Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa
File:                     c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa (raw, json)
Hash identifier:          4qBrQQRy+aLm4tD/Y6xKDkQScJkiEJ2cKDCWP+zsQ0I=
Subject key identifier:   59:96:8E:2F:01:09:3F:DD:48:12:01:4D:0C:2B:B1:A2:B2:DC:FD:14
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DE616BE057EEC5275900
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.122.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:de:61:6b:e0:57:ee:c5:27:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=e411ae14-5c37-412b-aca9-60baea37fc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:69:f8:e1:55:b3:e5:f1:26:d7:1a:88:d5:2c:
                    f0:06:86:db:42:9c:8a:a2:81:b6:8e:39:64:14:b9:
                    8d:8c:0b:ae:c0:2b:a2:65:61:4a:04:40:cc:36:60:
                    5c:e0:e3:48:e9:c8:90:89:3c:3b:b5:63:9f:c5:e5:
                    cf:26:00:48:2b:48:dd:1f:90:90:24:49:1d:97:2f:
                    e2:8f:5b:06:dc:7b:c1:58:72:4e:c7:78:f9:98:9f:
                    35:f2:f2:cb:d1:aa:49:f0:3e:3b:46:96:1c:82:de:
                    17:7f:17:e0:a2:e3:41:eb:ab:7a:f9:5a:87:ea:dd:
                    a7:d7:ac:84:38:63:d0:c0:fa:74:94:f1:5f:06:d3:
                    4a:e8:56:0a:c4:c8:92:b3:63:69:c2:a9:3a:e0:8f:
                    37:ff:43:30:fd:ea:46:8c:e4:83:b8:1a:85:e4:cf:
                    86:7f:34:c8:cf:77:2a:e0:43:df:6f:20:e0:54:cc:
                    63:66:16:a2:45:ff:89:82:61:4b:95:aa:1b:42:a7:
                    53:1f:70:a4:aa:50:81:b8:ff:ec:3f:5f:e8:9e:9d:
                    d7:38:8b:e9:09:23:40:27:c8:d1:7f:56:03:0a:1f:
                    32:8c:34:63:47:21:d0:2e:43:de:21:f2:cb:7e:59:
                    d5:7d:d1:c4:76:5e:d5:4c:6a:02:1e:8c:80:c6:f8:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:96:8E:2F:01:09:3F:DD:48:12:01:4D:0C:2B:B1:A2:B2:DC:FD:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/c79bef03-9c1a-32d5-8e9b-2883bc06835c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a3:00:c3:88:92:87:e8:88:8d:c5:d7:3c:4f:4f:ec:e6:a0:
         9b:c7:37:23:89:b5:ab:89:98:58:a4:ce:05:af:c2:10:9d:ac:
         71:27:ea:f5:ec:e6:42:a3:45:c8:a6:a6:fb:d5:15:77:87:78:
         89:e3:0a:db:f9:9e:36:b2:bc:46:6e:ee:cd:dd:e5:28:b1:10:
         21:02:00:6a:24:de:b4:3a:9c:f5:61:2e:0e:ae:9b:a9:7b:7a:
         b0:6f:8c:40:31:55:9b:8a:9a:d7:d3:a2:b5:f7:ef:85:65:9c:
         d3:c0:d8:85:20:1f:04:b0:8d:e4:29:f6:1d:2a:d0:03:32:b8:
         41:83:a0:dd:73:cf:5a:4e:71:9f:d9:8e:6d:4b:f1:da:46:4c:
         19:6b:76:3b:3e:03:e3:47:05:ff:2f:0d:3e:5b:2a:11:55:e6:
         af:29:7a:98:5c:87:b7:30:a1:81:88:3b:5a:b5:dc:03:69:d5:
         12:c3:d5:38:1f:7c:47:af:81:14:6f:a9:ac:34:a6:b4:a7:55:
         81:81:f9:c2:1c:c0:19:a2:59:4c:a2:08:b4:68:0a:a9:05:83:
         e7:28:35:da:e8:68:65:d8:66:8e:95:19:91:f6:da:64:f9:48:
         0c:08:c8:fc:19:2b:66:4a:76:9e:1e:b5:02:28:ab:2a:ac:c3:
         f2:03:8b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:55:20 2024 by rpki-client on console-ams.rpki-client.org