Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa
File:                     f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa (raw, json)
Hash identifier:          XJkavbhIa2uZaGeb5PclxK6ItkreXl6iw9WZdj0+TAY=
Subject key identifier:   51:60:FD:D8:66:78:CC:65:3D:4D:B2:40:01:6C:DE:D3:DB:E7:ED:75
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DE195CF7FF9D04706E80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.122.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:de:19:5c:f7:ff:9d:04:70:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=20565eb9-1fad-4d5a-b399-2218b44f5083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:11:56:a0:a2:4d:4f:bb:ad:2f:8e:27:87:
                    50:33:2c:34:e6:cf:27:bd:8d:91:b7:45:7d:8b:1e:
                    7a:3a:a7:2e:49:a6:0f:ac:a6:de:5b:db:39:83:43:
                    73:18:dc:16:8c:c8:a6:5d:40:70:ec:76:5b:f3:e2:
                    f1:af:b6:de:cb:0b:26:fb:3a:bc:59:ba:7f:99:b3:
                    e3:de:ab:d3:da:e5:d6:63:ec:b1:fc:d0:78:85:93:
                    d2:7f:50:d4:08:c8:7b:49:20:31:bf:9c:09:71:d5:
                    39:37:86:b1:09:b4:40:7a:b1:81:bd:3c:47:6d:89:
                    3a:2e:cc:90:ad:c6:8d:d3:1e:67:1d:15:f7:03:9b:
                    70:f4:55:e9:cf:14:8d:59:fa:8f:70:02:5a:c2:8f:
                    8d:08:14:60:de:9c:27:62:a4:22:70:6a:e7:4e:ac:
                    13:d9:34:c6:0f:bd:40:93:69:e7:99:ab:b8:42:46:
                    fa:6a:62:ce:50:71:79:c5:db:d5:4e:ad:68:d4:51:
                    25:ab:1e:ac:2f:55:e7:a5:7a:df:e6:9b:51:c1:28:
                    62:aa:38:8d:0c:79:00:e5:2b:07:91:9b:49:46:f6:
                    d7:3b:f0:ba:1b:0d:2e:c2:cc:57:23:4c:88:44:00:
                    b0:e1:97:47:a8:7b:89:ef:e5:df:70:d6:20:a8:bf:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:FD:D8:66:78:CC:65:3D:4D:B2:40:01:6C:DE:D3:DB:E7:ED:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/f088c934-1ae8-3dcb-8f44-03ac065af8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9d:d2:18:38:e7:df:48:7a:8b:f4:60:60:fc:89:3b:b5:65:
         9d:10:8d:d9:1f:83:2d:91:4e:76:d0:87:b1:72:d8:f0:f3:92:
         ee:b3:ef:dc:6c:72:eb:53:3b:50:25:9b:b5:44:ce:71:af:bc:
         bf:44:4c:14:1b:54:8b:52:bb:a8:71:60:c1:e1:76:53:47:7f:
         ea:8f:5e:72:33:63:76:28:94:de:29:8c:16:4a:b3:95:8f:b7:
         68:6e:8a:b1:cc:e2:bc:f0:13:0d:03:15:fa:e8:77:a0:8b:e6:
         0d:c9:d2:df:40:13:e5:23:5b:43:60:f6:6e:42:51:fe:64:cc:
         7f:fc:b2:6d:7f:92:e4:62:14:f5:15:bd:3f:2f:d9:be:1f:0f:
         99:26:c7:f6:98:74:16:ec:29:d6:27:7a:41:80:2b:71:5f:f9:
         9c:49:83:0f:5b:46:7c:26:c0:97:17:06:84:b4:54:5b:c4:a6:
         9c:69:ac:1f:6f:03:21:9b:44:54:4a:45:6a:1e:ff:75:2a:cb:
         75:3b:b9:19:39:8f:fa:e8:eb:de:e5:0d:3e:60:86:39:37:bd:
         b5:97:aa:f0:5d:be:ea:9e:aa:56:e9:ff:f9:72:92:a9:0d:d1:
         07:44:e1:9d:2c:e8:63:2c:f9:d0:95:b1:d7:3a:e7:3f:03:96:
         b9:0a:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 12:35:20 2024 by rpki-client on console-fra.rpki-client.org