Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
File:                     dee838bc-f216-31c6-87dd-91cad1fcab6a.roa (raw, json)
Hash identifier:          lEPPkOSw+6tizHJA56NeHi5Aibu7fZ8lt1Dteg2oAqY=
Subject key identifier:   C6:61:D1:F4:95:49:8C:D5:DE:74:17:AD:E5:7E:48:7A:8F:E2:3E:FB
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DD9C1E256D22FD0DF840
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.122.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:dd:9c:1e:25:6d:22:fd:0d:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=2849547b-34ef-4aaf-a491-b15d1c75d134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:67:e5:2b:9f:d0:a8:b1:e7:25:5f:ac:3a:
                    82:3a:51:23:6b:ae:39:99:d8:43:81:b9:75:0a:97:
                    cc:7c:37:a6:0e:ba:a0:ec:f3:8b:d7:3f:10:d3:fd:
                    d3:20:35:6d:1b:8b:02:fa:cb:17:97:53:67:37:1e:
                    f0:7f:6a:fd:c6:86:d4:5b:e7:c6:42:05:a4:6e:f3:
                    03:f9:59:f6:27:14:52:92:ab:c4:43:ce:4c:18:64:
                    86:cf:8b:36:6f:3d:e5:68:c5:8e:34:93:50:de:8d:
                    7c:d2:9b:c7:d8:b5:3c:ad:c0:c8:26:64:ae:31:dc:
                    8c:62:1b:82:49:35:a3:ae:7a:22:4a:1d:28:2f:59:
                    b8:73:e9:78:b4:09:b9:58:45:5f:59:2b:93:11:f7:
                    1a:98:e8:af:96:18:b6:f2:62:b3:62:71:b6:a4:64:
                    95:0b:e0:ce:4c:51:72:13:b1:7a:83:3b:b6:25:da:
                    8a:96:bb:ac:fa:25:6e:2d:da:a7:12:40:58:c1:bd:
                    1d:6b:61:38:5e:7d:06:43:48:1d:a5:ec:b9:7f:5d:
                    db:37:a0:b8:44:a1:5b:42:c5:3e:0c:c2:0c:45:e8:
                    f3:59:b5:d9:51:a6:d0:e8:05:c6:99:16:64:76:fb:
                    48:e1:12:7e:ba:93:81:cd:48:bd:4f:e1:cd:e3:ad:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:61:D1:F4:95:49:8C:D5:DE:74:17:AD:E5:7E:48:7A:8F:E2:3E:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b4:39:ab:68:ba:af:62:49:eb:de:47:75:c9:f3:c5:6c:dd:
         57:5d:5c:64:d5:3e:91:30:2d:ba:80:f2:d9:07:2f:fe:5f:4d:
         3c:e1:d1:bc:3c:63:43:95:56:eb:ac:e0:25:92:7a:25:54:a3:
         fa:7a:da:3f:4a:7e:36:02:3e:fa:10:42:36:cf:c5:fa:3a:04:
         1d:fa:f6:a6:9f:a1:f0:28:9b:13:e7:6a:a6:61:57:1a:25:a0:
         b5:ca:6b:b8:7e:90:08:11:af:fc:0e:2c:37:07:bf:21:4f:e6:
         8e:b3:2d:3c:1d:cb:29:58:94:9a:2d:e8:2a:ef:69:97:73:63:
         e4:4f:fa:72:3e:62:61:c1:0d:ae:39:4f:0d:7f:b8:30:8f:28:
         be:51:34:ce:a5:5d:43:bb:24:21:5a:d2:e2:fe:fa:85:26:66:
         b1:29:1c:20:ae:41:f1:2b:01:64:79:9d:fe:52:d8:84:42:4d:
         76:9e:9e:6b:2a:20:2b:6e:3d:24:36:08:ce:a2:8c:ab:eb:e7:
         4d:84:b4:b0:8e:37:d0:a3:23:67:88:cc:ad:a6:44:fb:c6:2b:
         a2:5c:8f:ae:9e:96:d0:5a:9e:89:c1:c5:f2:c6:cb:3d:5e:8c:
         94:d5:b6:ba:6f:05:51:0c:a2:95:2a:24:b8:98:a1:01:74:f9:
         70:0a:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:03:00 2024 by rpki-client on console-ams.rpki-client.org