Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa
File:                     fa1681d0-8765-3498-93bb-ed37569fe8e6.roa (raw, json)
Hash identifier:          yhmIK9w/293yB6ehznP8skg+aSDCOcblnTOk2gl9L8A=
Subject key identifier:   6B:34:4B:DB:6B:C1:FB:9E:1E:E8:F8:47:66:01:88:8C:D4:EE:5D:21
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584944693FA5A6CDCC8D659F6C80
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     11290
IP address blocks:        24.122.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:3f:a5:a6:cd:cc:8d:65:9f:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=d357dea8-bc8b-4419-8aab-032b11432a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:05:8e:63:75:ad:b4:dc:7c:b4:b1:c8:cb:
                    28:ca:f7:ae:5c:93:62:f4:c6:9b:2e:80:f0:33:40:
                    79:22:6d:53:fc:16:cd:f0:2a:85:b2:9c:cc:cb:52:
                    62:33:e6:4b:97:4c:c5:2e:51:f9:58:a8:f3:cc:34:
                    a7:96:f7:7b:ec:13:7e:d6:10:89:6f:98:52:f9:25:
                    f1:41:c0:f2:09:09:d0:33:6e:42:60:f4:d4:27:2b:
                    02:41:3d:37:8e:67:b3:45:56:7f:75:54:39:a3:83:
                    c3:3c:72:cc:42:05:b6:93:c5:50:e4:bf:97:cd:de:
                    6b:6d:e6:42:5e:89:ce:f9:24:2c:db:4f:db:cf:2a:
                    82:98:2e:ba:25:cd:6f:5e:23:7e:1a:c5:8d:72:22:
                    58:00:db:88:c5:41:82:75:8d:f3:fb:96:7a:a9:8b:
                    d9:07:42:4a:a0:23:42:cb:04:c1:c9:2f:02:41:db:
                    40:c1:95:13:89:8c:c8:bf:ff:a6:33:15:6a:93:f6:
                    13:0d:62:bf:c2:6a:2a:c7:56:5c:d9:9a:67:6d:b3:
                    27:c1:64:f3:35:fc:f4:65:92:10:84:39:d7:3f:ee:
                    d2:b3:8f:4f:83:01:4c:80:e9:ed:fd:ae:70:7d:e0:
                    63:b7:70:93:3c:12:4e:8b:e0:83:03:8a:e1:65:d5:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:34:4B:DB:6B:C1:FB:9E:1E:E8:F8:47:66:01:88:8C:D4:EE:5D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fa1681d0-8765-3498-93bb-ed37569fe8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.122.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:60:e9:af:04:ef:38:89:cb:03:85:5e:10:6f:a7:bc:7f:
         68:fc:9a:c4:bd:23:f2:ac:31:5a:1c:00:07:ee:8d:9d:1b:05:
         54:f2:97:01:6e:42:0b:05:bd:e3:37:46:b4:81:48:83:97:33:
         00:a7:ce:f8:72:43:eb:ad:a9:c2:f8:9c:9b:21:fb:b5:b3:72:
         19:ec:ee:5d:fc:fe:04:4c:bb:8c:e5:ce:6c:e8:8e:07:83:09:
         34:e2:1e:fa:5f:a0:d9:c6:0b:7d:fb:09:9a:6d:d9:15:55:cf:
         b6:49:31:f8:60:e2:12:f7:31:85:58:d2:82:da:a8:96:e5:79:
         5c:c8:79:4a:98:c3:c7:e5:85:ce:56:3b:4a:a6:15:ca:b0:e3:
         81:26:39:95:04:cc:8f:17:93:a5:d2:4c:4e:fa:0e:bc:f8:2b:
         96:07:8b:e7:83:af:c3:3f:85:72:b9:7b:a8:e7:98:3b:5f:70:
         b5:1b:2b:91:77:15:42:1d:04:0e:2a:ac:a3:11:25:75:d6:e7:
         f7:6b:2d:c2:cb:a2:11:bb:21:37:d0:af:ba:eb:5e:14:c7:73:
         8e:90:90:be:d9:bf:1d:db:7e:76:9b:c2:79:1d:4b:91:35:5e:
         1f:a4:38:e7:ff:57:08:73:21:ea:6f:28:18:c5:45:db:3d:35:
         0c:57:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:40 2025 by rpki-client