Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
File:                     469dd2df-4576-34bd-923d-489a11adb222.roa (raw, json)
Hash identifier:          YYN44qZ4xjzBt3nHuhBEhgUyvvCqpZqo2tC9bV5GQDU=
Subject key identifier:   8A:67:46:2D:CF:BF:D9:F3:11:7A:76:8F:62:37:90:6A:66:0A:07:74
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285848F92694D96F639F95AE550300
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     1280
IP address blocks:        149.20.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:94:d9:6f:63:9f:95:ae:55:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=a6e7202e-aea0-46f9-995f-8679419bb163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:eb:60:8a:4a:5a:bb:39:67:e0:17:65:78:84:
                    cf:d4:13:2c:dc:42:5b:e4:fe:21:3a:59:70:93:00:
                    3c:e7:79:63:d3:17:9c:58:e3:2d:16:c2:70:c3:dd:
                    16:16:75:e6:2b:12:52:82:e8:c5:de:8d:80:bb:4b:
                    8e:41:ce:d5:d6:8f:dc:f7:33:98:2a:d2:d7:7f:d3:
                    0b:d7:10:20:7d:34:36:03:a3:88:48:cb:8a:89:29:
                    ad:4f:cc:b1:00:7b:4d:06:e3:70:ca:e9:67:c7:7f:
                    62:bb:23:ff:07:fb:20:c8:2e:95:ba:02:61:3e:34:
                    18:99:e3:07:df:ef:9e:62:5b:78:3b:56:30:17:c1:
                    c3:b8:0b:c1:86:b3:f7:3e:14:83:05:84:c9:0a:e3:
                    33:b2:d3:e5:43:6b:4a:ea:84:b6:c2:e3:4e:c4:04:
                    0a:96:57:e6:55:cc:c1:e1:a1:79:bd:d9:5c:a6:cf:
                    7b:fb:96:70:ae:b3:12:38:52:11:ee:40:0e:04:a6:
                    d9:58:c9:b8:3e:f9:a5:30:2a:8a:ce:73:9e:4e:27:
                    29:6e:05:ec:ee:5e:30:69:92:04:26:f6:b0:5c:c8:
                    7b:01:d0:7a:47:5a:04:d9:41:93:77:24:c1:5d:4e:
                    ea:c8:1b:22:5e:94:9d:c1:3c:01:cf:47:2e:a9:b8:
                    a0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:67:46:2D:CF:BF:D9:F3:11:7A:76:8F:62:37:90:6A:66:0A:07:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:b9:39:cc:fc:50:ff:84:45:b9:6d:8a:6b:d0:7d:45:8e:
         cb:59:f2:f2:bf:17:f7:da:54:93:04:30:1b:fa:2a:21:54:77:
         f0:2c:fc:02:7d:36:c3:8a:a1:cc:c6:d3:05:bc:05:78:57:dc:
         a1:4f:97:84:74:99:0a:cb:61:12:b5:54:29:5d:85:85:73:94:
         04:be:41:dd:53:e7:cb:24:50:80:5f:65:c5:84:af:60:50:73:
         84:82:c3:2b:14:42:14:0b:00:d6:a1:f4:ef:78:40:fb:cb:ab:
         d5:24:e8:da:61:71:d9:7f:bb:2c:65:31:4e:b0:bf:91:e7:de:
         82:3a:62:b7:24:6c:0d:e4:09:6c:c1:26:48:c0:b5:37:cf:77:
         9c:e3:f2:7b:2c:5a:b8:f4:4f:a5:a3:4b:e6:59:76:8b:85:67:
         4b:fb:7b:cd:d1:43:2d:3f:46:a0:8a:e6:16:24:a7:4c:26:f4:
         c3:d4:5e:52:52:76:fc:28:9c:c3:5e:6e:c9:c5:99:a6:03:8e:
         b1:4a:73:bb:c8:b7:1c:65:17:bc:cb:e9:d8:27:80:9b:7c:99:
         1e:21:e0:68:5d:8c:00:80:06:5e:01:d7:e4:78:83:8a:36:a4:
         3b:cb:98:20:50:2e:d2:79:c0:a0:43:ba:a3:e5:22:36:54:5e:
         bf:48:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:48 2025 by rpki-client