Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa
File:                     65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa (raw, json)
Hash identifier:          eGfkgEia9d+0o5Rh1+WdXLHZrDepP9LT2In9VgNFLD4=
Subject key identifier:   94:E4:74:DB:B6:62:5F:DC:2F:64:56:B8:E5:F1:43:40:A9:00:1B:D3
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D39E5820924AE8B9383A7AC0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa
Signing time:             Fri 10 May 2024 13:00:36 +0000
ROA not before:           Fri 10 May 2024 13:00:36 +0000
ROA not after:            Thu 08 Aug 2024 13:00:36 +0000
asID:                     11290
IP address blocks:        209.169.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d3:9e:58:20:92:4a:e8:b9:38:3a:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 10 13:00:36 2024 GMT
            Not After : Aug  8 13:00:36 2024 GMT
        Subject: CN=04434492-bdc0-48ce-ad26-d5d744124e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:a4:23:43:95:f0:ba:96:ef:22:a8:f3:7f:
                    c6:ee:5b:7e:ca:a0:1c:88:c0:4c:a1:ac:90:ca:79:
                    d1:d3:96:4e:c1:79:8f:1e:54:b4:84:01:c8:ee:08:
                    cc:95:ec:5d:48:9f:7a:12:a0:0a:be:26:5e:3b:e0:
                    26:03:ed:cd:c3:76:3a:3a:56:cc:7d:0e:0c:f1:74:
                    8c:c1:9c:10:97:8f:4e:11:89:47:99:08:98:a6:34:
                    cf:74:a4:78:cf:c0:ea:f7:ce:9a:bf:6c:46:72:1f:
                    5c:ef:37:6b:30:53:5e:4f:1c:90:15:95:07:87:24:
                    82:6d:b0:3d:ce:56:52:fb:71:6a:6a:25:3a:f7:da:
                    0b:a5:6a:f7:6a:98:42:03:64:dc:4f:55:62:6d:a7:
                    e3:e0:aa:04:65:6a:75:9b:fc:38:3a:f0:32:05:89:
                    15:cc:19:89:a1:6d:ac:ce:47:f6:42:78:cb:d5:cc:
                    54:3e:52:c3:9f:f8:69:72:51:c6:a9:56:4d:14:d7:
                    4a:1e:3a:91:5a:bc:5a:63:32:8d:43:ba:64:69:04:
                    12:64:25:4f:85:c4:e8:64:64:b3:f7:73:2b:bd:92:
                    3d:e0:07:1a:80:1f:0d:2b:ed:f8:33:d5:05:54:44:
                    8a:1a:9e:8a:d0:7f:8a:73:4c:d4:a7:e5:2a:51:00:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:74:DB:B6:62:5F:DC:2F:64:56:B8:E5:F1:43:40:A9:00:1B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:a2:52:fa:69:ab:03:ed:d5:ad:2b:78:d9:cb:bc:67:81:
         ce:92:1d:6a:4c:eb:e0:f9:24:0c:12:82:78:55:4b:d5:b3:fa:
         93:4a:3b:ee:b3:65:e9:d3:a9:4c:8f:76:70:4f:4b:2f:16:6d:
         9a:39:ef:1e:43:6f:74:0d:ae:8b:fd:5a:d3:d6:e8:8c:e2:42:
         96:23:86:80:b1:ff:37:ea:37:6a:9b:fa:14:48:47:fc:47:7c:
         d1:7a:22:6d:2d:83:7d:14:0d:12:46:66:96:68:71:54:38:b0:
         05:93:6d:cc:55:aa:5f:4e:51:f9:15:e7:3b:7b:c1:27:ae:27:
         dd:c2:5f:49:2a:d9:3e:ec:78:c3:15:8b:ad:a6:db:48:c0:fa:
         3b:3a:f5:ff:b8:c4:ff:72:03:f5:dc:ae:6b:22:e8:6c:c7:6a:
         6c:04:af:8b:49:02:8a:c1:23:66:20:89:7b:27:76:fc:6e:ad:
         19:1d:68:0d:9f:be:f0:55:1a:25:a8:81:58:a3:41:83:d9:ed:
         ce:71:9c:9e:9c:86:05:c5:d7:81:a6:7c:7a:37:31:f1:71:56:
         7d:38:5e:3c:3a:ca:23:3f:40:75:56:01:5a:6c:a6:69:a2:c6:
         d5:85:b2:5f:ce:24:03:98:a8:99:23:75:f3:8a:b1:f8:ff:94:
         ee:c3:eb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:03:00 2024 by rpki-client on console-ams.rpki-client.org