Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa
File:                     823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa (raw, json)
Hash identifier:          vdjnU1jbmIKJtptZYXNExD75RiYs3I+LgrMWuKZRlNo=
Subject key identifier:   7F:F6:15:A6:27:62:17:58:9E:00:72:80:C6:59:A6:7E:EA:5D:9D:3B
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D66906F5C748FCFDC3557680
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa
Signing time:             Sat 11 May 2024 13:00:34 +0000
ROA not before:           Sat 11 May 2024 13:00:34 +0000
ROA not after:            Fri 09 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        162.217.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d6:69:06:f5:c7:48:fc:fd:c3:55:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 11 13:00:34 2024 GMT
            Not After : Aug  9 13:00:34 2024 GMT
        Subject: CN=de40d5ff-8deb-461f-845a-7c8cd0b34e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:ad:9e:f7:24:35:db:b8:80:35:ed:b6:0a:
                    97:5b:ab:b0:de:aa:88:b5:61:e5:e9:5b:1b:9a:72:
                    bd:e2:a2:3a:23:d0:82:0c:3d:33:c6:d3:ab:4b:64:
                    e0:fe:26:18:e7:0f:13:37:d3:5d:90:3f:0b:02:be:
                    18:f8:d1:7c:98:1d:01:45:dd:ef:82:93:bf:69:42:
                    e0:d2:ca:60:ef:dc:ae:95:0b:60:16:68:53:da:bc:
                    74:57:b8:be:20:74:b9:82:ce:5b:ce:aa:96:56:af:
                    c6:91:d9:61:e5:ee:01:f7:61:46:fa:c2:10:7a:e7:
                    b8:44:98:a7:6d:ca:c4:7b:30:7d:c8:b0:54:a6:42:
                    6f:79:42:f3:01:82:b0:92:e9:3c:46:34:4a:9d:86:
                    d0:43:b2:c1:06:c1:fb:5e:28:2f:46:45:ce:53:28:
                    01:63:14:dd:30:5d:b3:64:53:22:c4:b7:dc:da:be:
                    a5:db:dd:9f:6d:d4:3b:a0:8a:7e:9f:41:9d:23:fd:
                    07:52:e6:01:d0:a1:3d:4b:bd:65:e4:64:08:c5:af:
                    76:64:9a:6b:7b:16:47:40:88:f3:99:ee:3d:65:6d:
                    cd:5c:36:86:3c:34:73:af:6b:e4:3c:ad:36:1d:52:
                    cc:8b:3a:02:89:4f:6c:44:26:31:f9:8e:e3:61:0d:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F6:15:A6:27:62:17:58:9E:00:72:80:C6:59:A6:7E:EA:5D:9D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/823b407e-6ae4-30a1-ae18-82a5ba77bd20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:01:79:db:75:31:12:1a:c3:ff:53:d2:8b:9c:84:72:51:cc:
         b8:9e:3e:f2:4a:3f:59:12:d5:e9:09:9f:96:ff:67:dd:09:07:
         1b:f6:c6:ff:d3:54:81:77:5f:e0:3f:43:06:7c:ce:cd:23:54:
         cf:e5:a6:86:19:1e:14:c1:41:3e:e5:7e:89:e6:96:5a:bb:27:
         4e:27:b9:6c:0c:42:38:4b:20:e2:35:c6:d8:68:55:93:fd:32:
         06:2d:34:ff:4e:37:3d:61:de:7b:29:76:6e:af:1d:8a:f9:80:
         31:05:80:6e:d9:c6:16:3e:c3:55:c6:95:84:7e:2b:37:ff:f6:
         bf:35:37:e5:e0:dc:f0:90:9f:a6:43:13:a4:40:c3:15:ba:85:
         61:4a:5f:4f:51:81:e2:02:fb:e4:e3:33:95:9f:c1:11:d0:00:
         b0:d2:ba:bd:fb:82:67:20:c7:44:f6:02:cb:23:4c:d3:66:ab:
         4b:b2:51:c0:f8:d4:b2:db:60:64:49:1e:b3:d5:1f:6b:53:a5:
         4a:ec:b2:8a:85:6e:4f:04:c0:03:ef:10:cd:b1:b3:01:c8:5c:
         0e:61:3c:a5:26:69:26:f7:5d:d3:16:f3:3e:9e:fd:09:bf:c5:
         e7:4f:91:fd:1d:c0:ed:a0:9a:9e:1a:0e:6d:d7:53:01:ab:db:
         6d:81:f2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:03:00 2024 by rpki-client on console-ams.rpki-client.org