Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa
File:                     fbb7b44b-75a0-304d-8878-021d4d576a6e.roa (raw, json)
Hash identifier:          wzC1FT122seEGTKSO6ijTcyopvecBlPmpy9Oqh+GPYA=
Subject key identifier:   AD:C9:AE:7F:7B:76:DD:0B:82:61:AF:1E:86:87:7B:E5:9F:30:68:99
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285845D933DD6817778C7BA0710400
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     11290
IP address blocks:        24.153.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:dd:68:17:77:8c:7b:a0:71:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=6f7552dc-9626-4eb5-b57d-f05871acc9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:84:3c:d5:49:dc:45:49:6d:4a:16:64:3f:d1:
                    d1:65:0c:fb:49:6c:39:c1:8e:f1:a4:6e:e2:9a:74:
                    9b:9f:34:08:4d:f3:f6:6a:97:b5:31:1d:98:7d:ea:
                    35:23:3c:26:31:ea:5c:bc:28:c2:a4:c9:53:11:1b:
                    5f:d2:88:ee:a6:4e:04:3b:f3:93:7e:d2:89:06:82:
                    e7:83:aa:1b:ef:b9:ce:e1:07:9e:8b:18:c7:bb:eb:
                    33:99:05:a8:9e:de:cd:3f:59:39:d5:76:15:7c:d5:
                    82:f7:28:9e:f3:08:ee:66:85:4f:1b:b4:88:6b:c8:
                    c0:fd:26:2d:85:94:41:94:46:1c:a4:4b:df:77:44:
                    84:07:25:66:fb:bb:b4:7e:6e:f0:27:7d:87:07:39:
                    7c:c5:a9:25:f4:3f:21:dc:38:ac:6b:5e:15:54:e0:
                    10:08:26:20:3a:3d:cd:6a:75:dd:b4:41:a3:f7:e7:
                    ca:e3:63:bf:41:6d:40:01:e5:37:07:a6:ab:8a:19:
                    68:9b:c7:54:67:06:f5:9b:c1:96:f9:26:a0:2b:57:
                    6f:49:21:14:eb:6f:69:e3:9d:e6:e2:76:a8:c9:e0:
                    22:95:a0:b4:86:4f:e3:5e:ba:cb:09:fc:0e:6a:de:
                    a0:5f:08:d2:0d:36:e8:26:eb:c3:a0:89:1c:20:61:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C9:AE:7F:7B:76:DD:0B:82:61:AF:1E:86:87:7B:E5:9F:30:68:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/fbb7b44b-75a0-304d-8878-021d4d576a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.153.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:43:c9:34:92:2a:88:cf:47:e4:a3:74:4f:f7:61:7a:4e:81:
         99:d6:d3:11:6b:63:90:8b:df:54:88:20:47:59:25:a0:0a:11:
         66:72:f3:2c:f3:49:27:98:9d:29:0f:5f:81:2f:88:10:bc:54:
         ab:01:a1:3d:be:0b:a9:53:24:9f:1f:23:3e:12:89:a6:71:91:
         b1:d5:17:76:d1:1d:23:85:ef:62:90:b9:57:b3:e5:77:8b:4d:
         10:df:cf:b1:47:18:4f:00:b5:68:21:e0:36:2f:c4:1b:7e:42:
         b9:54:d1:4a:90:c5:fe:f5:ba:88:1f:ff:52:f1:01:0a:df:d9:
         ed:bf:29:90:fa:ff:bb:46:e0:ee:a9:a6:1e:4f:db:9e:08:37:
         76:63:89:0e:40:9d:de:d0:3a:0b:7e:64:8d:73:22:10:38:5e:
         bc:8a:37:7d:d0:47:66:13:60:f4:1c:7a:dc:98:98:97:bb:0a:
         a8:1e:64:63:65:5d:0f:d8:87:9d:5e:b2:6c:15:c0:fe:8a:81:
         7a:ce:72:c1:cb:03:67:c6:a9:16:50:17:07:8e:be:55:f7:e0:
         e3:58:67:1b:e1:f7:7c:3a:09:3b:15:5d:29:29:2f:46:fc:86:
         fb:20:05:08:a3:50:60:ec:ab:a4:36:a5:b5:f6:2f:a1:c8:ba:
         7c:bd:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:48:23 2024 by rpki-client on console-ams.rpki-client.org