Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa
File:                     a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa (raw, json)
Hash identifier:          /se1NPPGRxD6SmhAY3atXkt9pho7tPdGxLd0k+rGhao=
Subject key identifier:   28:95:C2:B0:9F:0A:21:47:D1:FF:19:E4:F2:2E:C1:4F:E9:1A:19:22
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858457A486A27B640C31228324600
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     30132
IP address blocks:        149.20.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6a:27:b6:40:c3:12:28:32:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=82cd008c-873c-4132-b5ce-ff2bc24660e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:f6:c0:90:d1:ef:85:aa:33:84:2e:d3:cc:
                    15:57:58:cb:5c:bd:3b:54:4d:3f:1e:dd:ad:74:33:
                    cc:9a:7d:c9:f3:ff:67:c6:9d:93:e4:ef:6d:52:94:
                    b7:e6:0b:89:60:22:d9:82:27:9f:66:88:66:f3:6e:
                    76:ef:93:2b:b8:e0:aa:d3:25:92:d7:b2:c9:78:07:
                    89:9e:5b:ba:46:f3:ad:63:d4:b5:c3:cc:d5:1a:2b:
                    c5:15:41:d9:08:8f:60:e8:bf:19:14:c6:d2:67:3d:
                    ef:45:5c:27:ba:91:e7:67:15:4a:b3:ef:48:1a:0e:
                    08:1f:89:e8:4e:01:73:24:14:ba:f5:94:71:6f:15:
                    e2:ce:f5:c0:88:4e:26:f9:e5:98:df:98:5d:02:26:
                    1a:a8:82:ad:86:cf:b8:0a:d5:c7:16:01:2f:31:b9:
                    cb:5b:86:5f:8f:31:51:d5:57:86:58:a9:5b:26:dc:
                    b4:90:82:ea:bd:b1:67:70:4c:f9:fa:32:25:c2:e9:
                    30:ec:24:21:37:48:1e:21:c1:b9:bd:2e:36:e6:99:
                    35:b1:1e:d6:db:9b:ff:32:ad:c4:73:b2:2c:53:b4:
                    9f:9c:c7:ef:2d:6d:18:67:2c:49:c3:9c:75:3b:0e:
                    d3:9e:56:05:4b:93:95:97:f8:5a:88:15:a1:d3:e5:
                    ed:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:95:C2:B0:9F:0A:21:47:D1:FF:19:E4:F2:2E:C1:4F:E9:1A:19:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a4ca86cf-fd4c-33b7-9c65-4d414a84835e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:17:45:99:e7:2a:3e:76:42:9d:0a:43:d6:28:96:81:c4:
         c8:49:ac:58:81:68:4a:53:53:aa:42:c3:0f:ad:90:37:9a:41:
         6c:8f:d0:d8:14:aa:5f:84:7a:31:80:64:25:16:40:f6:dd:fc:
         cc:cd:7c:84:b3:c2:d4:a3:de:16:62:a1:05:cb:71:7b:40:74:
         42:21:09:55:d2:be:b3:1d:3c:b4:c5:f3:f1:6c:8e:9e:5c:74:
         af:3b:f0:f6:70:13:b9:7e:a3:50:05:88:5b:b4:cd:27:9b:de:
         b9:f5:11:34:a7:48:d1:46:0d:55:85:8d:30:ce:07:29:a9:0a:
         59:10:c3:8b:b0:9f:04:42:61:91:e3:4e:b0:b7:e3:04:77:65:
         bf:45:2b:a4:6e:ef:94:27:d0:59:f3:04:ae:73:78:20:19:bd:
         3c:17:f1:94:76:96:ab:12:d1:a6:a9:c7:6d:2b:12:74:87:87:
         ad:b0:1d:67:b8:eb:44:10:04:2f:e8:54:99:db:80:8f:e5:c7:
         68:b7:58:a2:72:e6:9b:1b:25:16:0b:6a:31:51:70:d7:8a:7c:
         f1:f8:5c:fa:f3:a9:06:41:21:7a:8f:4e:30:61:50:01:14:ea:
         b4:87:72:0b:b9:14:7c:fc:69:36:4f:c6:cd:e0:b8:9a:e4:17:
         c1:5f:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:52 2024 by rpki-client on console-fra.rpki-client.org