Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
File:                     dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa (raw, json)
Hash identifier:          ohFx+ljwY6rULc7FKkSuY9y4fRoG9dnudWwRxtjZ7ys=
Subject key identifier:   38:E7:36:B7:6F:CC:41:5F:BD:73:BD:FE:26:4B:3B:B4:89:F5:8F:CC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858454D9D80A425ADC1E98EC7B740
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     64267
IP address blocks:        149.20.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:80:a4:25:ad:c1:e9:8e:c7:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=b620a6df-118c-4155-9018-16ad43b9359f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:6b:76:d5:61:17:69:7b:fd:89:e3:a5:c0:
                    82:16:33:a6:ec:a3:a7:13:e3:49:91:d3:74:35:7c:
                    78:cf:56:eb:a1:16:19:a9:17:05:60:8b:25:17:ad:
                    59:b2:72:b3:4b:a7:82:63:38:4a:8e:5b:9a:7c:55:
                    11:33:1a:c1:6b:62:30:4c:84:d3:f2:35:46:a4:58:
                    14:ce:ec:3b:23:1c:e6:08:a3:5b:78:34:60:f4:70:
                    db:e4:9f:ad:77:5d:1d:0d:5b:40:48:84:c2:56:1e:
                    f9:53:34:05:2f:00:f5:63:da:58:dd:27:d6:19:89:
                    25:eb:9a:81:9c:c1:85:d4:a0:f6:55:32:31:65:90:
                    0f:82:df:0c:69:12:62:24:99:d3:55:30:42:05:af:
                    6f:1c:a3:07:42:1c:9d:a7:0a:c5:8b:67:90:18:5d:
                    5e:9b:2f:96:87:76:39:1d:db:39:13:0e:34:bc:0e:
                    0a:6f:ea:d8:b6:a9:a2:e5:b0:0a:f9:2e:86:fa:e6:
                    fb:09:de:00:bb:7b:2e:3b:16:e7:9b:5d:89:85:17:
                    96:7c:92:15:aa:bb:ec:fc:08:f3:44:2f:86:27:be:
                    ca:86:b9:80:64:ac:58:1c:e9:02:ed:56:7b:a1:77:
                    11:d5:c6:bf:ae:a6:e4:4e:77:bb:0c:93:a2:68:7c:
                    4d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:36:B7:6F:CC:41:5F:BD:73:BD:FE:26:4B:3B:B4:89:F5:8F:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/dd188e4e-a087-3c5d-954e-e8869cbff5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:82:cb:d6:54:4a:ee:c6:f4:b0:6d:f2:a3:50:30:fc:59:
         a9:42:55:ac:bf:83:df:85:29:18:67:8c:f5:4f:f6:f3:85:63:
         33:6f:95:2a:13:be:25:f8:05:10:fa:62:d4:0b:a8:43:e5:ba:
         8a:59:ac:b7:76:f4:31:07:1f:c6:19:d9:21:e6:03:ec:0a:a3:
         17:86:06:cc:6b:c8:e1:91:6f:6d:c4:ff:63:2d:f6:ae:65:ca:
         7b:6d:ae:fa:94:c6:53:a9:6d:10:c7:f5:5f:d4:4b:49:cc:ef:
         59:2f:c6:31:2d:5b:86:77:02:97:4c:e6:e0:3c:30:75:e3:3e:
         af:c7:b2:79:bc:eb:97:41:fa:bf:1a:17:80:7a:7d:1b:96:2a:
         10:c8:8c:ab:bc:13:a8:e8:ae:2b:75:21:0d:ba:59:28:95:f5:
         0d:4f:8a:dc:56:4e:8a:1f:f8:25:38:18:0c:ec:3d:5b:a4:27:
         4c:e4:75:2a:8c:d3:5f:4e:55:0e:1d:f5:2b:e7:09:a1:7c:82:
         07:a3:c2:4c:b4:e3:9b:35:25:3c:77:21:aa:b7:be:36:a9:b1:
         76:df:b3:69:f9:76:7d:e8:2a:7b:55:4a:11:9f:9b:fb:46:61:
         5c:d4:db:2b:29:88:1d:d8:2a:d6:2a:cb:d4:7f:57:64:e1:f5:
         44:b5:23:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:32:02 2024 by rpki-client on console-ams.rpki-client.org