Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/270eb20b-9f45-3090-a196-60538efe03be.roa
File:                     270eb20b-9f45-3090-a196-60538efe03be.roa (raw, json)
Hash identifier:          +b8md8F7flteRlWaY+GqKCo1YUZXg2HIAYV4lSc4BUg=
Subject key identifier:   B0:0D:0C:07:5D:57:AC:05:3C:86:38:8D:88:58:19:69:5C:C6:73:77
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F43285847AE36B9F37EB39C8DE57FA880
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/270eb20b-9f45-3090-a196-60538efe03be.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     33442
IP address blocks:        149.23.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b9:f3:7e:b3:9c:8d:e5:7f:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=91a06798-fb68-4b09-99f6-f092634d6ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:ba:b4:b1:f4:24:78:a8:60:9d:cc:a9:cc:
                    6e:b6:69:79:d4:b9:e4:a5:21:28:d4:49:14:10:2d:
                    6f:76:18:b8:2d:7c:8e:ae:77:3a:0b:30:a4:11:08:
                    0d:38:e6:8f:be:13:bf:62:3e:5e:aa:25:3d:48:15:
                    3e:33:3e:91:8b:f5:24:cc:82:23:32:67:d2:e4:ba:
                    db:35:82:78:e6:e7:db:cb:6e:0a:66:c0:ff:f0:ce:
                    44:44:7f:56:ba:34:ac:f2:32:02:fd:e0:af:cc:a4:
                    a9:42:a9:05:50:4b:30:97:de:c0:73:09:6a:83:c6:
                    63:62:65:cc:20:c6:b4:07:5e:ea:e6:44:80:4b:3d:
                    4f:0e:b9:98:71:fe:f6:ff:e6:d6:d4:6b:5f:a8:a9:
                    b5:e3:48:63:6b:75:29:24:64:c8:18:18:0f:10:44:
                    bd:49:29:df:86:77:91:87:9b:19:1b:c7:a9:3e:31:
                    00:2e:bb:e0:7d:d9:23:1a:bc:14:d3:81:e4:d1:3e:
                    33:fc:ed:44:f6:f9:d7:d2:df:6b:2e:b2:b6:39:01:
                    07:b1:19:85:3f:29:6c:4d:47:13:bd:d9:7f:03:86:
                    41:df:fd:9c:f5:c4:4e:25:eb:b3:31:84:36:b6:98:
                    55:c1:3b:0b:18:de:bc:c5:4f:77:a6:8e:52:e3:d7:
                    50:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:0C:07:5D:57:AC:05:3C:86:38:8D:88:58:19:69:5C:C6:73:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/270eb20b-9f45-3090-a196-60538efe03be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:26:96:17:4f:4b:b6:5a:f8:79:83:67:1d:fe:b7:cd:3d:
         1c:af:dc:98:a8:53:82:ac:3c:de:40:fe:90:59:b4:df:97:ba:
         d3:9c:57:f9:87:00:94:19:00:7b:87:1c:ac:57:98:a3:36:ea:
         2e:4f:d4:84:7c:71:e2:69:d4:db:7a:b3:f9:57:6a:53:df:3f:
         11:ee:55:7c:68:64:2f:a3:a6:d6:21:71:67:12:d9:04:f0:60:
         3d:f9:de:ba:91:8c:b1:53:1e:29:39:35:ce:28:b5:25:ac:bc:
         22:0b:e2:86:21:c2:9d:93:3e:03:e8:89:77:9a:52:a1:06:8d:
         fe:a2:8c:1e:f2:0d:13:7e:44:a7:d6:b2:e2:8c:69:77:d0:04:
         bf:73:9b:9b:64:3e:4f:5d:59:e4:2e:99:4e:96:91:00:66:2d:
         c8:45:3a:36:b8:61:82:f6:5b:70:6e:7c:ff:4b:57:99:6f:2d:
         1f:2e:1a:f2:eb:eb:ca:12:c2:0b:ac:a7:76:8b:e2:5f:f7:33:
         91:2b:f3:f8:1d:dd:4b:98:72:84:61:92:28:fa:0e:c7:00:30:
         22:2c:8f:de:7c:73:df:4d:f7:af:44:ed:35:51:8c:79:b2:26:
         ea:43:ea:c3:a7:95:46:fc:3c:40:f6:af:d4:37:7a:f9:e0:fd:
         0a:55:3e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:16 2024 by rpki-client on console-fra.rpki-client.org