Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa
File:                     4d58ad68-e72d-3144-8f6b-f06127b90f33.roa (raw, json)
Hash identifier:          V8Be+ok5REF4WtGQ/zx44QK7fpek7OHGAKHiEwkfPgs=
Subject key identifier:   90:4E:2D:62:71:95:95:48:20:CA:26:21:D0:45:DC:12:5E:B7:04:29
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D669074FC8F4E4752D2E7C80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        144.168.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:07:4f:c8:f4:e4:75:2d:2e:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=ac39b811-7c31-4e30-8c90-fd7b202ad48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:f0:68:ae:53:f0:bc:df:08:35:1b:68:08:
                    24:7c:57:0d:83:e7:7e:5e:78:2d:3d:6c:56:ba:bc:
                    7e:8b:ac:7a:af:2d:33:31:9e:9e:1d:dd:74:2f:e9:
                    74:43:3d:26:64:0e:2c:7d:64:51:9c:e4:db:69:65:
                    21:bf:94:69:84:51:02:a3:5a:d7:fc:b3:82:81:f3:
                    56:6d:36:b3:f3:93:c9:52:b4:cc:f3:c0:b6:f1:38:
                    bf:4b:aa:6b:d3:31:98:1e:6e:11:f4:e8:7f:4f:c7:
                    8a:69:50:09:5e:01:82:d5:e2:a5:5d:22:cb:b0:f4:
                    9c:99:13:28:f9:27:45:c8:ce:ff:82:81:fa:46:2a:
                    61:80:7b:6f:b8:c4:30:fe:58:8a:fc:30:b1:f6:38:
                    f3:11:34:c9:b4:66:31:08:c6:6f:66:ba:f2:32:93:
                    ef:26:a9:f7:9e:02:34:9c:03:7f:5d:52:4e:9c:f7:
                    ca:62:dc:db:ef:74:e7:79:cd:c4:14:b4:4f:d2:27:
                    2b:c8:1e:ee:b1:86:a0:b6:ab:86:a9:e9:24:16:41:
                    f3:71:32:e3:d3:22:e5:a3:e5:cc:dd:09:02:3e:04:
                    ae:68:3e:c7:ba:f7:13:af:97:4f:f8:3f:ef:12:26:
                    f6:86:76:f1:0b:3e:93:fb:7d:5b:e4:85:c6:e2:e1:
                    47:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:2D:62:71:95:95:48:20:CA:26:21:D0:45:DC:12:5E:B7:04:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/4d58ad68-e72d-3144-8f6b-f06127b90f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:2d:85:bf:cb:cf:80:10:57:14:f5:6e:f7:61:f4:2b:a4:
         b6:a1:27:1b:18:da:bc:ed:90:b0:a4:33:a2:4e:40:c0:89:43:
         8d:33:68:5d:74:ca:c6:49:fd:4b:57:09:85:c3:cf:89:be:cc:
         47:00:a2:66:f1:e2:50:3a:00:62:2a:1d:a0:3a:2e:fa:ba:7f:
         98:e8:7e:b7:38:a0:77:5a:5e:c4:5c:15:c9:09:b3:f3:3c:a8:
         74:0b:7d:ce:47:10:e3:8e:49:a1:82:79:38:df:2a:ec:6b:f2:
         54:87:cd:aa:39:6f:06:8c:df:59:a8:7b:53:6c:f3:63:66:96:
         d8:9b:ed:c2:d4:96:21:99:63:03:86:1d:82:a7:84:ad:6d:ad:
         c0:fc:f0:84:10:9b:ef:57:f3:d1:b4:00:4a:81:e1:11:ed:e2:
         2a:87:9a:26:d5:90:db:44:f5:bf:58:83:64:09:c9:86:af:f5:
         a0:2c:06:11:0d:85:54:d0:4d:1c:00:3e:07:8d:2a:50:b4:69:
         d7:35:d9:5b:2c:6a:06:64:02:dd:56:ce:34:15:18:29:32:48:
         9e:f2:8b:bc:ad:d7:bf:0f:12:45:2d:22:7e:f8:8a:37:0b:f8:
         75:aa:6c:0a:f8:32:a3:f2:3e:10:e7:9f:7c:1f:37:a3:b7:47:
         7a:a5:f4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:37 2024 by rpki-client on console-fra.rpki-client.org