Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa
File:                     18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa (raw, json)
Hash identifier:          Y3LhS050swk2b3CjzXkpbWCKi2K545T470IEQRjbcgE=
Subject key identifier:   6D:FD:8D:BD:E9:2C:A5:73:73:4C:DC:24:6D:C4:55:D5:39:B4:CD:84
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F432858478CB687DF40BFFC9EB0FD6810
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     0
IP address blocks:        149.112.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:87:df:40:bf:fc:9e:b0:fd:68:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=1fa4a995-f7cb-4090-8906-33ce40db6b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:4c:e6:c4:1f:e4:92:ed:fb:85:9d:26:6a:
                    db:db:5a:47:ff:1c:81:d5:87:7e:d6:6c:a2:17:0e:
                    6f:1e:60:6e:ba:d4:e8:f5:d5:8e:13:f3:b2:a5:33:
                    a4:9e:34:16:c7:4f:bf:f0:2b:1b:f2:9b:10:2e:63:
                    8d:21:a3:1c:cb:2c:50:3e:d8:e3:ab:3a:f3:b8:10:
                    25:3b:38:db:63:01:a6:8b:18:26:a9:93:e6:fb:63:
                    6e:2c:82:82:0c:9a:87:5d:8f:90:3c:9e:28:a3:34:
                    b0:8a:fe:de:f0:b4:b3:2d:34:b9:c6:dd:42:74:00:
                    47:ab:ef:4e:bf:be:ae:f4:85:df:cd:ee:2c:51:d7:
                    87:18:98:b9:7e:2f:09:46:a3:32:ca:eb:d6:d8:6f:
                    2c:e8:e8:11:ee:33:07:17:e8:19:81:a7:a4:3a:ba:
                    b2:f6:18:db:7c:bc:fb:a0:aa:56:a0:2f:af:76:36:
                    43:e0:29:17:ca:4b:3e:6f:d6:62:43:2b:57:2e:f2:
                    49:6b:aa:ad:ac:4b:30:0f:20:40:96:2e:f8:68:7c:
                    b8:89:6c:07:95:b8:6b:8b:e7:50:28:34:3b:ca:e2:
                    76:77:d2:48:1a:2c:e6:31:b6:6d:ee:e8:22:f5:f9:
                    5e:9e:62:44:fb:a3:f1:82:e8:bb:07:d0:ec:31:78:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FD:8D:BD:E9:2C:A5:73:73:4C:DC:24:6D:C4:55:D5:39:B4:CD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/18700e6e-0047-3c41-ac9b-aeeb84fcfb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:80:ee:4b:d7:1a:46:7b:90:83:be:06:76:b3:a0:b9:f9:
         49:a9:c6:d5:17:4e:e7:c3:07:64:30:61:55:c1:40:2c:7a:87:
         55:54:5a:bf:b7:ef:27:df:a6:96:e4:df:b1:f8:06:fd:6a:ce:
         f6:96:59:38:2e:86:66:57:fb:69:fc:4a:4c:2a:0a:80:ef:8b:
         a3:00:04:03:63:4f:05:5b:c2:b9:ab:3c:8c:85:c3:f8:fa:15:
         15:47:17:76:cc:49:47:7f:af:7c:b4:0c:14:1a:86:ca:56:67:
         4b:51:f0:37:b9:81:ab:7c:9e:7e:f7:2d:7b:d6:71:47:3a:5d:
         2f:fa:d2:da:7b:fb:95:bd:1d:bb:3d:4b:fd:d7:22:68:52:5c:
         d1:46:e8:9c:2e:42:db:01:14:62:00:ab:48:76:c6:c5:38:12:
         f8:70:9f:3c:b1:42:1e:5b:87:7a:2e:2d:33:c5:ec:f9:38:e1:
         6e:8f:1e:67:ef:a4:f4:ec:7b:71:ed:be:76:1e:00:fe:52:da:
         a8:95:3c:0f:1e:7f:ba:62:b3:b9:9b:9b:0c:d5:69:de:83:c2:
         1f:6a:86:88:bc:a7:a9:b6:63:6f:6f:ef:b2:2a:af:3b:02:31:
         19:83:2e:92:80:a8:be:51:86:07:41:5d:08:c3:9a:88:8a:11:
         43:35:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:14:02 2024 by rpki-client on console-ams.rpki-client.org