Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa
File:                     8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa (raw, json)
Hash identifier:          iuYVvMaBPNW7pxKvcJl9NcZoPPRsESgVZudEBmnejaA=
Subject key identifier:   62:37:E8:CD:90:E5:22:A4:CE:0D:61:76:4C:CA:68:67:3F:FD:E0:41
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285848748B1FC5B0663CCA5AD5D400
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        173.0.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:1f:c5:b0:66:3c:ca:5a:d5:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=ee180b05-b869-461d-815b-d3791fdd8fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:2f:4c:75:d4:a5:25:75:fb:7f:e5:d4:94:
                    38:9e:4e:f9:c5:64:41:15:d0:94:6c:db:0b:4d:9b:
                    69:a1:e9:88:d1:07:03:e5:96:eb:6c:8d:2e:df:31:
                    4e:ed:44:12:55:2a:0a:41:18:55:9e:82:bf:12:d0:
                    c6:3b:91:38:e3:1a:1b:29:30:a5:d0:1a:14:86:c1:
                    70:9c:14:5d:1b:e4:0e:65:c4:a3:2f:1f:39:3e:5b:
                    2f:6a:91:81:27:0a:d6:3c:80:9e:24:9e:2d:eb:05:
                    4d:cf:86:c4:77:20:85:ce:94:00:5d:29:55:6a:1a:
                    28:e8:33:2c:b7:a6:2a:bf:a4:9e:14:a2:73:c6:5d:
                    5b:48:62:9e:85:8a:70:06:4b:2c:d2:69:3a:11:be:
                    f3:03:73:56:b5:e8:8c:60:df:c0:94:67:46:3a:d3:
                    29:b2:25:7e:db:c0:9d:0b:45:5d:9b:86:d4:38:bc:
                    e6:45:01:81:c2:21:19:68:57:56:e6:d6:c1:41:62:
                    ac:3a:22:3f:36:f6:e0:c3:ae:86:05:26:27:4c:37:
                    59:19:32:b0:9d:a4:93:fa:d8:fc:5d:3d:66:99:ad:
                    7e:01:0e:7c:4c:ee:60:ca:69:dd:16:ad:13:42:39:
                    66:93:21:d4:e2:f9:39:a5:77:ba:0a:45:71:64:f1:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:37:E8:CD:90:E5:22:A4:CE:0D:61:76:4C:CA:68:67:3F:FD:E0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/8d98c74e-dbf3-32bf-9a31-b5197a3b44b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:2a:c9:2d:a0:7a:85:21:da:96:14:dc:c3:47:b9:e4:4d:
         fe:d1:c8:a1:66:98:a8:1e:da:7b:55:a6:c9:43:d6:15:5f:66:
         22:59:c0:d5:eb:4a:e8:88:66:39:a7:4f:de:b4:c1:6b:15:45:
         fd:aa:51:23:ff:59:b6:2d:ef:84:8e:f2:c6:68:d9:a0:a4:bb:
         2b:90:ec:55:c2:d1:94:bf:79:ba:ed:ab:f9:2a:12:e0:17:06:
         e1:30:de:06:01:d6:f8:de:14:16:cb:0e:a4:75:b9:fd:6c:6c:
         8c:aa:a3:a8:03:31:0b:e9:88:9f:dd:3c:9c:4a:31:7b:a6:6f:
         05:70:5a:d0:0d:56:45:f0:91:b1:b5:ef:42:e0:3f:30:6e:96:
         5c:a4:4f:d7:0a:b9:20:df:74:03:0f:27:dc:4f:65:3d:d4:ad:
         2a:7d:31:c9:09:9f:1a:c4:23:6e:23:7c:db:83:cd:49:18:fd:
         e7:e5:ff:d9:07:25:9a:26:5c:0d:48:f1:d9:aa:a3:1d:2e:a3:
         f5:17:85:b4:9a:4e:2b:6d:c0:21:46:33:0e:c4:15:7b:e3:f5:
         16:1c:fc:bb:84:56:6d:b8:44:f8:8e:16:13:da:94:c6:17:1b:
         c8:21:81:cb:dc:b4:70:c8:eb:d9:b1:cb:29:cc:57:31:a5:ca:
         b3:07:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:42 2025 by rpki-client