Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa
File:                     1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa (raw, json)
Hash identifier:          ciKkEQJmmfiwuJ2mhb+n5kD2A+Xts5euiJ4zlO6ntAo=
Subject key identifier:   E8:8B:54:6D:BA:5E:77:F5:4C:B6:31:36:3E:2E:C9:8B:D0:40:B7:EE
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F4328584769D0D78A5B8FF2EDB3342D80
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     0
IP address blocks:        149.112.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:d7:8a:5b:8f:f2:ed:b3:34:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=2fbd6e9f-165a-4c39-9523-386147fd096c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:44:08:7b:bc:84:a3:3e:cf:4f:1e:24:d5:5a:
                    97:f9:a4:02:43:59:13:7b:93:df:9b:2a:41:0f:f1:
                    a7:14:26:8a:c2:3f:56:69:32:d8:fa:d1:b6:d3:96:
                    de:22:02:34:c1:72:a3:59:17:5f:ca:f9:41:68:cb:
                    83:3e:9c:b7:39:30:6f:68:02:2b:fc:f9:fc:b7:06:
                    c1:cf:58:24:bd:8b:69:b9:f6:dc:a9:a0:e9:c8:f1:
                    53:b7:f6:e1:a9:8e:77:fc:ef:b3:5d:d8:f2:04:0c:
                    51:ef:a3:f9:b9:69:e9:1d:c2:85:02:3b:5d:56:0f:
                    5a:17:02:77:34:9f:08:c3:56:23:6c:e3:34:14:11:
                    b3:68:9f:37:b5:af:57:a0:e9:48:22:a9:34:06:07:
                    8a:27:97:5a:f5:1c:ef:01:bc:5a:84:e7:cf:c2:aa:
                    b7:8b:a5:98:d3:87:00:df:2a:95:e4:a3:a1:0b:18:
                    f2:d6:79:fc:14:b8:98:c7:7c:f5:d7:b7:4f:41:3c:
                    00:60:3d:8d:07:e8:e9:0a:19:8c:13:ba:23:bb:40:
                    73:6b:e8:0f:a4:d2:91:ed:a9:99:49:9a:59:80:a6:
                    17:fb:fa:b9:5e:02:45:21:33:31:0f:4b:02:0b:34:
                    fc:42:8c:fd:54:f0:af:bc:36:8f:cc:78:47:31:1f:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8B:54:6D:BA:5E:77:F5:4C:B6:31:36:3E:2E:C9:8B:D0:40:B7:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:4c:af:47:6b:3a:b4:96:14:37:60:e4:28:4b:25:6c:34:96:
         7c:7b:32:ec:08:53:99:81:5e:af:f4:00:c8:44:97:d4:cd:2f:
         fd:54:e4:c9:2a:d4:8d:f3:d7:82:db:4b:64:ef:5e:4a:a1:f0:
         3f:87:e2:25:88:7b:70:13:f6:29:5a:39:21:95:45:a4:24:cc:
         f4:a0:a7:d5:d1:c1:e3:06:42:fb:05:c2:e2:48:65:03:aa:77:
         46:12:27:f4:e6:46:9e:86:a1:9b:1d:97:2f:ef:a1:f0:ea:c5:
         47:60:fd:1c:3a:03:86:8c:7c:11:36:dd:54:5a:24:44:ff:48:
         79:50:c4:ad:e6:82:ce:f4:91:f3:d3:25:82:db:c1:45:45:d0:
         08:e8:a1:1d:b4:91:9b:a4:2d:4a:88:5d:6a:72:db:48:2b:aa:
         40:2b:0b:1e:6b:88:85:ff:aa:f9:e8:11:b2:cb:60:38:f6:7d:
         3c:53:8b:ae:2f:05:f0:17:87:26:c8:4c:fc:d8:51:18:e0:8e:
         49:ca:67:66:e5:3e:dd:56:79:b2:95:ba:b5:ea:ff:62:76:6b:
         43:fd:f3:f1:fe:c7:25:0d:b2:3e:b4:39:58:f0:ef:fa:07:72:
         5a:86:a0:55:07:dd:08:5d:29:d4:b8:f6:a2:68:a9:c5:df:f4:
         e0:f7:bb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:27:57 2024 by rpki-client on console-fra.rpki-client.org