Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/77f30099-01f8-399b-8fde-461106970b44.roa
File:                     77f30099-01f8-399b-8fde-461106970b44.roa (raw, json)
Hash identifier:          pIF52l3YGIAEgjg3uABOiKfN//Sf8thy/75uhSDRlJ0=
Subject key identifier:   61:B4:A1:B6:FB:AB:A8:A7:1D:F4:E5:14:83:D8:F7:BD:30:A5:3D:20
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584871C07BC0F606F577F60FBDE0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/77f30099-01f8-399b-8fde-461106970b44.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        205.237.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:7b:c0:f6:06:f5:77:f6:0f:bd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=284e991b-61b2-4be2-b8dc-44e08b8536dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:a0:1b:f1:96:c2:0b:b4:5e:c5:34:9f:1b:
                    29:83:3a:6f:bb:7f:34:b9:b9:24:4b:8a:2c:07:e3:
                    6d:9b:fe:84:43:32:3f:61:f7:18:05:fd:36:21:b8:
                    27:c0:47:18:09:4d:f1:79:6d:c7:12:f3:5b:17:1b:
                    fe:31:42:b0:e9:33:ab:e2:0e:d8:a2:e7:84:db:fe:
                    c6:a3:7c:33:09:00:a9:c7:39:aa:b8:29:e3:c6:83:
                    df:79:ab:97:00:b1:a8:20:65:f5:f8:7a:96:8f:15:
                    86:8c:cf:07:ea:c0:da:f1:54:a4:42:ef:64:07:62:
                    6b:05:96:01:67:58:c4:82:52:98:43:7b:22:60:aa:
                    2d:15:36:ae:1e:6c:09:fc:0c:62:f5:1b:dd:53:dd:
                    56:9b:d3:d7:1c:72:a8:8d:f2:f6:cc:a1:53:30:92:
                    ac:ea:8f:b3:d2:c6:a2:57:a1:1e:5a:60:03:72:07:
                    d7:1e:e8:45:cb:64:89:8d:eb:92:f5:c7:22:b9:68:
                    f8:cb:f4:75:e1:2c:0a:4d:a2:44:6d:42:fd:34:29:
                    44:be:4b:cf:51:f8:e7:f7:bd:9d:8a:46:f4:6c:86:
                    dc:59:b7:ee:df:7a:f9:fe:33:a8:6f:05:c1:eb:9c:
                    72:b2:a1:78:d1:cf:be:7e:cc:bd:c1:7f:88:46:d7:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:A1:B6:FB:AB:A8:A7:1D:F4:E5:14:83:D8:F7:BD:30:A5:3D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/77f30099-01f8-399b-8fde-461106970b44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:3f:be:5b:85:5d:80:52:ad:c9:27:d3:b0:4e:04:bd:83:
         00:92:38:7b:50:99:d9:2e:ae:ac:9a:01:26:72:56:ae:6c:d6:
         d6:a9:32:b6:57:00:c5:eb:4c:f4:4e:2d:0e:fa:ab:45:0d:0b:
         6b:97:6c:c5:be:6b:67:d2:95:a1:1c:42:f4:7e:c9:f3:c5:0c:
         16:1a:06:74:75:05:43:95:75:da:fe:18:5e:ac:b7:a9:40:e7:
         c3:04:6f:68:f4:00:d7:c3:84:c7:09:cc:f5:d7:25:c7:e9:54:
         d6:8b:96:85:6f:f4:2b:73:aa:ac:bd:e9:ba:20:38:d2:77:45:
         53:9d:a6:8b:34:b5:be:fa:9b:37:42:b2:86:4c:3a:f7:fd:34:
         3a:76:f9:47:b9:28:25:ae:2c:48:1e:94:74:86:f8:fa:29:55:
         a6:b0:3a:ce:f7:2c:42:10:f4:3a:19:62:b5:fc:1c:b7:ec:cb:
         50:0a:4d:88:3d:89:d7:de:90:1b:6e:bd:76:80:79:4b:15:8c:
         07:19:9e:5a:6e:45:d0:4f:92:47:26:bf:45:ac:0b:b6:72:e1:
         36:ad:20:be:3c:1d:47:06:4c:d6:fd:e1:20:6b:a0:4c:53:5a:
         19:a5:5e:6f:fc:b0:71:ed:c7:e1:5f:b0:f7:9c:11:70:58:cf:
         07:45:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:06 2025 by rpki-client