Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
File:                     46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa (raw, json)
Hash identifier:          cMhS6lFgECrNNE8p4+9SRNbpkgkxk5tgWUkfhDzdwLA=
Subject key identifier:   C5:A8:AD:4E:11:06:DB:83:C6:8A:14:7C:CF:5A:1F:7F:B2:08:A3:F4
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D66906473F78FBDE022E2C80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        172.97.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:06:47:3f:78:fb:de:02:2e:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=e5cdae83-08b0-4c59-97f7-264b08ae75dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:f2:88:05:e4:c4:91:36:ef:4b:04:13:c8:
                    00:4a:37:98:3d:81:da:58:d2:2b:7a:b7:16:74:38:
                    57:8e:33:21:53:4e:6d:77:21:ec:3d:6c:ee:6e:43:
                    40:92:10:98:56:9e:02:08:6a:92:ee:78:7d:82:7a:
                    b6:28:da:38:f9:1c:74:b4:bc:8b:a8:78:77:97:28:
                    da:29:13:79:94:d7:f5:77:ee:d4:81:80:33:85:ad:
                    5f:df:21:92:3b:b8:9f:0b:e2:29:55:6c:9d:56:5b:
                    43:6d:7b:65:55:d6:a7:51:cb:21:b6:bb:34:8b:90:
                    a1:86:4d:db:72:5e:a4:7b:31:d4:01:77:96:da:45:
                    64:35:1e:44:3b:1a:60:34:3c:cb:4f:3c:2f:5c:54:
                    41:5f:23:88:a8:c6:1b:3c:ca:b8:fb:12:0c:f8:77:
                    0d:f5:df:06:82:a0:6a:eb:e3:58:74:bc:df:9f:bf:
                    bd:d3:95:6a:23:80:c0:5a:f1:c2:d5:d9:7b:88:9e:
                    d2:7f:c7:a0:ca:f8:3f:12:94:53:b3:e8:4e:b6:f4:
                    c2:98:4b:5c:6c:d2:15:26:a4:fd:16:8b:28:f9:00:
                    30:4f:2c:e7:14:96:12:f4:8a:1e:a8:65:e4:e2:3e:
                    ec:98:89:c9:0b:9d:43:ea:e6:f6:d4:7b:62:be:eb:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:AD:4E:11:06:DB:83:C6:8A:14:7C:CF:5A:1F:7F:B2:08:A3:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/46896a61-a8bd-37bd-94b6-f4e3a9039aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.97.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:3b:94:02:d3:d2:81:0e:b3:6e:87:44:cf:62:75:75:ee:24:
         5b:af:53:89:4b:a2:fd:49:c2:0b:19:c6:d8:a9:9a:3c:80:f5:
         3e:c5:dd:d4:bf:29:10:26:64:a9:8c:06:45:60:a4:58:e6:50:
         bc:69:97:b1:c4:1b:fd:d6:68:92:18:e1:31:69:3b:f0:dc:87:
         2f:62:2c:c6:27:b8:3a:95:6d:fa:e4:1e:5d:b5:20:54:d5:76:
         34:82:30:c5:d8:58:15:c4:09:a0:bd:d8:dd:3d:d2:92:11:c7:
         50:12:c1:d2:82:35:86:0c:2b:a2:60:68:e5:0f:ac:18:9a:91:
         49:ac:e9:6b:1a:6d:9c:1f:08:db:0d:dd:49:fc:4c:54:83:d1:
         c8:6c:72:7f:40:06:df:b6:99:e5:fc:2b:e8:3d:74:6d:0a:34:
         8b:3f:07:17:ef:af:7b:b5:e8:d4:fa:6e:4a:63:be:b5:d4:dd:
         5b:a4:c6:c3:09:e4:2c:13:32:64:01:4e:f6:ea:a9:da:a1:21:
         ce:58:c6:7e:d7:13:19:ba:3e:8c:af:6d:ac:fd:dc:59:a8:57:
         a0:db:97:17:5e:19:98:9f:79:ff:e0:10:83:34:d5:5d:53:96:
         19:cc:d0:42:18:b0:94:c3:b1:01:6d:f7:76:09:f2:58:5c:53:
         c2:9d:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:02:59 2024 by rpki-client on console-ams.rpki-client.org