Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa
File:                     fa1681d0-8765-3498-93bb-ed37569fe8e6.roa (raw, json)
Hash identifier:          kXr5R/kMuLom6T92fkA3oRgVUHD14LH+142rbmWLhyA=
Subject key identifier:   C4:8B:E8:86:75:22:F7:98:83:50:3F:65:19:85:45:D8:59:62:D6:4C
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584784567EE1EE5303FAD0653280
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa
Signing time:             Sat 12 Oct 2024 13:00:42 +0000
ROA not before:           Sat 12 Oct 2024 13:00:42 +0000
ROA not after:            Fri 10 Jan 2025 14:00:42 +0000
asID:                     11290
IP address blocks:        24.122.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:56:7e:e1:ee:53:03:fa:d0:65:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Oct 12 13:00:42 2024 GMT
            Not After : Jan 10 14:00:42 2025 GMT
        Subject: CN=db3d178c-faa6-4907-a806-88f8b350d61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:51:2d:0f:39:70:d3:30:71:14:cd:61:a1:
                    0d:af:20:ce:3a:46:6e:ab:c9:0b:16:c2:29:a5:58:
                    7d:9c:ec:d2:ee:c5:23:30:ba:b3:d4:25:f9:a1:c0:
                    f4:d3:e7:ce:f9:1c:b7:a7:12:f6:7a:12:f2:58:47:
                    f6:3d:19:6a:b7:57:c9:76:86:77:36:91:50:1e:eb:
                    9d:9d:c7:10:e3:2b:47:7a:b4:2a:f4:fa:7e:38:fb:
                    de:4b:d1:a9:40:2e:1e:72:8c:f2:99:7d:3b:08:02:
                    f7:f3:ef:b6:f0:b6:38:22:71:3b:3b:09:a6:e6:3a:
                    c1:e7:fe:ac:00:7b:d8:52:c0:97:63:65:4c:e7:54:
                    ea:c9:df:78:90:b4:b4:93:c6:40:de:7e:7b:81:62:
                    b8:6b:43:26:80:02:78:36:9c:c4:5b:97:33:00:c8:
                    f9:9a:4e:e5:c2:1e:58:85:a0:1c:23:f5:ff:29:ea:
                    64:59:bd:03:4d:40:f9:7c:5f:38:59:c7:de:3a:77:
                    3e:1b:9e:97:e3:ae:8c:86:8e:f1:70:7d:1b:df:04:
                    ea:64:d9:c0:95:88:82:b7:26:3f:fd:3d:2d:3b:fb:
                    a8:eb:c0:50:59:c6:bb:9a:0c:2a:3f:c9:0c:74:c5:
                    3a:3b:7c:07:da:fa:6e:04:69:02:a8:37:13:39:91:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8B:E8:86:75:22:F7:98:83:50:3F:65:19:85:45:D8:59:62:D6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:cd:e5:f0:b4:af:a7:77:03:39:80:79:5d:cf:c2:c8:4d:ae:
         a8:af:5d:e0:3e:8c:db:80:f5:52:c3:83:49:e7:3e:a7:7d:69:
         4f:77:19:85:ef:a3:5a:7e:fe:fb:99:43:74:b3:92:44:e1:12:
         c7:e5:87:95:aa:9f:64:b3:5c:42:80:06:3f:8d:92:37:ee:53:
         f3:a8:9b:c6:dd:82:12:79:ad:ae:10:41:67:99:9e:e7:84:00:
         8b:7e:e8:47:f3:52:d7:60:cc:49:db:a3:5c:67:33:29:f4:30:
         b4:4d:88:fa:4d:ba:91:20:28:6f:a4:a6:82:f1:e4:bb:e4:48:
         cd:3e:e6:08:fe:96:b4:5b:c6:04:fc:a9:0a:b6:22:24:3d:8c:
         d9:8d:de:28:c4:a5:0f:ba:ca:1a:c5:d0:7a:a4:52:62:b0:f4:
         0f:43:91:8b:de:cd:3e:3c:76:5c:4a:61:0d:10:55:9b:4f:65:
         53:7f:69:a3:4b:f0:96:c6:07:82:1e:a1:a5:b1:61:4b:68:50:
         4a:55:14:1b:ce:8b:9f:ad:07:d4:bc:6a:f6:dc:e8:0f:ef:8d:
         bb:fc:c1:14:a8:b3:f2:eb:d0:48:d6:6a:b7:44:64:d5:a4:1a:
         ba:d9:70:f7:86:60:ff:03:4d:0d:c9:18:38:c8:70:f7:df:cf:
         87:49:c6:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeEVn7h7lMD+tBlMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI0MTAxMjEzMDA0MloXDTI1MDExMDE0MDA0MlowLzEtMCsGA1UEAxMk
ZGIzZDE3OGMtZmFhNi00OTA3LWE4MDYtODhmOGIzNTBkNjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPNRLQ85cNMwcRTNYaENryDOOkZuq8kLFsIp
pVh9nOzS7sUjMLqz1CX5ocD00+fO+Ry3pxL2ehLyWEf2PRlqt1fJdoZ3NpFQHuud
nccQ4ytHerQq9Pp+OPveS9GpQC4ecozymX07CAL38++28LY4InE7Owmm5jrB5/6s
AHvYUsCXY2VM51Tqyd94kLS0k8ZA3n57gWK4a0MmgAJ4NpzEW5czAMj5mk7lwh5Y
haAcI/X/KepkWb0DTUD5fF84WcfeOnc+G56X466Mho7xcH0b3wTqZNnAlYiCtyY/
/T0tO/uo68BQWca7mgwqP8kMdMU6O3wH2vpuBGkCqDcTOZEmqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSL6IZ1IveYg1A/ZRmFRdhZYtZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZmExNjgxZDAtODc2NS0z
NDk4LTkzYmItZWQzNzU2OWZlOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzN5fC0r6d3AzmAeV3PwshNrqivXeA+jNuA9VLDg0nnPqd9aU93GYXv
o1p+/vuZQ3SzkkThEsflh5Wqn2SzXEKABj+NkjfuU/Oom8bdghJ5ra4QQWeZnueE
AIt+6EfzUtdgzEnbo1xnMyn0MLRNiPpNupEgKG+kpoLx5LvkSM0+5gj+lrRbxgT8
qQq2IiQ9jNmN3ijEpQ+6yhrF0HqkUmKw9A9DkYvezT48dlxKYQ0QVZtPZVN/aaNL
8JbGB4IeoaWxYUtoUEpVFBvOi5+tB9S8avbc6A/vjbv8wRSos/Lr0EjWardEZNWk
GrrZcPeGYP8DTQ3JGDjIcPffz4dJxn4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:04 2024 by rpki-client on console-fra.rpki-client.org