Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa
File:                     1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa (raw, json)
Hash identifier:          ql6VkCgFffwpzuEkDv9zMrHp7jT2DSEoa4uwt1HJTKk=
Subject key identifier:   63:E6:35:16:D7:34:A5:AF:C3:7B:D1:B5:C5:AA:46:F1:39:CE:AE:8A
Certificate issuer:       /CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
Certificate serial:       010D0C9F43285844C91FB7EDD5D4ECC75588FDE0
Authority key identifier: 65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa
Signing time:             Mon 05 Feb 2024 02:00:26 +0000
ROA not before:           Mon 05 Feb 2024 02:00:26 +0000
ROA not after:            Sun 05 May 2024 01:00:26 +0000
asID:                     0
IP address blocks:        149.112.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c9:1f:b7:ed:d5:d4:ec:c7:55:88:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee5141e-a069-4955-8c55-4da5dfd36fa7
        Validity
            Not Before: Feb  5 02:00:26 2024 GMT
            Not After : May  5 01:00:26 2024 GMT
        Subject: CN=677bafda-cf90-404a-a879-f7bff1669256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9d:f3:2b:a0:90:4f:ec:37:d1:91:e7:fc:4c:
                    8d:e8:6f:5b:b8:c4:ad:19:71:d7:66:18:29:ad:b9:
                    cc:be:f5:c0:0e:41:4c:11:95:1e:e1:56:ce:bd:01:
                    7d:c6:7e:1e:19:2c:95:8f:1e:23:f7:5e:19:68:20:
                    fa:b0:4f:06:80:b0:ac:e0:8b:9e:a2:fd:a7:6a:6e:
                    7f:fb:cb:fa:47:47:45:b9:58:52:0e:ec:ae:23:f7:
                    6c:63:fd:8d:c5:5e:82:b0:f1:ff:c8:22:9d:6e:bc:
                    a1:93:02:75:85:86:96:08:21:7a:d4:d3:1e:05:53:
                    60:3b:ec:93:07:26:4b:8a:6d:23:c3:1c:46:ff:58:
                    4c:cb:0d:74:71:20:73:b3:06:80:9d:ea:61:4b:0f:
                    95:75:d3:c9:b7:34:34:dc:54:42:ba:cc:b4:f7:38:
                    60:b0:eb:ff:8e:41:47:a6:0a:79:f8:c8:0c:47:4f:
                    52:3d:ec:03:33:6f:5d:7c:bc:ff:86:f8:f2:31:24:
                    83:99:e3:02:5f:5a:68:4a:68:f6:d8:ac:37:83:a9:
                    e5:13:61:2c:9b:94:44:39:7e:a3:e9:68:ee:a4:84:
                    97:bb:be:83:4f:0d:39:0f:73:61:f5:36:67:80:8d:
                    df:5b:19:b8:6d:7c:69:b3:56:cf:9e:ed:83:47:12:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E6:35:16:D7:34:A5:AF:C3:7B:D1:B5:C5:AA:46:F1:39:CE:AE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/1bc46d58-24b4-3024-90ad-09aa6f8baa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7/4ee5141e-a069-4955-8c55-4da5dfd36fa7.crl

            X509v3 Authority Key Identifier:
                keyid:65:C9:42:6B:A0:76:47:52:56:27:29:98:79:48:05:81:BE:B5:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4ee5141e-a069-4955-8c55-4da5dfd36fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:a6:c0:51:5a:33:55:58:7d:c3:a5:8b:a0:2a:3c:aa:09:
         66:fe:9d:3e:44:d0:d5:c7:76:00:75:d9:5a:f2:02:c4:23:94:
         54:ea:84:7f:c8:cb:d0:76:52:ef:7d:4e:81:39:89:57:8c:86:
         e0:a0:e2:58:35:90:38:9c:b1:1f:c1:05:2b:4c:12:7b:1d:13:
         a2:f3:a9:33:69:07:1e:4f:27:da:66:f3:32:3b:24:bf:29:bb:
         36:95:d3:65:53:5e:34:6e:a4:24:68:a8:8b:54:9c:c3:12:57:
         27:94:39:33:48:57:42:98:01:ed:fb:ad:e5:92:d1:b3:b8:ce:
         2d:a1:56:8a:0e:cb:8f:0b:17:2a:af:01:4e:33:fc:44:92:46:
         50:d2:a7:65:ff:0b:c9:c7:f0:3f:c1:1d:5b:73:f0:bd:29:bd:
         93:4f:b0:0f:20:e5:21:30:14:73:89:af:d5:99:25:d8:f2:ab:
         82:f2:66:29:ea:84:97:02:de:36:18:a1:db:24:a5:78:98:77:
         1f:4b:76:aa:65:f9:b7:a9:fc:bf:7a:b9:41:95:1e:14:26:23:
         15:5c:2f:31:15:02:e3:f1:01:37:3a:87:62:af:86:7e:f6:f3:
         f4:6e:65:e4:40:fe:18:ad:a0:da:ce:1e:2b:bd:05:c6:71:31:
         da:1f:14:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:46:23 2024 by rpki-client on console-ams.rpki-client.org