Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa
File:                     e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa (raw, json)
Hash identifier:          SCcD1/3xSIcS7lkhIjMD+vxNBDg58DSXpedwHQm1MK8=
Subject key identifier:   CA:5C:EF:A5:E1:E1:6D:38:A8:0B:5A:FF:AE:9C:BB:91:6F:79:1F:A1
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F43285844ED6AA3E7B91BE516F082E0A0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     0
IP address blocks:        149.112.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:a3:e7:b9:1b:e5:16:f0:82:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=76b135ac-61e6-497a-85d0-7eca8ffa6d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:4d:2a:3c:cd:92:fb:6f:75:de:61:5e:ff:
                    36:4c:ef:38:8b:02:b4:39:28:76:5b:ef:28:81:5f:
                    bc:b1:1c:74:d4:0a:3d:05:e1:72:6c:f2:ff:e9:a6:
                    ab:47:d3:9e:dd:06:9c:e9:96:14:37:81:80:31:5b:
                    f3:42:62:92:90:05:f0:45:b8:67:e1:c7:5c:29:bc:
                    bf:36:d1:3f:56:de:88:11:c0:35:42:34:f9:8b:0b:
                    89:c9:e6:20:e4:85:71:e4:9d:36:17:39:89:7c:49:
                    b1:80:1d:78:45:0e:3b:7d:23:cf:35:df:dc:4b:16:
                    eb:1c:08:53:f0:00:c5:6d:ab:29:b4:cf:06:7e:9a:
                    ca:5d:20:f7:7e:1d:9d:49:3f:a7:d0:2f:ea:b8:ff:
                    aa:f6:0e:eb:65:3e:d1:ab:66:0a:2e:47:14:46:37:
                    f1:61:cd:3c:c0:dc:c7:25:74:fd:89:e0:cd:fe:ed:
                    0e:78:6c:b8:e5:cd:a9:89:4d:2e:95:3b:cd:ea:55:
                    67:28:a4:a2:e1:3e:40:e4:72:ac:27:ac:46:25:f5:
                    1d:77:63:a0:b0:6f:4c:24:a0:91:9a:a0:54:8f:f9:
                    75:85:20:07:1f:6c:b0:62:c7:6f:32:2e:78:86:89:
                    6f:51:ef:e8:82:0d:aa:9b:e0:22:4f:43:ea:91:d0:
                    6e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5C:EF:A5:E1:E1:6D:38:A8:0B:5A:FF:AE:9C:BB:91:6F:79:1F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/e18caa4f-0bf9-37a9-8e3a-930e8d7a8883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:c4:d1:28:09:51:19:d3:e3:1c:a4:62:00:f0:55:43:9a:
         de:c4:f0:0a:a1:fb:73:de:9e:f8:08:ec:98:d3:f8:34:91:af:
         2e:f8:09:db:90:40:49:d1:7d:d3:ce:75:ba:e0:28:16:ba:07:
         45:6c:0f:6f:6a:f8:3d:86:75:e0:4b:be:3e:f5:2d:56:79:32:
         cf:fa:77:2c:e0:3c:50:3b:2b:d1:56:0b:30:be:1c:83:3a:d6:
         bc:67:9b:7b:3a:67:38:3b:7f:a0:25:ad:c5:d1:d7:2d:77:84:
         4b:ee:20:0c:d7:a8:f7:a2:c2:8a:30:a5:e1:22:7b:bd:d1:9b:
         bc:c4:94:e0:0e:b9:59:e4:9c:02:e7:48:21:f8:25:97:4b:88:
         80:19:99:b5:bc:1d:da:7f:7c:04:09:1a:7c:3b:60:98:79:f0:
         e0:e5:44:a0:2e:ae:d0:71:48:10:6e:e7:bf:75:87:3b:95:d5:
         ed:4c:19:7d:46:46:ce:14:a6:04:58:c2:ab:70:44:fe:61:41:
         73:6d:64:3a:7b:74:ec:b6:28:4e:bd:74:dc:6c:25:80:27:f2:
         69:e7:c4:a2:31:0a:8a:91:0d:d1:35:f7:c0:00:a0:5d:7e:72:
         eb:25:72:28:ad:b5:27:c6:f6:d4:fc:36:11:17:3d:ed:e1:e7:
         77:89:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:59:26 2024 by rpki-client on console-fra.rpki-client.org