Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa
File:                     1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa (raw, json)
Hash identifier:          FT0GS+9XbO9Ir2OrMuQCJ3PdRnetNuCgMR55SoXNRco=
Subject key identifier:   8F:B5:8F:CB:5B:5F:E7:D6:21:13:CE:37:1E:03:30:CC:4C:BF:41:01
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858457A486A52056D04EE3359BA00
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     27321
IP address blocks:        149.20.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6a:52:05:6d:04:ee:33:59:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=3dba0030-b8f5-44e4-9c56-03bead73f4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:e0:c3:8e:be:a6:e9:66:96:af:b7:70:6f:
                    60:12:0d:87:5b:3d:1f:3a:cd:ec:96:77:8c:73:ae:
                    10:c0:dd:ea:0a:fc:77:47:c0:bd:db:ca:31:79:bb:
                    6b:77:64:73:2d:b1:ae:9f:79:56:e8:40:21:cc:d4:
                    e5:17:3e:58:ad:e3:65:33:e9:50:fe:30:34:11:fd:
                    6e:bc:e5:63:87:13:be:a5:39:18:c6:c2:3b:a7:2d:
                    52:79:db:49:3c:dd:84:f7:52:13:81:44:ea:48:ce:
                    55:71:87:92:3a:a2:ec:83:9c:d0:f4:5e:2b:0f:24:
                    f5:98:92:34:10:6e:92:a5:41:f7:ff:3e:a3:46:0a:
                    32:c4:9d:85:2f:c2:8f:fa:74:58:49:88:38:de:0b:
                    59:02:92:b8:cf:2f:7b:f0:fe:34:99:1f:55:23:ca:
                    5f:02:fa:65:72:33:22:a3:11:82:eb:53:da:af:15:
                    0b:99:fe:29:fa:b7:b1:d5:5d:31:73:6b:46:1a:de:
                    e1:b6:0c:81:c1:5e:42:23:d6:3c:72:14:84:68:d7:
                    4f:f2:b6:6d:28:22:7a:b3:02:25:80:cb:21:cc:e5:
                    c1:89:ae:18:25:a9:0e:b2:95:1d:a8:c0:ab:51:c5:
                    c9:dc:33:e9:50:7b:8f:f6:83:c6:d1:b3:32:b5:33:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B5:8F:CB:5B:5F:E7:D6:21:13:CE:37:1E:03:30:CC:4C:BF:41:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/1cba40e9-633e-3bf0-b7b7-791b6ab99778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:73:34:ba:4a:72:56:3a:7d:85:9c:38:ba:5d:98:d6:cc:e6:
         33:d8:f8:05:fe:b0:34:90:69:81:74:7c:ec:4a:7e:b7:6d:43:
         f9:94:73:06:69:16:ce:ac:a8:e4:0e:80:b2:1a:41:00:63:19:
         eb:84:45:cc:63:19:f9:2d:9f:ba:c0:39:8d:f5:ae:78:b4:57:
         84:de:a7:78:dd:b9:88:05:e2:ac:91:e9:d7:2d:c0:a9:2d:bf:
         28:03:91:78:7d:d6:47:9e:f7:3d:2f:0c:88:b9:f5:c3:7e:0e:
         4a:ee:f6:13:a7:9d:b5:ce:25:ea:d6:9e:38:18:e1:90:04:0a:
         c3:7d:a6:d0:4c:36:ec:66:e5:b3:f7:09:87:23:61:39:09:4c:
         20:c2:89:5b:82:96:fc:00:f7:a7:dc:f4:64:c0:5b:7e:64:35:
         aa:9e:4d:71:50:41:d5:8d:f0:f0:5e:0e:bd:a7:0c:cf:3e:f9:
         4b:22:8f:43:fb:b7:f5:ed:36:fd:dc:4a:f6:7c:16:94:87:f2:
         c8:79:69:65:6b:bb:39:9c:06:57:6c:6b:37:88:f8:21:80:ce:
         22:f9:52:7b:d5:4a:b6:9b:c8:15:84:9d:a5:3c:dc:22:2a:90:
         cb:a9:61:12:33:6a:cf:7f:ba:b9:b3:4e:77:3d:76:25:81:a8:
         81:4a:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:48:30 2024 by rpki-client on console-ams.rpki-client.org