Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa
File:                     c4844797-2886-3b62-adf1-6833cad88a33.roa (raw, json)
Hash identifier:          34wl0Z6tFuTekoYquaG39MHBYMOK1Ta1r31GTRUc5dE=
Subject key identifier:   C9:07:04:FB:16:EA:54:07:50:BC:11:54:40:F9:AE:21:2A:8F:7B:4F
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584797E14769CA32FED5C4881790
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     11290
IP address blocks:        24.122.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:47:69:ca:32:fe:d5:c4:88:17:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=96fcb4f1-ac42-4ad3-98a1-5586a3f3c4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:c5:8c:3f:e2:f4:d9:18:9f:b7:39:69:75:
                    04:6a:35:21:d3:86:02:b4:93:4c:ee:f1:b2:fd:68:
                    ad:4c:ac:a9:b6:7e:aa:21:a0:f9:95:2d:03:5a:a7:
                    51:95:1a:a5:3b:3a:18:bb:32:43:6f:41:6f:34:36:
                    e1:5b:f3:df:4d:7b:3e:73:d1:3f:de:fa:1e:d3:ef:
                    c2:2f:63:5c:e5:8e:f7:62:ad:48:51:f4:72:22:a7:
                    31:dc:96:13:a1:ac:4c:e4:9f:71:bd:fd:ba:d4:f7:
                    4a:cb:23:8d:eb:a7:70:a7:5f:13:f5:ac:6a:84:97:
                    15:79:be:2e:81:0b:96:4e:86:55:fd:e0:5b:cb:ab:
                    c6:dd:1b:66:1c:52:b8:b1:0d:53:d9:b7:32:b1:4d:
                    bf:f6:d8:a7:bb:21:d9:96:e2:22:d6:6b:55:b6:78:
                    15:b7:5f:0b:49:e3:32:15:98:04:f7:d6:4a:9c:cb:
                    af:f4:fc:79:ae:e9:25:d3:60:fa:e5:c7:50:73:d6:
                    d4:1c:90:f3:d8:48:aa:30:1e:4e:3d:7a:a7:17:25:
                    11:b3:4a:94:3d:19:8c:e4:b7:6b:b2:85:e4:3f:88:
                    c0:c6:f9:53:96:5c:b1:39:2c:54:1e:a7:b1:4c:b5:
                    3e:09:8b:d6:bc:71:db:10:e0:89:4f:e2:d6:b8:27:
                    52:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:04:FB:16:EA:54:07:50:BC:11:54:40:F9:AE:21:2A:8F:7B:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c4844797-2886-3b62-adf1-6833cad88a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:25:ec:03:fc:7d:1c:39:f3:1d:f7:94:07:79:bd:b6:c9:ec:
         7b:b2:5b:13:c1:c6:47:7b:0c:c0:de:e6:f7:02:4a:f2:98:e0:
         34:b6:06:c7:be:75:2c:03:f5:af:1d:13:00:6b:60:6b:da:fe:
         95:ca:69:18:57:a9:ad:80:5e:01:51:78:b6:6d:e1:8f:e1:d7:
         0b:dc:40:ed:61:b0:00:29:7c:d8:70:79:64:f0:d3:e1:18:70:
         2e:8b:cd:b6:5d:da:ab:d0:7e:be:78:7f:73:6a:f3:46:68:61:
         b9:06:cd:17:ea:29:9f:74:db:9b:70:f4:8c:af:dd:d5:7a:54:
         46:7f:ba:a1:1a:17:1b:4e:86:3b:c6:ee:b1:b6:ad:99:58:43:
         47:3c:1f:48:4e:29:79:49:d7:81:eb:b4:b4:96:0e:f3:f9:c0:
         71:2b:dc:1c:6e:d3:5f:a0:32:e0:0d:13:bf:cc:3d:93:21:df:
         9e:ff:b8:7c:b3:20:a8:a0:1e:fb:1e:1e:8c:02:07:b8:20:9e:
         70:9e:2e:62:d8:04:7c:21:04:01:c1:6c:00:b0:2d:bc:34:3f:
         d2:0e:f9:37:77:77:a7:6e:29:5c:63:54:4a:02:fc:b9:79:41:
         ed:1d:c9:86:c3:0b:03:c5:10:97:6b:a0:22:fd:f9:68:ea:a3:
         70:f3:05:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4UdpyjL+1cSIF5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
OTZmY2I0ZjEtYWM0Mi00YWQzLTk4YTEtNTU4NmEzZjNjNGY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkXFjD/i9NkYn7c5aXUEajUh04YCtJNM7vGy
/WitTKyptn6qIaD5lS0DWqdRlRqlOzoYuzJDb0FvNDbhW/PfTXs+c9E/3voe0+/C
L2Nc5Y73Yq1IUfRyIqcx3JYToaxM5J9xvf261PdKyyON66dwp18T9axqhJcVeb4u
gQuWToZV/eBby6vG3RtmHFK4sQ1T2bcysU2/9tinuyHZluIi1mtVtngVt18LSeMy
FZgE99ZKnMuv9Px5rukl02D65cdQc9bUHJDz2EiqMB5OPXqnFyURs0qUPRmM5Ldr
soXkP4jAxvlTllyxOSxUHqexTLU+CYvWvHHbEOCJT+LWuCdS4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMkHBPsW6lQHULwRVED5riEqj3tPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYzQ4NDQ3OTctMjg4Ni0z
YjYyLWFkZjEtNjgzM2NhZDg4YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAl7AP8fRw58x33lAd5vbbJ7HuyWxPBxkd7DMDe5vcCSvKY4DS2Bse+
dSwD9a8dEwBrYGva/pXKaRhXqa2AXgFReLZt4Y/h1wvcQO1hsAApfNhweWTw0+EY
cC6LzbZd2qvQfr54f3Nq80ZoYbkGzRfqKZ9025tw9Iyv3dV6VEZ/uqEaFxtOhjvG
7rG2rZlYQ0c8H0hOKXlJ14HrtLSWDvP5wHEr3Bxu01+gMuANE7/MPZMh357/uHyz
IKigHvseHowCB7ggnnCeLmLYBHwhBAHBbACwLbw0P9IO+Td3d6duKVxjVEoC/Ll5
Qe0dyYbDCwPFEJdroCL9+Wjqo3DzBfU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 03:15:08 2024 by rpki-client on console-ams.rpki-client.org