Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
File:                     dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa (raw, json)
Hash identifier:          9P5lUMdrvZJewfnBCulY3/0HNVEZp7dZb6amdR2J6Mw=
Subject key identifier:   22:BE:C9:97:E6:76:3C:CF:A8:4E:2D:C5:26:62:60:04:4D:E8:9E:CA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848CC7B97D26C1282CE8C696800
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     64267
IP address blocks:        149.20.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:97:d2:6c:12:82:ce:8c:69:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=d4703e31-2f7c-4a3a-93a0-6af328f37643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:2c:04:eb:a0:aa:00:5e:00:27:fd:24:b4:
                    a8:2d:62:3c:1a:55:b6:5c:37:4d:81:d1:0d:14:c6:
                    d6:74:de:ce:a7:84:e2:a0:f1:db:38:da:59:ce:83:
                    0d:6f:0b:09:6d:63:ee:c2:e5:47:77:a4:a2:d6:cd:
                    d4:dc:14:16:f1:24:a0:f3:b9:0b:e4:1d:f4:74:42:
                    f5:c7:ac:a3:b3:f9:83:37:0a:93:81:84:51:e9:a3:
                    c3:5d:8c:9c:6b:c3:e2:e5:88:ae:92:1b:00:76:b1:
                    d6:77:f7:e9:90:40:7c:c0:fb:3b:02:0d:9a:8b:d1:
                    cf:0c:0b:65:77:7b:a2:32:d0:9d:fb:1b:74:0b:bb:
                    e8:a7:0c:67:5d:73:ef:58:7e:4b:14:5d:57:53:99:
                    cf:aa:0a:7e:b1:12:ef:c5:df:96:bb:67:4f:38:f9:
                    7a:b9:ab:90:06:72:30:87:74:88:52:1a:64:b2:94:
                    ac:af:10:b4:01:0b:5a:95:96:33:b2:0b:93:c2:57:
                    01:d1:25:8b:64:f9:94:02:89:8e:56:d7:f5:ef:fc:
                    a0:12:91:fe:d4:d7:42:5e:29:92:dc:46:65:80:b0:
                    32:fa:c2:ec:8d:30:6e:74:8e:69:98:90:ba:8d:9b:
                    d0:22:4c:ff:42:c7:31:fe:5b:e4:a0:49:eb:7a:c7:
                    e5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BE:C9:97:E6:76:3C:CF:A8:4E:2D:C5:26:62:60:04:4D:E8:9E:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:27:fb:35:be:14:c9:70:5c:c7:f0:9a:5e:17:76:20:2d:cc:
         65:18:aa:33:aa:64:94:6e:05:35:a7:1c:8a:46:b9:72:69:6b:
         77:42:40:ca:b6:84:3e:b3:94:51:fb:7f:4b:05:cc:55:20:5e:
         1e:4e:56:ec:cb:6d:c6:75:f6:31:12:4d:49:de:6c:e0:d9:2f:
         21:b1:c3:9f:bb:92:74:0f:4d:a0:c1:c5:40:be:97:49:89:1c:
         81:2d:9d:6d:69:5b:b4:0d:5d:4f:e2:a2:40:60:e7:ab:41:0f:
         bf:ff:c1:b3:f2:ea:0e:dc:cb:3a:ac:01:16:3e:c7:71:b7:d4:
         9d:c8:da:f8:58:07:9d:87:84:15:dd:df:55:bb:e2:4c:ba:01:
         77:10:aa:3f:5d:1f:7e:9f:77:1a:93:30:79:b0:95:28:53:4b:
         70:e4:76:2d:73:10:69:77:bc:15:6c:0e:5c:a5:34:40:bb:26:
         d8:d3:6a:02:06:d0:3c:c9:d8:e0:db:0c:a1:06:ef:43:46:7c:
         aa:b7:78:6c:ca:7a:e2:ac:c8:fd:a9:45:b5:1f:32:0d:bb:fe:
         54:d0:c4:c1:4a:9b:5b:82:9f:0b:55:7d:96:2e:23:ed:77:63:
         b1:be:e4:04:2b:84:b1:2f:53:27:4e:96:0d:14:03:8a:3c:27:
         eb:00:2d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:10 2025 by rpki-client