Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa
File:                     98b687f8-5555-317b-883c-d05f50660cd6.roa (raw, json)
Hash identifier:          R/5a58lhh4mKJQVhkrjzje+64UKaYmoEgih4ipKAsII=
Subject key identifier:   65:81:69:3F:CF:5B:AB:DB:7B:57:5A:67:4A:74:FC:6B:2C:64:06:88
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F432858450C201A6381659289F49B9B80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa
Signing time:             Thu 29 Feb 2024 02:00:27 +0000
ROA not before:           Thu 29 Feb 2024 02:00:27 +0000
ROA not after:            Wed 29 May 2024 01:00:27 +0000
asID:                     27321
IP address blocks:        149.20.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0c:20:1a:63:81:65:92:89:f4:9b:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Feb 29 02:00:27 2024 GMT
            Not After : May 29 01:00:27 2024 GMT
        Subject: CN=43884558-fc2b-4a2c-9b4c-8d0cf3d6c30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d2:3e:f6:af:60:8c:9d:fb:d9:90:eb:e0:2f:
                    51:5b:60:54:ee:2b:7f:b7:5e:f5:f2:ed:82:a9:3d:
                    e4:c3:eb:3d:02:29:0a:48:91:fe:89:20:83:50:f3:
                    1b:e5:f1:f0:b0:12:c9:80:20:37:1f:40:99:ad:f3:
                    7a:70:7d:d2:72:ef:6c:4f:04:f6:5c:0d:04:f3:7b:
                    88:2f:7e:f7:ef:57:3b:47:9a:07:e5:09:3d:a3:88:
                    e7:21:2e:41:93:0c:cf:22:a5:d2:75:69:2e:8c:89:
                    ea:c1:9f:d7:b6:23:31:f9:9c:2a:0c:95:ff:bd:53:
                    00:72:53:5c:60:06:9d:8c:cd:02:36:cc:d2:fd:e0:
                    3e:fe:a2:22:a8:90:47:ff:21:3b:ba:0e:81:20:4d:
                    50:ab:b9:5f:8f:38:d0:17:57:b9:60:76:a8:41:1c:
                    ff:1c:1b:8d:d3:f1:14:dd:65:de:7d:b0:bb:78:17:
                    03:ff:2e:b8:ca:47:84:91:8c:25:07:bc:f8:19:1b:
                    78:fe:05:42:57:64:e9:11:59:94:d2:08:ac:83:20:
                    05:fc:f9:3e:f1:e3:da:8c:c6:8c:bd:98:e5:0f:91:
                    d3:83:37:8f:36:1c:d4:b6:a9:f0:34:8f:54:c8:84:
                    85:2b:b8:79:0c:f1:81:85:2d:83:0a:f3:11:02:74:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:81:69:3F:CF:5B:AB:DB:7B:57:5A:67:4A:74:FC:6B:2C:64:06:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/98b687f8-5555-317b-883c-d05f50660cd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:29:23:b5:9c:55:ea:c3:6e:78:dc:7d:c6:b6:22:57:4c:92:
         aa:e2:d2:de:54:54:95:fb:21:97:77:1e:47:ed:98:4d:cb:57:
         71:9d:8b:22:fd:21:0c:ab:a3:8d:1f:82:5c:53:cc:db:47:55:
         cf:03:3b:26:28:33:12:fd:ce:8e:4f:ef:da:eb:6f:73:c9:18:
         6f:61:54:cb:c8:88:ad:d4:f1:65:96:d5:d9:e9:c0:67:31:64:
         17:75:47:57:7f:5f:8e:92:f5:aa:3a:f2:d9:c3:1c:65:63:ac:
         b6:c0:0c:c9:0e:db:37:24:17:e1:dc:29:1f:66:e5:f4:72:9a:
         5c:f9:39:13:45:05:1f:3b:35:e6:bb:89:3a:a7:04:d4:56:8e:
         74:9a:a5:49:f2:6b:e8:4e:a3:6e:ee:22:df:3a:cb:73:26:1c:
         41:20:04:b4:46:ad:09:62:07:61:35:d5:c3:b7:33:2b:a4:c3:
         13:af:0b:8c:d4:e9:8f:9e:a4:cf:e7:47:b8:5e:00:c4:ae:5b:
         d9:7e:60:9c:4d:35:9f:83:31:98:01:45:ae:d4:54:48:7d:c1:
         c2:98:fe:c1:3a:51:b1:99:c6:60:c9:3a:4f:7f:7c:30:13:3a:
         1c:b3:ec:ff:7d:a7:46:ea:eb:90:61:78:91:88:ab:8e:d8:fb:
         0b:74:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:05:26 2024 by rpki-client on console-ams.rpki-client.org