Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
File:                     cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa (raw, json)
Hash identifier:          uve6qpYiMRaxdNOvP113HTJ/JnmyAEeJkbmupQa/BF4=
Subject key identifier:   E8:55:E6:AD:3C:E2:B0:B5:34:67:B6:11:B0:C7:94:F3:B4:A0:95:93
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DE405AEADCE0627B4700
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.122.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:de:40:5a:ea:dc:e0:62:7b:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=ae1fc843-f836-4df2-b59d-1a81a3c86504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:d8:ce:ec:34:bd:25:dc:50:7c:cb:98:ad:
                    8f:ac:c4:67:9f:49:b5:fc:13:cf:d9:f0:9c:4d:82:
                    21:d0:0b:69:f7:7b:00:56:56:da:7a:f2:64:50:79:
                    bc:e5:b7:14:9d:4d:a4:e3:5e:4e:be:49:e1:9a:1c:
                    00:97:25:58:1d:c4:fd:56:07:0c:6f:34:92:4e:52:
                    7d:42:c3:8a:53:02:95:b1:08:0d:d4:03:6a:48:e2:
                    54:19:37:1e:93:46:08:4f:77:7c:50:1d:a3:56:65:
                    48:bc:73:7d:f0:89:1b:e2:0a:39:68:9a:ac:8c:90:
                    4a:5d:72:0a:dc:e9:04:48:c9:26:50:ad:9d:c6:62:
                    8f:69:c5:3c:c4:1d:ec:f9:17:17:cb:ac:d6:e6:88:
                    24:95:1d:2e:1b:18:62:85:5d:1e:81:72:c5:2b:c1:
                    dc:34:0c:43:82:cb:40:cc:9a:c3:da:76:3d:de:22:
                    13:a2:0b:ef:93:24:0a:fd:a1:24:f5:58:21:2b:64:
                    76:a0:f7:b3:54:6d:d2:a9:73:6b:62:e3:4b:52:c2:
                    28:79:27:f4:88:28:d4:4e:d9:d1:95:3c:d0:31:34:
                    95:ac:38:38:ed:71:43:42:2a:24:6b:4d:be:8d:9a:
                    fa:ba:5d:9c:a7:7b:62:80:97:d7:dc:69:e9:6a:66:
                    f6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:55:E6:AD:3C:E2:B0:B5:34:67:B6:11:B0:C7:94:F3:B4:A0:95:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:06:ec:9f:27:a6:c4:bb:15:54:91:c4:23:d4:b0:b8:21:5a:
         f1:5a:ba:52:00:10:1f:7e:5f:84:ef:e4:56:3b:c0:ac:70:a9:
         5b:27:82:a2:0b:de:61:3d:be:3a:2c:92:7c:9f:f7:c1:78:b6:
         ed:3d:53:5d:d7:d5:50:92:05:ae:0c:6c:22:1f:ff:9a:05:8d:
         ba:7c:8f:ba:31:0a:1a:7a:98:6b:6e:ae:91:67:2e:4e:a4:35:
         ce:a1:7a:f3:d7:55:69:e5:31:48:4c:12:a8:c5:10:84:af:54:
         3e:40:d0:30:73:bc:5c:23:a7:af:96:cc:d1:cf:b0:53:e9:68:
         01:48:86:66:19:b9:2d:db:fb:38:54:a4:5f:ce:19:f6:4f:8d:
         bd:3b:f5:8b:86:d8:c2:06:d3:ff:9a:00:d5:3a:36:ba:e1:8b:
         f3:43:fa:e2:7e:9a:00:0f:be:8c:1a:89:42:a6:cd:ac:02:b7:
         0f:22:8a:da:e6:27:6e:9f:87:5d:06:58:1b:7b:b0:37:e3:7d:
         f2:d1:62:35:dc:f4:b0:51:c2:2f:f1:32:29:73:41:f4:9e:03:
         cb:53:1c:da:bc:ba:6b:34:e8:66:7a:80:0c:74:24:a2:fe:14:
         57:37:47:16:9f:19:57:1e:94:fb:0b:4a:74:41:02:b3:40:69:
         8b:9b:48:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:10:37 2024 by rpki-client on console-fra.rpki-client.org