cfa-371f-32f7-9a45-34628c453640.roa (raw, json)
Hash identifier:          zh4QDHQmg30VaaERhRgLf/EoucVU99uVy/mIZewPB5k=
Subject key identifier:   D2:5A:A3:2E:C5:F2:FA:EE:C4:ED:63:46:CF:A9:A9:A5:9E:17:B2:2E
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D669077DDC990D8F53944300
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        108.171.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:07:7d:dc:99:0d:8f:53:94:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=d9f6a10c-1e8b-427f-95d9-61572e7a0bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:3f:30:29:05:7b:ef:18:f5:ef:9e:b6:00:
                    81:38:0a:86:f3:26:6c:46:d3:b3:c7:f4:e4:9c:b1:
                    dd:53:af:84:53:a7:81:0a:8e:13:05:f3:11:08:f9:
                    1c:53:ff:ce:b6:44:41:7e:3f:fa:64:9f:1c:73:da:
                    43:df:2d:05:59:71:70:ee:da:bb:f3:88:ea:fa:fe:
                    b4:f3:84:ea:1c:6b:3c:a9:e4:7c:93:21:87:57:78:
                    b4:94:f3:f2:d7:87:73:02:aa:88:c2:ce:6a:00:5d:
                    6b:c8:ca:af:4d:79:7e:0e:5b:f6:36:f3:3d:24:97:
                    04:a0:cd:10:57:bc:53:b8:f4:5b:f7:e1:06:a6:03:
                    6c:01:3d:16:82:f4:fa:16:cd:83:0f:f5:aa:e7:db:
                    cf:39:d0:cf:ff:12:70:02:1c:08:0c:d6:69:d8:f0:
                    c0:fd:85:7e:6a:a5:2d:08:e1:24:ab:76:db:47:8d:
                    7d:43:19:64:b2:74:82:c9:44:07:94:66:e8:26:2f:
                    8c:77:64:9a:9f:4c:8b:23:35:b7:01:1d:e0:65:33:
                    c7:dd:9d:7f:f1:fc:b3:74:6a:31:fc:05:12:f9:95:
                    96:76:58:65:33:1b:31:3e:6c:41:40:60:aa:9a:e9:
                    60:8a:80:70:26:f6:db:50:1e:e2:41:6c:64:f1:a1:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5A:A3:2E:C5:F2:FA:EE:C4:ED:63:46:CF:A9:A9:A5:9E:17:B2:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.171.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a1:e7:37:6e:0d:e0:f5:5a:17:68:c6:cf:00:df:05:78:ab:
         13:6b:77:13:7f:2a:2e:5c:17:ed:05:26:1f:4e:f0:13:07:31:
         b6:af:93:77:68:18:82:3a:7f:3e:20:8c:8b:3e:03:3d:79:77:
         a9:06:12:04:26:83:07:1d:4b:63:2d:dd:87:8e:c4:51:1d:f9:
         4b:7b:11:f7:69:cd:be:e0:b1:6d:35:78:8f:93:31:91:8c:9e:
         26:81:57:16:4f:49:53:d8:1b:48:2b:bb:ad:f9:b9:d8:23:c3:
         b3:27:8a:75:52:78:df:fb:e0:98:7d:77:74:15:b0:f3:10:25:
         7e:81:63:f9:0e:9a:fb:1b:95:af:b4:45:d1:3f:37:88:07:59:
         60:fe:47:bd:59:0a:5f:61:b8:73:f5:7c:8d:b3:61:1d:39:b5:
         f3:32:f5:59:91:e1:7e:9a:92:ce:1f:06:f7:7e:66:4a:de:50:
         1c:87:c5:75:4c:b7:2e:4a:33:e9:60:8e:40:dd:f9:93:2d:94:
         2a:b8:0f:f6:64:8b:e8:3f:5b:6d:57:02:94:51:c5:0d:97:0f:
         3a:67:57:7f:25:26:97:28:bd:16:4c:da:0f:35:67:3a:53:a7:
         cc:ea:fd:2e:22:da:ce:1d:9d:0c:c0:23:37:15:d9:6e:3e:29:
         75:1f:1a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:19:38 2024 by rpki-client on console-fra.rpki-client.org