Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
File:                     469dd2df-4576-34bd-923d-489a11adb222.roa (raw, json)
Hash identifier:          oAoVwdKLIR+ziX6qK/nL4FSawql3m03jchbBw4K20/k=
Subject key identifier:   A1:90:7B:9A:C5:94:FE:05:F8:57:64:08:4C:5E:CD:00:C7:31:95:7A
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858457A486AA7A344AE7A602DD380
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     1280
IP address blocks:        149.20.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:6a:a7:a3:44:ae:7a:60:2d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=ac25027e-9b03-4e68-b939-4415044c1f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5d:ff:01:44:e1:24:50:c1:b8:ea:84:77:d1:
                    0e:ff:d7:0c:94:50:de:1a:3f:26:77:d9:d1:7a:9a:
                    a8:2c:e0:de:f5:0a:45:c0:71:ff:b4:ae:fd:28:b1:
                    d8:c7:50:07:7e:41:be:b7:e0:3d:51:75:77:9c:1d:
                    c0:56:77:98:5c:a3:a8:45:39:1b:6e:17:ec:25:1b:
                    cb:aa:09:0d:fa:3d:1a:78:ce:c1:5e:58:9a:14:c3:
                    de:d3:4a:38:a9:0a:41:2e:a7:10:41:a2:e8:3e:4a:
                    4a:35:8d:77:5a:c5:57:ec:98:87:2b:92:a5:97:e7:
                    51:a6:26:d0:d6:35:1a:ba:1f:a3:b2:96:5d:45:52:
                    8a:7a:2b:7c:6b:7f:bf:0f:a2:5f:6a:ef:13:2f:bc:
                    c4:74:6a:63:7a:b5:a7:7b:4b:24:84:aa:df:a9:f7:
                    9d:c1:98:cb:d9:d3:e3:9d:62:7a:5c:c3:2c:79:56:
                    06:c6:3c:82:3f:76:1e:71:c2:10:2d:d0:12:4a:a5:
                    be:73:d2:ad:b4:ef:8f:23:89:aa:79:55:31:39:fa:
                    48:76:c6:d8:12:f9:c0:4f:23:1e:09:04:3f:01:21:
                    8d:8f:28:04:00:a1:f3:86:c8:fc:f2:99:4e:58:8f:
                    4e:0f:74:3a:71:c5:13:47:d3:be:53:05:48:c3:b1:
                    20:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:7B:9A:C5:94:FE:05:F8:57:64:08:4C:5E:CD:00:C7:31:95:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/469dd2df-4576-34bd-923d-489a11adb222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e4:36:3d:25:1c:d0:d0:f5:17:d7:51:aa:80:90:ee:78:c3:
         93:a1:bc:ca:f1:44:77:ae:a4:4d:1f:f5:19:03:b2:7a:8e:d1:
         2b:cb:62:84:53:95:25:f3:c5:ff:da:6e:b3:25:b3:7b:40:12:
         c6:47:98:f5:85:30:f0:1b:0d:f5:1a:e3:77:16:a7:44:82:9d:
         ae:2d:49:d1:21:62:5f:8a:13:02:f4:83:81:53:7d:02:a4:5c:
         49:d0:71:69:d7:6c:06:f1:f6:ed:e0:ab:f3:e0:ec:7e:04:57:
         1a:7e:54:75:d8:fa:2c:65:cb:22:9f:13:2d:48:fd:cb:b8:50:
         de:81:10:32:47:d7:e0:7c:15:63:32:69:5f:34:02:bb:78:60:
         d4:7a:61:a6:b4:49:9a:90:71:77:9d:1b:f2:36:c8:30:d1:09:
         8d:80:c2:29:7c:09:7d:f5:38:3f:88:71:3d:68:d3:76:dd:23:
         4a:f1:01:61:ef:72:1f:a9:0f:7a:fc:50:78:09:ec:2c:00:7e:
         13:5d:00:dc:fe:e6:42:00:b8:c4:54:8b:6c:91:77:80:05:0b:
         2f:73:1b:70:d0:82:0c:7a:ab:13:2a:8c:20:49:5f:ca:26:49:
         c5:29:ba:87:5d:39:ba:e8:bf:65:c3:2e:31:8e:69:11:35:42:
         1e:85:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:16 2024 by rpki-client on console-fra.rpki-client.org