Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ed077008-535b-37ca-a52c-435ff2eee5ea.roa
File:                     ed077008-535b-37ca-a52c-435ff2eee5ea.roa (raw, json)
Hash identifier:          /hZrFNC5csiri0vNML3qf5TQ6JxbIZQ3vSNI6F5HTnc=
Subject key identifier:   17:26:84:C8:CC:B8:55:73:3A:55:68:F8:CC:48:6B:27:94:37:25:EE
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285847951691EB24270D25F2583F40
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ed077008-535b-37ca-a52c-435ff2eee5ea.roa
Signing time:             Fri 18 Oct 2024 13:00:41 +0000
ROA not before:           Fri 18 Oct 2024 13:00:41 +0000
ROA not after:            Thu 16 Jan 2025 14:00:41 +0000
asID:                     11290
IP address blocks:        104.218.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:95:16:91:eb:24:27:0d:25:f2:58:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 18 13:00:41 2024 GMT
            Not After : Jan 16 14:00:41 2025 GMT
        Subject: CN=03813210-fd58-4530-b9f1-88911220919b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c7:bc:9d:a6:52:31:1e:eb:fb:48:1d:98:09:
                    ca:25:6f:bb:6b:63:d5:d2:8e:f6:c2:9a:f4:94:d7:
                    bf:0c:b9:a5:a2:4a:ff:1e:aa:82:fb:9b:1c:73:16:
                    34:38:06:3c:5d:e0:95:bb:7c:6b:8f:d7:8e:02:0c:
                    25:f2:61:91:38:f2:1d:7d:ca:62:85:c2:89:5b:13:
                    b9:e4:22:08:e4:0c:87:60:30:b0:85:a7:56:03:7b:
                    4a:f9:ef:03:37:36:c3:e7:8f:4d:a8:e4:06:e1:2b:
                    76:18:e9:1c:4f:15:3a:cc:85:a4:69:82:3c:ac:19:
                    41:3d:70:23:d5:3a:86:6c:10:4b:15:5e:1e:c5:f0:
                    71:d9:a0:6b:96:6c:0a:ed:6f:6e:e4:aa:f6:d2:d3:
                    d3:1e:43:09:ee:3c:b3:2f:01:84:47:fb:9f:55:0b:
                    cb:09:64:bd:de:16:ce:19:1c:bd:f2:60:b7:52:94:
                    3e:87:dd:49:37:7a:89:2a:ad:33:73:67:72:6d:7b:
                    4a:47:7a:4d:2d:0d:d2:e5:a3:39:78:25:9b:66:51:
                    60:ca:90:30:d2:69:85:c8:5b:cd:54:18:2f:63:18:
                    0c:0c:82:bf:07:83:1f:7c:1f:1c:bb:b7:bd:e6:c5:
                    7f:58:aa:db:c8:45:36:31:18:45:11:5d:e6:df:79:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:26:84:C8:CC:B8:55:73:3A:55:68:F8:CC:48:6B:27:94:37:25:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ed077008-535b-37ca-a52c-435ff2eee5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:69:5d:0f:57:5e:35:1d:0f:28:fb:b1:a8:a4:19:b0:73:
         8a:48:97:e4:3a:bc:ab:52:da:33:61:69:3f:af:6f:26:fb:04:
         02:54:3d:2e:a4:30:a2:14:62:d7:c5:74:2e:c5:c2:cf:de:f8:
         a5:d0:85:11:15:28:a0:e5:71:4b:a8:b5:7e:0e:10:7f:fd:58:
         12:b1:78:f6:72:e8:d9:b9:c0:b2:ee:f2:57:90:5b:ee:d5:60:
         f2:5e:f3:b8:db:2f:5e:d7:f5:ce:0d:52:05:e4:c7:c2:d5:51:
         b9:36:98:2e:e4:ee:87:6d:84:e1:e4:43:2c:ad:26:fe:91:f2:
         6b:96:3e:44:cf:a4:94:32:ee:20:4d:47:20:22:53:87:82:56:
         76:80:82:06:6f:8f:b3:2a:75:e5:08:47:15:2c:77:70:fb:83:
         47:9a:95:71:53:06:80:e7:d8:fc:54:e8:7a:ff:b9:f7:76:26:
         19:21:84:64:95:db:58:fe:2f:f1:74:dd:cc:23:1e:b5:e5:08:
         23:9b:7c:d0:23:ba:29:dc:9f:34:c9:15:49:8f:a9:ea:7e:c5:
         fb:e5:90:97:00:b7:29:6b:a3:d5:90:62:1c:eb:5b:bd:4d:b4:
         e3:c3:44:83:db:9d:8a:e1:ef:eb:c3:b6:f5:85:80:f2:1f:aa:
         a2:0f:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:13 2024 by rpki-client on console-ams.rpki-client.org