Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa
File:                     83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa (raw, json)
Hash identifier:          vwukQyUt9DTzygnCNOZSrsP+99dQMIfm/N/3U/Za6ao=
Subject key identifier:   6A:9C:AC:1A:63:A9:76:B4:A6:AA:E3:4C:66:6C:39:C1:D0:B3:25:FD
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584793B11E31359D598A97E17880
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     1280
IP address blocks:        149.20.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:1e:31:35:9d:59:8a:97:e1:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=5b6f44af-e765-4a50-8d11-2dee43447f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:0b:66:7e:9f:00:fe:3f:12:00:fa:9e:3f:
                    c9:07:e3:5d:92:f0:88:14:16:fe:76:df:a9:b3:29:
                    a7:32:64:90:1a:59:bc:06:cb:7a:c8:16:b3:52:76:
                    66:d0:77:92:76:cb:1a:73:9a:82:c8:df:5f:f0:c4:
                    a7:09:98:0c:aa:4e:06:12:34:0e:69:e4:36:9c:a1:
                    20:74:02:dc:7c:64:08:5b:c7:e9:5f:39:56:2a:68:
                    46:e5:ef:fd:97:a9:f4:f9:f7:b2:84:64:4f:2b:24:
                    74:a6:29:f2:38:ed:9a:f8:71:60:6a:4e:ac:48:1e:
                    0b:a4:80:c6:97:72:83:83:72:da:03:04:d4:5f:6c:
                    30:03:ee:71:10:81:97:37:d4:58:02:32:9b:72:ec:
                    a7:3d:ea:74:13:59:69:e4:07:0b:e0:dd:74:eb:d7:
                    ec:4e:df:86:a5:1e:e3:a7:ca:b9:43:88:44:63:07:
                    5c:42:e8:d2:69:f5:dc:c3:28:40:9f:4b:8b:03:3f:
                    76:a7:83:34:fc:52:25:5f:fa:a4:a3:33:41:3e:6a:
                    da:2a:a9:1b:de:67:54:c5:79:d5:06:12:d1:ee:ab:
                    91:c7:4a:d1:1a:c9:e9:bc:a0:20:99:05:fd:fa:73:
                    40:72:d1:1b:37:92:e0:ef:4e:e2:ac:ed:7a:b3:82:
                    a9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:AC:1A:63:A9:76:B4:A6:AA:E3:4C:66:6C:39:C1:D0:B3:25:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/83e1af07-c05e-3dda-9b4d-c74dfedc6527.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:18:e1:8e:9a:7d:37:29:24:30:b8:fc:1a:de:91:78:08:62:
         a3:10:86:e8:fa:28:6b:ab:17:b2:9b:1f:1e:90:7d:9c:0f:eb:
         b4:4d:5d:ed:2a:ae:5c:32:27:67:cd:2e:e0:42:55:d7:0a:c9:
         c2:16:1c:89:d4:86:e5:c8:35:aa:5e:05:e2:be:97:a4:70:48:
         35:5d:b1:16:94:68:61:31:eb:7d:b2:99:7e:6f:3b:97:e9:c3:
         b9:33:a9:3f:4c:f6:4f:b0:18:6a:18:df:c9:e1:dd:99:f0:ac:
         5c:c2:ff:35:75:e5:2a:71:15:f5:05:3d:60:a7:50:a5:14:16:
         db:34:c5:a0:81:2b:84:6c:d0:9d:af:03:73:dc:0b:d2:f9:ac:
         84:1a:30:cb:8a:03:75:65:93:fd:12:6c:10:18:86:2e:d0:95:
         df:ef:da:4d:f5:a0:17:f1:98:cd:61:d0:67:62:3a:9a:66:9c:
         13:70:3a:d3:cb:31:c4:40:2d:35:4c:b3:03:3f:f6:4d:37:b0:
         7d:47:4c:d4:25:f6:02:8a:c9:d4:19:97:14:8b:ec:72:19:62:
         0a:51:fb:ba:3e:97:f2:14:de:a6:6b:7f:96:e8:b5:28:69:c8:
         b6:ba:77:4d:e5:e5:6f:8c:aa:6f:ee:4a:d9:f2:3c:b9:47:c6:
         85:38:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:05 2024 by rpki-client on console-ams.rpki-client.org