Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa
File:                     83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa (raw, json)
Hash identifier:          N3lZStkL5ws9PXn4HPVvlaa9N8u9mIG53DvEmMxTg2c=
Subject key identifier:   6D:F9:0E:E6:01:94:5C:9B:F9:E3:33:12:44:FF:F4:92:D5:D2:B0:20
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F43285845D503CCE6D69273E5BDF9AAA4
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     1280
IP address blocks:        149.20.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:cc:e6:d6:92:73:e5:bd:f9:aa:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=e87b18df-6a96-44ea-afcd-42514eccc252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:89:4c:5e:08:b6:62:c4:4f:84:1a:29:c6:
                    da:a4:13:0d:c5:7d:21:ad:24:0d:c8:91:ff:9d:66:
                    0f:13:0e:30:f1:3b:2f:c5:63:e1:0d:b4:1a:6d:70:
                    0c:22:7f:44:da:ca:76:84:e4:d4:a8:78:36:3c:20:
                    0c:54:64:bc:de:10:d4:e1:2a:2e:fa:dc:44:36:22:
                    45:c4:23:3e:d8:06:67:da:00:8b:c6:a0:27:c7:26:
                    58:26:41:f0:52:73:09:80:c1:66:91:29:01:67:2c:
                    c1:d9:da:6d:66:82:b9:8b:70:3d:38:11:92:59:6e:
                    be:00:30:ba:93:44:4c:9c:d1:b8:fb:6f:e9:2a:85:
                    d5:e7:80:a8:6e:6d:bc:aa:65:e4:9e:c4:b6:e7:ce:
                    d1:90:a4:6e:81:90:3c:5d:62:18:52:78:ce:65:d7:
                    d8:64:e9:30:6b:63:dd:e1:46:79:20:1b:b4:92:a7:
                    4a:3a:96:3b:66:3f:33:e4:b9:58:29:11:92:bb:f5:
                    70:03:be:6a:64:21:92:6b:09:b9:74:07:0d:dc:8d:
                    e7:65:21:2a:c8:af:da:0a:f0:9d:25:31:68:9b:6c:
                    d1:b8:05:41:2a:4e:86:5e:f8:0c:89:fd:ae:78:71:
                    52:e0:b0:43:e0:f3:a5:f9:e2:2d:bf:8a:e2:b0:1f:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:0E:E6:01:94:5C:9B:F9:E3:33:12:44:FF:F4:92:D5:D2:B0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:ec:66:3e:5f:f5:cb:a4:5c:52:9a:07:5f:19:c6:ed:46:ba:
         2a:7c:f5:52:26:80:28:71:f9:e4:6e:14:27:8c:a7:d9:14:4a:
         e9:6e:0f:e6:76:73:f5:81:7b:c1:8c:db:9b:7f:9f:12:e3:9b:
         b1:1d:32:39:33:55:82:9c:1a:56:46:e1:62:24:9b:7f:1d:e2:
         31:fb:47:47:ef:e6:4d:2d:6b:d8:2b:74:1c:f5:e6:1d:75:a9:
         7a:6c:2b:c2:29:ef:00:bf:ac:ce:9d:ce:9c:8f:ef:dc:20:7c:
         39:ed:a6:a4:d7:ed:ac:20:08:ab:d4:ad:cb:65:ae:90:87:39:
         43:bd:60:83:0e:5b:38:f7:21:a0:bb:de:91:6e:d9:84:31:ca:
         a2:bb:b3:27:37:3c:ad:9e:b6:d1:df:80:f9:8d:47:04:40:fa:
         be:67:61:d0:32:04:54:28:68:0d:34:f3:e3:d9:2c:d0:ec:11:
         93:4e:ed:15:6d:c2:b6:b3:d6:69:b1:62:d0:94:f9:28:a1:da:
         20:80:1f:09:78:c6:c7:13:f4:6c:93:2f:aa:f6:24:5a:84:8f:
         ec:c3:84:2d:1e:db:c2:59:cc:37:86:37:65:50:25:c0:3e:e8:
         14:7c:05:ab:aa:d0:45:35:b5:aa:43:76:af:04:20:c3:7b:f4:
         79:a1:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:05:26 2024 by rpki-client on console-ams.rpki-client.org