Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa
File:                     40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa (raw, json)
Hash identifier:          oJVQxn2fDL5a0mBsqcUWTH10xBX3xWq5nWrdOpQHau4=
Subject key identifier:   E5:41:1F:52:1C:0A:7B:CE:12:E3:BA:FD:B6:91:4C:E7:9B:D3:BE:FA
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858474850AA700EAE9C2034046760
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     22612
IP address blocks:        209.188.7.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:aa:70:0e:ae:9c:20:34:04:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=b7c4a3ae-5ffa-46fb-9562-bb71e25c35e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:b8:3a:d5:4d:f5:a8:c4:83:24:7d:35:48:
                    e0:40:8d:6d:5d:fa:0e:80:9d:8f:1f:27:ad:c4:ec:
                    dd:bc:77:da:27:80:c8:14:65:26:18:71:de:cc:90:
                    fb:0a:e1:db:b3:6a:87:dd:d1:e4:9e:8a:b0:35:ca:
                    04:1b:67:7b:9a:8b:c5:50:5a:87:4b:cf:83:73:19:
                    c9:b5:19:fe:a6:fc:fe:5b:82:a5:60:e9:84:7e:fd:
                    73:1e:8a:90:dd:8b:22:90:73:3e:46:56:4a:9d:84:
                    45:90:68:df:c1:a4:88:d8:75:cc:5b:7d:74:bb:03:
                    ef:d2:12:94:16:18:01:a0:8a:b8:96:06:19:d7:98:
                    f4:f2:ac:95:8e:9f:82:16:a0:42:c9:2c:c2:84:73:
                    d7:8a:38:cb:65:54:d0:1e:47:5d:eb:33:dd:54:3f:
                    da:f2:6a:d8:c4:0e:72:79:ee:d8:16:aa:77:cd:bc:
                    dd:14:22:9f:38:55:b5:29:28:c8:b8:21:24:34:8d:
                    c6:f4:23:fa:26:f6:48:47:3b:6f:c7:0a:5c:f8:5e:
                    b6:e5:dd:c4:c8:3c:c5:de:3c:5e:da:85:28:79:6a:
                    bf:3a:a2:2f:f4:7d:98:90:ee:f8:23:cf:aa:b9:56:
                    f5:aa:96:dc:0c:a7:22:65:19:84:5f:38:0a:7c:60:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:41:1F:52:1C:0A:7B:CE:12:E3:BA:FD:B6:91:4C:E7:9B:D3:BE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/40a0ce35-8c2e-3f43-a4c3-8ec6d4afde39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.7.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:12:84:87:da:fb:61:82:02:db:d5:7d:81:66:c6:9f:94:
         84:7b:fb:58:8d:ca:d8:11:cd:73:63:ff:ac:57:ef:00:1f:d8:
         a7:e8:64:93:6b:3d:1a:e9:de:01:08:27:90:ac:7d:fb:41:c3:
         1d:13:0e:fb:8a:31:fd:24:72:1b:12:3d:df:8e:92:cd:7c:6e:
         6b:82:3a:e8:47:dc:44:56:78:f1:9e:96:23:7c:7f:2a:71:37:
         94:10:ab:a8:4e:cd:9a:24:75:de:cf:10:1f:bb:cc:7b:5d:0e:
         5b:a2:c6:f7:c5:6d:d8:bb:da:99:91:94:27:c1:e6:f1:71:81:
         27:e2:ea:b0:32:e1:04:29:ef:53:77:b2:a8:04:02:22:df:33:
         b5:aa:13:e0:18:e8:c9:73:5b:2c:6d:97:19:90:24:1f:67:fc:
         f9:ee:8e:c7:73:09:27:81:f5:44:3a:74:e4:02:40:2d:8f:5a:
         61:81:8b:0d:a1:7e:d4:82:db:f0:62:2c:e8:37:58:38:2b:83:
         3f:42:6a:ff:b7:ee:f5:29:4d:15:80:32:a5:f8:38:a7:9a:31:
         74:08:05:97:88:26:80:c2:c3:72:ef:d4:8d:63:e3:f4:c8:52:
         1d:6a:3a:b5:e3:e6:6e:a8:3f:0d:af:02:75:d2:40:04:ba:a1:
         3e:8c:73:14
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEdIUKpwDq6cIDQEZ2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI0MDkyMTAxMDAzM1oXDTI0MTIyMDAyMDAzM1owLzEtMCsGA1UEAxMk
YjdjNGEzYWUtNWZmYS00NmZiLTk1NjItYmI3MWUyNWMzNWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ24OtVN9ajEgyR9NUjgQI1tXfoOgJ2PHyet
xOzdvHfaJ4DIFGUmGHHezJD7CuHbs2qH3dHknoqwNcoEG2d7movFUFqHS8+DcxnJ
tRn+pvz+W4KlYOmEfv1zHoqQ3YsikHM+RlZKnYRFkGjfwaSI2HXMW310uwPv0hKU
FhgBoIq4lgYZ15j08qyVjp+CFqBCySzChHPXijjLZVTQHkdd6zPdVD/a8mrYxA5y
ee7YFqp3zbzdFCKfOFW1KSjIuCEkNI3G9CP6JvZIRztvxwpc+F625d3EyDzF3jxe
2oUoeWq/OqIv9H2YkO74I8+quVb1qpbcDKciZRmEXzgKfGCj4wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOVBH1IcCnvOEuO6/baRTOeb0776MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDBhMGNlMzUtOGMyZS0z
ZjQzLWE0YzMtOGVjNmQ0YWZkZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUH0bwHgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB5ahKEh9r7YYIC29V9gWbGn5SEe/tYjcrYEc1zY/+sV+8AH9in6GST
az0a6d4BCCeQrH37QcMdEw77ijH9JHIbEj3fjpLNfG5rgjroR9xEVnjxnpYjfH8q
cTeUEKuoTs2aJHXezxAfu8x7XQ5bosb3xW3Yu9qZkZQnwebxcYEn4uqwMuEEKe9T
d7KoBAIi3zO1qhPgGOjJc1ssbZcZkCQfZ/z57o7HcwkngfVEOnTkAkAtj1phgYsN
oX7UgtvwYizoN1g4K4M/Qmr/t+71KU0VgDKl+DinmjF0CAWXiCaAwsNy79SNY+P0
yFIdajq14+ZuqD8NrwJ10kAEuqE+jHMU
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:52 2024 by rpki-client on console-ams.rpki-client.org