Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/4b8f1b48-6796-39ad-90d8-3f8d159b5057.roa
File:                     4b8f1b48-6796-39ad-90d8-3f8d159b5057.roa (raw, json)
Hash identifier:          JiBpNRFrYvFiyt35oCyQfjVBiCujJij20N0xXFmJO5U=
Subject key identifier:   18:1B:FC:AD:4B:C3:91:0C:86:C9:98:1F:54:4D:6F:3F:89:40:69:E0
Certificate issuer:       /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial:       010D0C9F432858462D367365D5556204E6140C80
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/4b8f1b48-6796-39ad-90d8-3f8d159b5057.roa
Signing time:             Tue 11 Jun 2024 15:14:06 +0000
ROA not before:           Tue 11 Jun 2024 15:14:06 +0000
ROA not after:            Mon 09 Sep 2024 15:14:06 +0000
asID:                     399970
IP address blocks:        149.112.154.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:36:73:65:d5:55:62:04:e6:14:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
        Validity
            Not Before: Jun 11 15:14:06 2024 GMT
            Not After : Sep  9 15:14:06 2024 GMT
        Subject: CN=5c1438bc-df32-4c82-b3ee-bab4e33f2b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:cd:38:23:15:43:4d:47:3b:02:dd:6b:89:
                    e1:06:79:1c:ab:64:0a:3e:25:56:54:f3:61:d2:59:
                    cd:d0:53:ba:da:9f:8b:e9:3e:98:fb:fd:b7:61:fd:
                    96:37:35:36:5e:3c:1d:70:7f:e0:a6:5e:7f:9e:33:
                    ec:62:b1:11:80:c3:72:36:78:ac:e9:32:16:cb:90:
                    d3:62:c2:95:27:3f:d7:fa:3e:d2:b5:bc:f6:b5:cd:
                    6d:2b:0b:dc:55:02:de:db:33:f9:70:c1:ea:62:ad:
                    c6:5d:b7:a1:6e:0b:9c:a2:16:ec:7a:08:ab:f2:4d:
                    7a:4f:1b:85:e2:ab:cb:a3:2b:fd:e2:4a:82:ef:91:
                    15:0b:0d:fe:63:bc:70:2a:b2:13:c9:c9:20:0e:09:
                    0e:41:6e:2f:9e:5c:4b:06:c7:6b:d9:9f:08:03:63:
                    fe:29:48:ec:4e:45:86:e4:28:19:67:2c:20:90:7e:
                    f4:21:94:64:58:e6:ab:e7:3d:dc:3a:8f:8c:2e:0a:
                    26:51:01:21:a6:bc:9d:19:f4:54:2b:31:18:19:1b:
                    60:20:87:3e:06:5d:0c:6e:e7:42:e9:7a:b0:51:0f:
                    e7:e7:c3:ff:c1:1d:f1:4e:50:59:c4:81:54:44:e3:
                    9c:14:f2:c4:65:81:bc:4a:24:33:df:f7:2c:d1:53:
                    5c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:FC:AD:4B:C3:91:0C:86:C9:98:1F:54:4D:6F:3F:89:40:69:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/4b8f1b48-6796-39ad-90d8-3f8d159b5057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl

            X509v3 Authority Key Identifier:
                keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:a9:d4:ef:f5:c1:4c:24:82:f6:8d:11:a3:ef:97:3f:00:
         e6:8f:63:88:04:9e:17:5d:27:e4:58:fa:a5:c2:28:f4:8d:ae:
         02:80:5c:cf:1b:9d:63:8a:aa:84:69:fc:26:a9:3e:1a:98:8e:
         c3:e7:aa:6a:12:de:a3:4a:f3:81:9e:1b:cc:45:55:42:89:57:
         f4:4c:56:43:1c:27:a4:d9:fc:56:8c:61:9d:d7:d7:51:5b:81:
         e7:aa:ad:5e:4a:15:7a:38:89:7d:8f:ef:e9:ff:85:3c:8c:b9:
         55:5f:61:ec:5e:64:b5:22:16:e4:ec:6f:7c:e2:fb:32:8b:ac:
         75:eb:52:4b:8f:1b:6d:40:8d:fe:36:34:1e:d5:73:75:34:3d:
         e4:6a:d0:f3:27:6a:2d:6b:44:65:dd:6d:8a:5b:dc:90:0c:7e:
         d3:61:03:e4:92:47:28:18:a2:7d:ed:78:c0:1a:0a:2a:44:23:
         b6:1a:f7:9b:ff:5d:ad:2b:f8:0d:00:22:71:3c:c3:18:32:08:
         6e:7d:03:fc:a1:1a:36:d1:d7:00:f8:b6:77:d7:1e:57:2b:22:
         df:02:fc:f0:d6:f9:64:25:14:18:20:62:7f:26:f8:da:29:8b:
         28:b0:b9:80:1f:aa:97:eb:95:be:b3:52:46:7c:58:c6:20:53:
         81:df:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 16:00:09 2024 by rpki-client on console-ams.rpki-client.org