Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa
File:                     46d58c35-f7f4-3dd1-8495-938d58077651.roa (raw, json)
Hash identifier:          YV9miJTtneXMOMTEJrxxZuVr51LBGuAhYm4T3b1KQu8=
Subject key identifier:   8F:36:C7:16:68:03:11:D2:73:35:F7:93:54:E7:BD:61:21:73:61:CB
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858457A486F30D2E955DE56D6C560
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     1280
IP address blocks:        149.20.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6f:30:d2:e9:55:de:56:d6:c5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=763da75e-41b7-4b61-ab96-baaf873a612e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e8:9b:02:4f:41:93:a2:aa:b2:7f:21:82:2f:
                    0a:77:7c:84:6f:9a:0d:89:82:1d:93:c2:5b:8c:12:
                    a2:d5:aa:d2:c3:c3:f5:12:e2:80:2c:e6:ce:1b:75:
                    3c:89:a6:bb:2b:ee:f2:52:cd:bb:73:49:1b:d5:57:
                    0c:95:44:bc:ec:6a:0f:75:86:c0:7b:83:ff:83:53:
                    59:b2:de:8e:5b:eb:02:bf:1d:f1:5c:81:ca:79:88:
                    89:15:fc:28:12:04:e2:95:3d:f2:2d:47:f4:85:62:
                    2d:c0:65:bd:e2:93:18:77:87:d5:35:d4:ae:fb:4b:
                    6c:d9:a4:62:72:e8:61:af:7a:55:e9:9b:f1:86:24:
                    dd:27:5a:5f:bd:98:c9:d9:a2:11:25:8f:d2:a1:9f:
                    95:4c:80:be:ce:4d:81:ba:dc:64:00:ac:0e:f7:09:
                    bf:d2:c6:5a:8a:e2:0a:b4:d6:04:10:01:ab:cd:12:
                    d3:49:17:e1:55:c5:e9:dd:33:c9:a3:03:2f:21:7d:
                    bb:0c:7e:b0:4f:60:e4:48:62:fd:57:86:a9:c5:ec:
                    f9:aa:77:33:7d:f6:3c:af:bb:c8:20:27:06:fe:2f:
                    83:8f:99:2e:1c:39:6b:d6:01:5c:98:5d:87:88:58:
                    7e:39:02:e0:fd:f4:62:21:5e:d6:dc:2e:20:64:c8:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:36:C7:16:68:03:11:D2:73:35:F7:93:54:E7:BD:61:21:73:61:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/46d58c35-f7f4-3dd1-8495-938d58077651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:14:1c:3b:61:4b:e1:1b:05:fb:ec:53:89:8d:6c:79:41:f7:
         e9:b2:4f:ab:d7:9b:3f:61:b7:f2:4d:9a:12:f4:9a:a3:93:90:
         39:21:41:9e:1f:6c:01:27:50:d3:43:04:78:48:6e:ae:a2:91:
         42:b8:63:3e:83:1b:c7:15:f1:83:54:d9:68:3d:04:9f:ef:3c:
         9c:92:c2:d1:47:c4:92:e3:8b:52:18:e9:2e:d3:bc:a2:dd:07:
         9d:32:bd:1d:69:f1:d2:85:41:18:18:0e:e5:d0:b6:c8:69:57:
         6a:f0:26:24:80:7d:70:c9:d9:c6:18:1b:5c:ab:6b:a8:6c:7b:
         f1:f1:b0:84:f2:75:d0:02:5e:8f:6e:48:a7:28:a9:61:ba:51:
         a9:0a:1f:25:41:cd:1a:bf:44:7c:18:18:a2:68:1e:eb:8d:b5:
         31:90:85:b4:b8:37:24:15:90:0d:a5:ea:b3:0f:23:71:25:3f:
         4c:99:2c:2f:05:68:5e:36:d8:f7:86:3c:a7:97:fe:74:b7:4b:
         b6:db:e2:f1:6b:5b:e3:c8:15:00:69:f6:d0:05:a1:ef:da:4e:
         1f:27:5f:27:2c:90:f0:88:2c:7b:53:d3:39:2f:a8:3a:11:cc:
         15:37:f2:61:70:3a:75:37:7f:36:e5:d5:9f:d5:77:f1:df:ad:
         29:85:63:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 17:06:11 2024 by rpki-client on console-fra.rpki-client.org