Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
File:                     29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa (raw, json)
Hash identifier:          nt57xy+FoSPREzZDtnAoIiMECD2yNSiA2ysiLWlr1XQ=
Subject key identifier:   C9:58:00:A4:F9:3E:46:CA:5A:B6:45:E8:B7:BE:F0:64:30:1F:7B:99
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858456128554CB0DB86541A8FF300
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
Signing time:             Sat 30 Mar 2024 13:00:38 +0000
ROA not before:           Sat 30 Mar 2024 13:00:38 +0000
ROA not after:            Fri 28 Jun 2024 13:00:38 +0000
asID:                     27321
IP address blocks:        149.20.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:61:28:55:4c:b0:db:86:54:1a:8f:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Mar 30 13:00:38 2024 GMT
            Not After : Jun 28 13:00:38 2024 GMT
        Subject: CN=563890bc-fc02-4a7a-9bd5-f191d79efe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:38:e2:54:95:8e:81:9f:1e:d8:ba:16:cb:
                    5a:6c:03:8a:85:b1:0b:a7:28:f6:99:af:69:0c:16:
                    81:90:8c:94:9d:6c:ea:dd:be:b2:81:2a:32:a6:fd:
                    5b:89:85:b9:3b:26:21:29:ce:8a:79:8a:43:a3:79:
                    dd:3d:28:df:72:93:ab:e0:51:5b:04:9d:c4:1a:e3:
                    cc:1f:12:ae:ab:db:57:94:dd:87:05:33:e8:6d:bf:
                    71:61:d9:d1:02:9e:9d:e0:3b:c1:18:bb:a5:88:68:
                    d5:e6:d3:ad:b0:16:f6:95:2b:94:15:89:fb:f8:51:
                    5c:8f:ce:c4:58:35:42:0b:42:aa:57:1a:2f:0d:d6:
                    74:03:a5:8e:b2:1b:af:16:4f:a9:6d:5b:6b:9c:ca:
                    9a:c9:df:49:27:17:6e:98:16:76:77:5e:2f:a7:84:
                    87:52:84:e5:8e:a7:95:1c:f6:ec:80:19:dc:39:ce:
                    c2:b8:a9:6b:50:c2:bd:34:c2:c0:49:4e:28:22:ca:
                    21:c8:8c:2b:8e:c0:68:43:6d:2e:39:8c:f5:5b:fa:
                    8d:a1:59:79:de:28:e3:74:44:56:ad:52:01:36:9e:
                    cc:bb:43:86:a8:7a:8b:1a:8a:47:72:52:31:9a:c9:
                    a5:38:ac:df:81:7b:54:96:ec:85:1e:d3:82:2f:41:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:58:00:A4:F9:3E:46:CA:5A:B6:45:E8:B7:BE:F0:64:30:1F:7B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:82:e7:13:73:0e:f5:8e:d1:13:e3:df:fc:5e:da:ce:3a:
         af:ae:2f:e6:01:af:52:1a:91:32:8c:3d:86:99:1f:98:78:ca:
         e4:42:c8:87:11:13:e3:66:af:3a:34:c7:da:28:f9:fa:07:7c:
         60:af:3a:e0:c9:15:78:3d:52:11:e7:b7:f5:5b:d2:ec:6d:ca:
         e7:b4:d1:ae:c4:4f:73:c3:6f:95:3c:6f:6c:5a:08:9b:99:dc:
         13:2a:0a:d2:1a:e6:2e:ac:51:cc:d3:66:cd:99:8d:b6:ce:54:
         b1:8e:1a:dc:67:ec:53:b4:36:68:4a:15:55:26:ed:58:b5:c0:
         12:05:a4:86:88:36:75:7b:06:3f:a8:b9:68:90:04:0b:dd:b2:
         e6:c2:08:b1:c6:24:5b:58:b7:2d:1d:b6:db:bc:ac:4b:62:9b:
         1e:51:eb:7e:b2:7d:82:79:89:30:ce:b9:a7:0f:ff:ce:01:2b:
         c6:e5:03:a1:22:3b:09:ed:0c:56:67:03:eb:79:a4:4e:0d:98:
         7c:d6:fb:d2:56:eb:34:cd:5f:22:29:fc:50:20:5a:f4:ac:60:
         08:23:69:79:2f:44:56:3f:94:5c:a4:72:49:19:0a:84:63:64:
         68:e9:f2:11:5f:b9:a0:58:6f:4d:a4:7a:67:fc:f5:a7:dc:0e:
         44:5f:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 06:56:20 2024 by rpki-client on console-fra.rpki-client.org