Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa
File:                     d4077d9c-bdad-34b7-88f3-d7a067314e78.roa (raw, json)
Hash identifier:          qA1fuLySTf3qES+NQ6OeXWjyNH8gwS3VolE2GJxRTTU=
Subject key identifier:   99:E7:17:F8:E1:35:90:7F:BE:58:47:9A:E0:00:5C:E6:3C:D9:71:47
Certificate issuer:       /CN=544240c0-1aad-4163-8ada-3b71180eac4f
Certificate serial:       010D0C9F43285845840DC425A90749092E905760
Authority key identifier: A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa
Signing time:             Fri 12 Apr 2024 01:00:26 +0000
ROA not before:           Fri 12 Apr 2024 01:00:26 +0000
ROA not after:            Thu 11 Jul 2024 01:00:26 +0000
asID:                     2924
IP address blocks:        147.146.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:84:0d:c4:25:a9:07:49:09:2e:90:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544240c0-1aad-4163-8ada-3b71180eac4f
        Validity
            Not Before: Apr 12 01:00:26 2024 GMT
            Not After : Jul 11 01:00:26 2024 GMT
        Subject: CN=86f27d95-29a3-49de-a148-61009f8cf1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:19:9f:33:b0:c1:b9:09:c7:1d:31:2a:ed:30:
                    07:d7:48:6e:98:05:76:b2:3c:2f:f5:54:21:88:ac:
                    bc:b8:e3:6e:20:a4:52:5e:cb:cf:ef:f6:5f:cf:26:
                    d7:a4:8d:41:bc:d7:6a:71:7d:9b:61:fc:ea:e5:a0:
                    26:cc:7c:8a:fc:5c:2c:7c:bb:09:4f:1e:f7:97:4d:
                    75:ef:b0:40:f0:85:43:3f:68:92:fd:e7:ae:37:1d:
                    57:63:b4:03:17:e9:06:8f:2b:cd:11:9d:ed:35:bf:
                    04:37:9b:74:91:4b:c4:4f:c5:bf:83:77:54:6f:29:
                    bc:a7:63:f1:6a:b1:1e:cf:d4:77:d1:e1:d0:11:70:
                    a1:29:bd:54:6c:45:cf:c8:63:88:00:6c:a9:1b:65:
                    d0:9e:9a:8d:68:75:20:e9:37:27:53:54:3b:66:3d:
                    3e:d9:2b:01:c3:51:77:98:03:54:4c:25:1c:e7:e5:
                    8f:de:ba:72:70:98:fe:d0:a7:b4:1a:f2:a7:e6:5e:
                    f9:ac:38:db:78:a8:ca:d5:2a:e3:24:dd:a3:f5:1a:
                    d2:18:96:7a:57:44:96:e0:15:c1:10:6a:ad:02:20:
                    d0:02:1c:1e:65:f9:31:f6:2b:39:6c:b2:f8:c3:f7:
                    1c:78:6c:9c:41:ed:d2:e6:b0:a4:61:1b:a9:fa:00:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E7:17:F8:E1:35:90:7F:BE:58:47:9A:E0:00:5C:E6:3C:D9:71:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/d4077d9c-bdad-34b7-88f3-d7a067314e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f/544240c0-1aad-4163-8ada-3b71180eac4f.crl

            X509v3 Authority Key Identifier:
                keyid:A7:B0:96:5B:48:01:56:7A:E0:42:9A:9F:7E:0C:3E:42:9A:BB:59:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/544240c0-1aad-4163-8ada-3b71180eac4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.146.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c8:fa:41:56:cd:4c:3f:d4:6b:b2:14:fd:6e:40:f1:e9:78:
         bc:0f:ce:a3:34:6b:a8:75:19:c1:db:2d:b0:33:13:b0:bb:b8:
         a7:06:c2:c3:54:83:51:36:f7:a1:ce:cd:5d:2d:4e:fa:3a:9e:
         f4:d0:d4:04:9b:36:0b:9d:25:cd:1d:61:e1:4f:4e:8d:ab:3d:
         3b:01:46:df:f7:e0:ae:0f:ec:30:0a:0b:a6:77:1f:0c:fc:3b:
         f0:76:c6:a0:56:24:96:84:43:e1:cc:00:d4:de:85:1c:0e:04:
         74:58:bb:f5:8d:a2:fc:69:a7:fb:23:35:b3:0e:13:b3:52:dd:
         ae:b0:7a:b7:45:7a:c0:ca:dc:b8:95:c3:66:2e:9b:81:33:2c:
         95:c6:2d:a0:34:3d:f7:64:1e:ae:6b:b9:97:00:12:b8:1e:3a:
         f4:3b:3f:74:93:4f:55:d4:87:ec:84:cc:b7:4e:d2:af:6d:bc:
         64:cd:b6:e5:2e:a9:21:64:89:12:8c:b7:c3:be:f5:4a:21:f5:
         89:53:54:6e:69:dc:85:81:a2:e5:c5:57:b0:a6:9f:80:75:9b:
         cb:a2:d2:eb:7e:01:55:aa:fc:cd:58:e9:08:71:f3:9b:29:af:
         4d:ac:f9:f2:b1:2f:0a:86:c3:54:a7:ec:95:36:35:71:03:f9:
         bd:08:21:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:56:23 2024 by rpki-client on console-fra.rpki-client.org