Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa
File:                     5d732c70-b840-307e-bacd-9752a58c0f29.roa (raw, json)
Hash identifier:          S11EpVL7vL//NAhVAEo7pqF3xahXacrFfrD3IIMgKAI=
Subject key identifier:   A5:56:FE:31:30:9A:95:D3:3A:73:D2:D6:20:23:F9:4B:95:14:73:12
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584819CFC5DA8D982991BFB52E80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     1280
IP address blocks:        149.20.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c5:da:8d:98:29:91:bf:b5:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=71fdc6de-a71a-4cf9-bd54-efb0338aef61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:c0:ba:70:7a:5f:1a:1b:4d:43:01:32:3a:
                    e5:f8:a9:9f:4e:8e:f1:39:c1:d0:d6:4b:a6:b8:3f:
                    c8:59:2e:78:f5:49:72:3c:f0:97:2d:ca:9e:a0:e8:
                    d5:80:2d:92:60:0a:74:35:7d:77:27:47:dc:3e:59:
                    bc:4a:1f:1b:ee:dd:77:f4:e9:b7:66:e1:ed:b7:74:
                    9d:32:6f:65:c2:2c:b9:11:ef:e3:bd:6c:09:91:f2:
                    23:17:e7:a1:0d:0c:8d:a1:f5:22:ba:69:d1:00:e6:
                    18:8e:15:e7:63:a1:03:12:b4:5e:71:22:45:4a:38:
                    c6:b3:97:68:f0:b8:68:58:2e:d6:32:36:7f:95:50:
                    b2:c1:6b:01:28:52:da:eb:db:6f:5b:15:54:5f:ba:
                    37:3f:de:44:34:cd:87:1c:f1:92:50:cd:5f:81:9e:
                    12:f3:3b:16:7b:be:ab:3b:0e:b9:0c:bc:42:19:79:
                    c0:0d:cf:6d:9f:82:83:7a:e5:ee:80:d1:99:d8:8b:
                    d4:82:b4:c5:40:b0:31:13:4a:c0:35:cc:41:23:c7:
                    90:43:8b:71:24:6d:f9:1d:60:60:54:22:56:b1:48:
                    fc:59:75:a5:f3:a5:5a:e2:6d:24:6f:58:3e:3c:d9:
                    49:b1:2e:8e:ed:97:34:71:d6:73:21:cb:1a:8b:39:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:56:FE:31:30:9A:95:D3:3A:73:D2:D6:20:23:F9:4B:95:14:73:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:e2:12:f2:4c:97:a8:06:12:d1:73:dd:68:be:9d:1b:f8:2c:
         e5:5b:60:0e:37:52:a7:c7:52:5c:37:b6:a0:78:c7:0e:91:16:
         f0:6a:fc:35:44:6f:7a:12:39:c5:4c:ea:33:8d:a0:86:45:bb:
         ae:7d:5f:fb:92:5d:62:4e:8e:42:b2:9d:44:0e:61:13:c9:2a:
         bc:0a:45:46:de:06:21:99:aa:22:71:85:08:f4:29:99:d9:ab:
         06:83:67:65:ba:81:ca:c1:dc:d1:c3:fb:68:8e:84:98:4f:30:
         83:79:d7:e3:08:e8:35:73:3c:d7:33:fd:23:32:3e:2f:e1:93:
         d3:cd:b2:21:91:15:99:f0:3c:9a:81:9a:10:17:41:ad:aa:bc:
         54:14:8f:1e:78:7e:52:b7:9e:f9:65:7f:fe:9b:d5:cd:92:b0:
         60:07:e2:e9:bd:b6:f2:b3:9a:38:d9:90:98:9f:a4:18:cb:76:
         f3:27:cc:34:c4:7c:c7:50:88:33:65:67:1e:84:65:71:2f:cc:
         c6:5f:5a:f5:11:d0:1e:f2:41:02:0c:4d:98:34:30:b8:91:a1:
         4a:8c:bc:79:da:00:5a:22:c3:c7:8b:62:78:61:2c:9f:e6:f8:
         b5:8e:12:67:01:40:07:e5:59:5f:77:18:05:3e:9f:d7:b5:cf:
         3a:48:aa:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgZz8XajZgpkb+1LoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI0MTIwNTAyMDAzOVoXDTI1MDMwNTAyMDAzOVowLzEtMCsGA1UEAxMk
NzFmZGM2ZGUtYTcxYS00Y2Y5LWJkNTQtZWZiMDMzOGFlZjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD/AunB6XxobTUMBMjrl+KmfTo7xOcHQ1kum
uD/IWS549UlyPPCXLcqeoOjVgC2SYAp0NX13J0fcPlm8Sh8b7t139Om3ZuHtt3Sd
Mm9lwiy5Ee/jvWwJkfIjF+ehDQyNofUiumnRAOYYjhXnY6EDErRecSJFSjjGs5do
8LhoWC7WMjZ/lVCywWsBKFLa69tvWxVUX7o3P95ENM2HHPGSUM1fgZ4S8zsWe76r
Ow65DLxCGXnADc9tn4KDeuXugNGZ2IvUgrTFQLAxE0rANcxBI8eQQ4txJG35HWBg
VCJWsUj8WXWl86Va4m0kb1g+PNlJsS6O7Zc0cdZzIcsaiznqMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKVW/jEwmpXTOnPS1iAj+UuVFHMSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNWQ3MzJjNzAtYjg0MC0z
MDdlLWJhY2QtOTc1MmE1OGMwZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRRRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAjiEvJMl6gGEtFz3Wi+nRv4LOVbYA43UqfHUlw3tqB4xw6RFvBq/DVE
b3oSOcVM6jONoIZFu659X/uSXWJOjkKynUQOYRPJKrwKRUbeBiGZqiJxhQj0KZnZ
qwaDZ2W6gcrB3NHD+2iOhJhPMIN51+MI6DVzPNcz/SMyPi/hk9PNsiGRFZnwPJqB
mhAXQa2qvFQUjx54flK3nvllf/6b1c2SsGAH4um9tvKzmjjZkJifpBjLdvMnzDTE
fMdQiDNlZx6EZXEvzMZfWvUR0B7yQQIMTZg0MLiRoUqMvHnaAFoiw8eLYnhhLJ/m
+LWOEmcBQAflWV93GAU+n9e1zzpIqqc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:33 2025 by rpki-client