Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa
File:                     37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa (raw, json)
Hash identifier:          vqccjz0RyqVY3RDDmF47vMu8capqMXB223g6bG7p4+g=
Subject key identifier:   DB:A6:70:EA:E7:29:94:A3:C9:4C:60:2A:57:11:EC:3F:B2:FA:AA:69
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285847ED24C2978ED67F13B9001940
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     64267
IP address blocks:        149.20.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c2:97:8e:d6:7f:13:b9:00:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=3fa381e6-5991-4072-9b87-b8488e35a6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:b4:c6:2e:24:65:8c:a7:c9:27:b4:48:a5:
                    bb:8b:74:63:ef:9a:5b:87:a3:99:5c:04:33:43:b0:
                    ba:e1:ff:38:04:ad:44:75:0a:bf:ab:71:a5:2d:45:
                    89:26:42:5f:75:3c:e7:55:a8:74:a6:58:6d:5a:a1:
                    8a:7f:1f:82:f4:5a:ed:58:8a:b7:13:76:52:6d:20:
                    73:12:3d:20:83:ba:0b:63:49:3d:64:5f:0d:a9:66:
                    68:46:56:99:e3:95:93:a5:92:13:25:ad:39:84:32:
                    a7:90:4b:0e:ff:40:fd:46:77:43:0d:41:90:8c:f2:
                    23:8f:c5:82:be:61:8c:ff:05:af:ee:11:d1:e6:03:
                    7b:9c:83:47:4b:6e:a1:9c:38:cd:54:7b:23:04:0f:
                    16:ba:92:2b:f0:4f:83:b3:0b:b3:07:eb:08:a8:41:
                    85:08:09:e6:21:a8:82:fd:09:71:b8:e3:c8:28:6e:
                    ea:a3:de:99:da:94:e8:2f:d6:7d:b5:41:8c:b0:db:
                    35:f9:23:50:f4:6e:61:22:12:ba:ee:b3:88:26:fc:
                    6d:c5:c5:ca:83:8e:74:fd:8a:5b:ca:8f:c2:44:40:
                    ba:0a:44:19:d2:a2:19:bf:49:b0:e0:d9:e8:fb:38:
                    d3:56:85:13:ca:7b:54:36:8d:68:9a:85:7e:05:09:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:70:EA:E7:29:94:A3:C9:4C:60:2A:57:11:EC:3F:B2:FA:AA:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/37fb4cf3-fbeb-3604-8e9c-181d2170cad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a8:23:f7:33:22:d6:94:76:71:95:5a:ff:92:b0:62:3f:bd:
         0e:54:8d:ed:56:3d:34:7b:e3:e4:ef:5f:83:e9:68:01:a3:e8:
         a4:19:b4:30:3a:0e:c0:b9:da:58:36:64:ce:22:86:36:eb:74:
         b7:3f:7c:51:4e:e4:d7:b0:f7:80:de:87:f6:0f:81:18:da:92:
         60:bb:e6:2b:0b:5d:e5:07:28:4d:f2:c6:3d:53:31:9b:82:b7:
         76:30:8f:7f:5d:bb:e9:61:6a:ad:f0:cd:29:2c:9c:3e:df:8f:
         2f:87:c8:48:f1:00:0b:10:dc:4d:0c:42:d7:ad:66:2f:ce:42:
         fc:fc:24:de:c9:8c:37:ab:cf:fa:2a:38:ff:16:86:57:a4:99:
         67:9c:f7:1c:9e:ee:f4:43:80:81:d6:17:81:c8:3f:5b:ed:72:
         98:d3:98:1b:2b:f1:c5:ad:53:45:61:fe:16:5c:94:fc:99:f3:
         b3:df:20:1b:e4:1f:71:3b:da:d0:f3:d9:1c:fd:8d:39:67:18:
         6b:de:e8:4d:d2:2d:44:8f:a4:d0:1c:16:5a:70:68:cf:30:88:
         c9:12:b5:9c:3e:15:f4:1f:03:bd:5c:30:ee:9c:45:88:7e:8f:
         ce:ef:47:3b:7d:6d:3f:d6:6d:33:e1:75:73:df:18:21:05:dd:
         34:d2:b5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:28:44 2024 by rpki-client on console-fra.rpki-client.org