Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa
File:                     c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa (raw, json)
Hash identifier:          VyFHWzTxy6uNZAHUc5/+xz5AkfDDWg6AIzOJ7nb1KTM=
Subject key identifier:   C4:52:6B:25:22:C6:4F:24:AA:03:83:44:D1:C2:08:46:D0:D3:C4:F6
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F432858479516907495C923103282A880
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        199.102.200.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:90:74:95:c9:23:10:32:82:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=15880f99-724e-4cef-9bab-762a47e85ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:aa:5b:f1:0f:22:43:6a:69:a3:fb:49:40:
                    7a:f4:be:e1:f2:5c:bb:3e:f1:66:00:f1:11:64:d2:
                    4a:94:db:4d:78:f6:6c:50:0b:bc:c0:95:56:7f:3c:
                    5e:ad:40:a2:fc:e7:16:55:a1:3f:a3:c7:3c:65:b4:
                    ac:95:78:c2:c9:ad:28:42:f1:9a:64:34:96:6c:c0:
                    d1:57:db:1a:8a:33:11:81:3d:bf:96:a4:5f:eb:93:
                    d7:be:6f:e7:b8:a1:27:b7:d3:17:ae:a1:6d:58:4d:
                    7a:40:05:94:02:3a:56:83:9e:c6:3e:82:57:26:6f:
                    47:8f:99:94:0d:33:c9:3c:22:aa:10:22:7c:93:66:
                    dd:49:b2:e9:80:a7:1e:85:5f:0c:ec:02:9b:8d:dc:
                    d5:5d:c6:c1:5a:68:9d:4b:ee:fb:7a:49:bc:13:f8:
                    97:64:07:66:47:e5:34:ae:d8:2b:b5:65:06:ad:1f:
                    ce:63:71:bb:7d:d9:32:70:c0:88:33:51:ab:9b:04:
                    3d:d5:94:bf:3f:59:77:f8:c7:c0:f5:f0:5c:95:58:
                    b9:0e:58:0b:55:b7:47:7c:58:ba:6b:29:31:9a:35:
                    fe:3a:37:3d:8b:74:2a:78:05:67:04:8d:22:88:78:
                    8d:41:47:e6:6d:79:a3:d5:b4:ff:ec:6b:e9:33:0b:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:52:6B:25:22:C6:4F:24:AA:03:83:44:D1:C2:08:46:D0:D3:C4:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4456bc8-0d91-3a8b-98c4-19ff0568d55c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:9f:0b:c9:82:7a:03:bd:d7:4b:81:16:f3:c9:93:dc:a2:
         53:94:48:f1:5f:e9:0c:ef:05:e3:b3:22:79:0e:06:04:04:5f:
         bc:80:c6:87:18:65:a2:d9:fa:68:25:4d:8a:1d:88:90:9a:f4:
         9a:23:3d:05:bd:af:27:d1:34:a3:2f:ca:7e:a6:ff:49:14:e7:
         77:d2:77:a1:11:4d:c6:bf:c5:64:c9:27:bb:ab:34:c6:ab:6a:
         9b:c0:f8:87:30:0d:f7:fe:c5:84:f3:ed:6f:2e:60:e2:b4:d7:
         5c:a9:15:09:99:d2:4f:dd:d0:c4:6a:4b:d8:b9:e9:92:ff:79:
         67:79:3e:a0:7c:95:5c:98:13:a7:7c:fe:94:2d:1f:ec:3d:13:
         54:3a:5f:19:d9:4f:8d:e2:de:dc:b2:35:43:1b:7b:c2:14:bb:
         09:2c:d7:09:0c:f9:24:5b:80:fe:6a:d4:f3:61:d7:2e:47:a6:
         61:c2:3f:f8:ff:b7:7c:36:2b:1b:ba:fc:af:c6:23:34:6a:9a:
         ad:cf:2a:44:0d:75:ad:aa:0c:74:c6:c2:a0:f1:c2:a7:c7:b9:
         fc:71:f6:91:ec:bd:8a:6c:cb:0b:fd:66:70:d6:f8:7a:a0:bb:
         ff:fd:2c:fb:a0:63:8c:21:17:c1:79:0b:ac:ed:07:3d:33:40:
         4b:fc:8d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:11 2024 by rpki-client on console-ams.rpki-client.org