Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa
File:                     75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa (raw, json)
Hash identifier:          WLHlIM3p/DXuFiQeHHDNSJBU7pAgxRUCcxaHJB9Sap4=
Subject key identifier:   AE:80:E7:56:12:26:FD:BF:1C:33:72:53:A3:E5:1F:E7:1B:8B:C4:D4
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D6690656633DA7DFFE1C2980
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        170.249.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:06:56:63:3d:a7:df:fe:1c:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=6c8ebf0a-1d04-43c3-b2d7-4a45d9c798fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:59:16:fc:76:53:ae:8a:84:4a:91:96:79:
                    48:63:7f:31:be:c6:e2:97:79:22:5e:07:aa:80:61:
                    43:aa:e7:51:ad:bd:38:38:01:13:0b:c9:e1:3f:da:
                    c5:f2:82:22:6d:b3:93:be:c5:43:16:9d:4e:51:43:
                    23:52:4f:48:31:23:0e:3a:75:48:cb:e2:da:e0:54:
                    99:7a:7f:e5:55:92:a0:c7:30:1b:f9:5a:cc:cb:4b:
                    ae:48:06:1d:a0:33:87:1f:52:1b:56:d2:4c:ea:7a:
                    bc:78:22:ae:7c:7e:6c:99:3a:1b:be:b2:21:31:ab:
                    86:20:2a:68:04:3b:8e:a1:a0:03:b8:7f:f5:c3:e5:
                    50:76:f3:ff:1f:f3:78:00:d6:93:86:2a:f0:cc:71:
                    00:29:fb:52:49:59:5f:c8:eb:23:47:9d:15:4f:34:
                    59:d6:69:a6:6e:73:24:8b:40:c1:10:52:ec:ec:65:
                    36:41:a6:84:87:04:b2:4d:c4:33:3a:98:49:98:82:
                    0d:a9:17:9b:c3:8b:17:16:40:67:41:a8:93:a3:98:
                    40:cc:db:f5:9d:b8:2c:8a:1a:ae:06:aa:c7:9d:5f:
                    3f:f6:22:02:04:29:0e:86:a4:a9:14:6a:4b:cb:88:
                    3e:17:0d:27:d8:41:7d:54:22:34:13:52:cf:10:b6:
                    29:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:E7:56:12:26:FD:BF:1C:33:72:53:A3:E5:1F:E7:1B:8B:C4:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:c9:bf:a6:e5:75:a1:9d:a7:35:77:7a:10:dd:67:19:3c:
         e5:04:cd:19:92:7b:36:58:ff:24:3a:ec:5a:e1:3f:29:bd:b7:
         1c:f5:e1:c0:e1:17:bc:dd:38:a0:d1:2d:6f:48:0a:b1:59:3e:
         dd:77:ed:af:e8:43:43:f8:c7:6a:89:ad:de:76:f2:6f:54:0d:
         62:fd:b5:ce:ba:41:3f:7e:aa:50:f9:36:17:bc:b3:24:15:4b:
         0f:01:37:5b:e6:56:2a:d4:de:d7:4e:e5:b9:05:fe:c9:cb:2a:
         cc:75:40:88:fd:5f:82:57:04:31:84:75:24:39:fe:ba:dd:bf:
         56:b1:a8:fc:6c:e8:e7:21:75:ff:d9:16:47:63:fd:4d:5a:5a:
         9f:04:5a:fb:cb:18:d0:cb:90:10:0e:f9:5e:d3:db:8d:07:7c:
         88:08:b3:4a:9a:21:aa:f1:31:36:1d:d8:9b:2d:44:a9:4b:69:
         12:3a:96:cf:da:78:8d:67:47:1e:bf:7c:b0:c7:fd:03:d9:eb:
         28:15:e9:18:05:21:99:d4:35:9b:af:95:0e:21:15:a5:03:1a:
         53:62:08:af:71:13:3b:3f:70:12:85:7b:bb:91:81:85:9e:fe:
         c4:60:3c:7d:a2:a1:14:80:ee:47:4e:91:b1:77:e6:cb:0d:29:
         01:c0:22:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:09:46 2024 by rpki-client on console-fra.rpki-client.org