Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa
File:                     84bba587-44c9-3c7e-8494-16b9196e9d75.roa (raw, json)
Hash identifier:          hOePgPxUIkPF2b1Uwt5PxQxthq132TFVTazYlRN0jJc=
Subject key identifier:   1F:32:83:56:84:6F:99:CB:C6:B8:AF:6F:1A:C6:21:AD:FC:96:8A:57
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584819CFCA78E81E51A96CD8B780
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     1280
IP address blocks:        149.20.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:ca:78:e8:1e:51:a9:6c:d8:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d5a4c328-9d18-4437-8645-5cb6aab2d87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:bf:d9:e7:e7:cd:fc:3c:40:2b:85:c0:f7:
                    e7:01:f0:23:ec:ae:67:b1:34:8a:ef:dc:05:c9:8c:
                    0c:7f:f9:be:ac:c9:50:16:5a:98:a3:bd:1a:77:69:
                    13:f2:f5:fd:ba:c2:11:66:24:1a:8c:22:c8:e5:14:
                    d6:9b:cf:33:1e:dc:65:49:99:4c:4a:05:c3:97:c6:
                    ca:a2:75:fd:55:9e:e7:45:27:28:59:38:c1:af:49:
                    ad:7f:60:23:57:e6:9d:c0:47:68:77:38:16:de:19:
                    5a:c7:7e:b4:87:4c:19:cd:4c:93:3b:85:93:85:21:
                    6c:a1:52:37:6f:1b:bd:87:03:da:6b:dc:62:0f:70:
                    2a:9f:56:f3:5c:81:ca:e9:ec:38:e4:dd:89:d1:67:
                    b7:dd:74:b1:f6:d3:62:66:12:dd:a5:f8:b1:17:f8:
                    7c:42:6e:a0:10:85:88:a8:d2:93:c6:fe:61:e9:72:
                    14:ce:d8:be:fd:c7:9f:a5:c9:6d:21:b1:10:38:f1:
                    9f:a1:e2:13:0b:c2:b7:62:6d:c1:a6:5c:5d:6d:3f:
                    88:a5:4b:ba:6b:5b:21:13:ca:ac:d0:96:fd:b7:35:
                    fc:1a:de:d9:2a:21:c0:4c:c7:56:e4:c2:22:c9:00:
                    94:c7:67:86:8c:1c:0f:f5:fb:5b:96:be:79:60:5c:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:32:83:56:84:6F:99:CB:C6:B8:AF:6F:1A:C6:21:AD:FC:96:8A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/84bba587-44c9-3c7e-8494-16b9196e9d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c0:a6:45:39:b7:5c:88:9a:4e:bb:aa:fd:94:c8:74:30:fa:
         7b:5c:d5:16:9c:76:9d:85:b2:f2:d2:d9:c4:1b:01:57:2b:97:
         0d:7f:f4:64:a2:21:9c:ec:1b:7c:a5:86:1f:8a:e0:85:2c:7b:
         4a:ed:91:66:45:bf:62:c8:ae:02:45:dd:1b:90:60:8e:63:d1:
         29:37:dd:2e:a4:79:67:d6:fb:9f:32:f9:0f:c5:8a:bc:22:1e:
         45:1b:83:ab:d1:78:43:e1:ee:42:2f:89:14:09:00:58:f4:76:
         46:a9:af:7b:0c:5f:49:5b:95:c9:67:73:f2:3f:33:80:9f:14:
         05:b7:47:73:e9:be:44:37:ff:03:4d:bc:d9:5b:af:58:a5:6c:
         67:92:63:6b:ab:3a:e4:42:af:81:20:81:50:e6:2c:99:9b:85:
         45:75:91:33:20:a4:c5:e0:ce:c3:f7:8a:75:e3:f6:40:4a:99:
         fc:f2:aa:cc:b6:42:89:5f:01:a2:80:0c:ce:e4:48:86:38:07:
         96:1a:7e:5b:57:f4:47:23:22:3b:12:2f:ab:ef:c7:17:ed:53:
         15:15:62:b0:f0:f9:6c:55:43:9f:d8:62:a8:d2:16:5f:bc:c0:
         61:33:cc:e2:95:45:3b:12:de:64:66:8c:98:29:a5:9a:da:4a:
         3b:21:91:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:24 2025 by rpki-client