Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa
File:                     5d732c70-b840-307e-bacd-9752a58c0f29.roa (raw, json)
Hash identifier:          y3+ReaH86H6b9SW/wnqYD5q9LSbUAEe068wwFqKs1+c=
Subject key identifier:   B1:28:C1:55:3D:1C:38:F6:E2:88:4D:CE:A8:28:F3:1A:6F:9B:49:73
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858457A4885AC4EAD7D77BF1B16C0
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     1280
IP address blocks:        149.20.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:85:ac:4e:ad:7d:77:bf:1b:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=a00a2416-a2df-472a-8317-a0fa708f4493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:9b:7c:8b:95:47:6c:85:d8:15:eb:88:a9:
                    5c:f5:8d:b6:bd:25:ae:89:42:59:62:70:bb:f9:9d:
                    a1:ab:c6:b7:1a:02:52:95:38:eb:9c:45:94:d9:4a:
                    4a:62:ef:10:4a:7e:63:01:4b:98:47:d2:47:5b:ca:
                    6d:a4:14:e7:7f:c4:b8:08:b5:00:10:75:f5:7f:ee:
                    b3:1c:12:05:21:f7:f0:d2:e5:42:59:ab:77:6f:79:
                    40:f1:5c:05:26:f7:c9:06:b3:aa:c5:68:b1:ab:99:
                    58:c0:30:de:6d:62:e2:cd:e4:cf:a8:ca:8e:6d:33:
                    a4:a6:e6:91:ef:0c:20:90:28:76:09:a7:ab:ed:8e:
                    bf:d5:e1:db:14:93:d1:05:cb:d4:75:5f:88:01:a2:
                    3c:e2:00:93:8b:e7:48:88:9e:8a:8b:3b:33:41:28:
                    39:1d:cb:d9:87:21:56:01:1a:80:3c:ee:a7:17:e9:
                    db:68:c7:01:ae:f6:41:fa:98:5b:5c:56:61:78:b0:
                    3a:1e:ca:3f:15:aa:b3:22:2d:26:fc:73:1c:ad:ca:
                    b2:4d:f2:1a:7f:7c:b2:2c:6c:4d:5e:e9:91:2a:38:
                    a4:a7:50:1c:7b:4b:ec:f6:8a:a3:b6:e4:00:c5:91:
                    ce:b8:db:b3:52:14:db:f2:87:a7:ba:01:d0:0f:08:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:28:C1:55:3D:1C:38:F6:E2:88:4D:CE:A8:28:F3:1A:6F:9B:49:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/5d732c70-b840-307e-bacd-9752a58c0f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e6:1c:d0:01:32:7b:c1:3e:78:67:55:c5:0a:33:1a:11:88:
         66:06:e7:5c:62:71:b8:a7:11:6f:2b:07:49:53:9b:08:07:f5:
         9b:ee:c3:17:73:3d:fd:6c:bb:91:7d:6f:64:3d:9f:e8:e7:42:
         ae:a7:e5:25:cb:40:da:17:47:63:8b:3f:11:44:fc:68:07:d8:
         34:e4:76:af:43:88:14:d9:20:f1:eb:ed:a5:ae:bc:17:ec:29:
         c8:63:cc:e5:77:cb:3f:5f:f4:81:67:00:66:4e:1f:0d:0f:0a:
         09:cd:a6:e2:f8:3a:91:c3:40:5e:79:29:c0:c4:59:29:3e:43:
         e7:71:cc:2f:09:01:2b:48:4e:4c:db:1a:96:6f:fb:91:dc:04:
         6f:2d:5c:8f:fd:43:dc:00:2e:f9:8e:fc:c3:d4:6b:5e:6c:99:
         da:7b:53:f4:64:7a:8b:02:10:85:91:bb:dd:1b:3f:ed:81:08:
         bc:f3:2f:5e:cd:4a:ad:25:af:01:81:c4:15:91:58:26:7e:04:
         43:d4:97:7d:40:0f:c2:36:f0:c4:c5:1b:5d:43:67:61:aa:ba:
         10:8e:e6:46:b8:c9:ca:ba:4d:63:33:15:1f:18:bb:e8:c9:61:
         61:89:39:17:b2:6d:f1:5d:95:f5:49:e1:c1:a2:97:13:71:64:
         b5:2f:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:05:26 2024 by rpki-client on console-ams.rpki-client.org