Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa
File:                     823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa (raw, json)
Hash identifier:          0x/qUMXuJYHc5ezwlgw++BW59PIZIMn0aeC8Hb4u210=
Subject key identifier:   59:9C:74:A9:8D:D7:84:7A:BF:BB:1C:09:3E:51:EF:AA:AD:CB:5D:CF
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F432858479516914548A6CA8AB31C8300
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        162.217.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:91:45:48:a6:ca:8a:b3:1c:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=c22fc994-1742-4b1a-a5b4-9afba3ad37fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8d:b1:53:ae:3d:38:28:67:d3:0d:ed:25:6b:
                    de:22:9e:45:04:e6:59:e7:7d:db:ff:87:c2:e1:a0:
                    81:b7:aa:70:12:c0:32:ad:5a:89:ba:aa:88:8c:0b:
                    bc:35:72:3a:8a:64:81:70:4e:0f:0c:6d:38:10:bb:
                    ab:90:a8:c5:38:1a:bd:90:cb:72:fa:67:25:b2:c9:
                    6a:fd:5f:a4:ed:db:3f:f5:3e:dd:b1:f4:7b:64:09:
                    2a:47:c2:5b:57:97:69:94:23:79:cb:f5:19:ca:ef:
                    8d:96:d4:d3:9b:09:67:25:07:5c:94:36:f2:40:5f:
                    c8:3e:0e:94:2d:0b:26:f6:73:81:4c:26:50:d3:4d:
                    4c:8c:9e:84:76:2c:83:7a:96:e0:f0:cd:6a:f9:96:
                    08:54:79:6b:a0:4e:1b:a9:b5:ec:c1:a5:e4:df:a1:
                    e8:bc:f0:4f:9c:db:3c:e1:cc:f3:88:47:ea:09:62:
                    e9:55:50:54:0f:df:c4:8d:95:88:3e:25:92:98:ef:
                    7c:b4:f3:9f:ce:4f:6b:91:4d:e7:2b:97:16:44:d7:
                    44:35:59:9d:ab:f3:f3:ec:61:15:2b:91:64:64:52:
                    bc:5a:d6:4a:ee:c8:a6:14:ae:0a:7f:e6:4d:4a:c5:
                    71:23:01:a6:c8:47:46:b8:d5:5b:a0:66:89:be:1a:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:74:A9:8D:D7:84:7A:BF:BB:1C:09:3E:51:EF:AA:AD:CB:5D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:6d:49:b0:d8:d4:4d:ce:5f:82:d9:bd:7e:f4:28:aa:1a:
         ac:d1:98:ff:e8:72:2d:17:1c:a0:05:b2:4c:f9:d9:ba:ee:8b:
         13:df:ef:54:a3:de:1c:46:74:6c:b1:7d:fc:ed:1a:24:ce:ed:
         b9:71:46:4a:a5:0b:e2:4c:92:4c:51:ca:11:db:eb:7d:9a:1b:
         b6:92:05:67:f8:3b:7c:14:6c:30:93:1c:21:5b:70:68:ec:06:
         88:75:03:41:5c:3b:ec:ac:ba:bd:6d:e9:8a:19:4f:77:1d:58:
         fe:15:52:17:d7:ac:df:e1:18:07:0e:1b:5f:c1:75:c0:6f:7b:
         4c:e7:8c:33:12:88:78:dc:e6:b9:e6:11:d7:51:a1:2d:3a:c4:
         62:d6:3c:f6:7a:10:f9:e2:49:3c:8d:92:53:00:b2:3f:a4:f2:
         bd:ed:cf:99:00:f3:93:8e:ce:33:82:d5:e7:8b:97:2f:bc:9e:
         3d:62:b1:e1:29:a2:e1:de:b4:b5:62:3e:08:96:97:ec:7d:55:
         e4:42:7b:4b:70:bd:22:ca:13:c2:55:7d:5e:3e:4a:f0:fe:58:
         b0:8f:e2:fc:4d:a2:f7:fb:f5:ef:cc:7e:dc:11:8c:4c:10:d6:
         e6:06:27:c6:6b:59:5c:5f:25:fd:7f:f6:ee:b3:fa:e9:f7:99:
         6a:a8:00:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeVFpFFSKbKirMcgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI0MTAxODEzMDA0MVoXDTI1MDExNjE0MDA0MVowLzEtMCsGA1UEAxMk
YzIyZmM5OTQtMTc0Mi00YjFhLWE1YjQtOWFmYmEzYWQzN2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo2xU649OChn0w3tJWveIp5FBOZZ533b/4fC
4aCBt6pwEsAyrVqJuqqIjAu8NXI6imSBcE4PDG04ELurkKjFOBq9kMty+mclsslq
/V+k7ds/9T7dsfR7ZAkqR8JbV5dplCN5y/UZyu+NltTTmwlnJQdclDbyQF/IPg6U
LQsm9nOBTCZQ001MjJ6EdiyDepbg8M1q+ZYIVHlroE4bqbXswaXk36HovPBPnNs8
4czziEfqCWLpVVBUD9/EjZWIPiWSmO98tPOfzk9rkU3nK5cWRNdENVmdq/Pz7GEV
K5FkZFK8WtZK7simFK4Kf+ZNSsVxIwGmyEdGuNVboGaJvhosSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmcdKmN14R6v7scCT5R76qty13PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvODIzYjQwN2UtNmFlNC0z
MGExLWFlMTgtODJhNWJhNzdiZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8tbUmw2NRNzl+C2b1+9CiqGqzRmP/oci0XHKAFskz52bruixPf71Sj
3hxGdGyxffztGiTO7blxRkqlC+JMkkxRyhHb632aG7aSBWf4O3wUbDCTHCFbcGjs
Boh1A0FcO+ysur1t6YoZT3cdWP4VUhfXrN/hGAcOG1/BdcBve0znjDMSiHjc5rnm
EddRoS06xGLWPPZ6EPniSTyNklMAsj+k8r3tz5kA85OOzjOC1eeLly+8nj1iseEp
ouHetLViPgiWl+x9VeRCe0twvSLKE8JVfV4+SvD+WLCP4vxNovf79e/MftwRjEwQ
1uYGJ8ZrWVxfJf1/9u6z+un3mWqoAEU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org