Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14212fdb-d678-3e05-952f-99ddfc65235f.roa
File:                     14212fdb-d678-3e05-952f-99ddfc65235f.roa (raw, json)
Hash identifier:          PEmSBJ7Np3hZbIhd5VHeXi9MwFbGYB9pQ6mWm3Gq8oc=
Subject key identifier:   E1:90:CD:C6:39:EA:91:9A:19:96:16:C0:C8:52:68:FF:61:59:8C:93
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E7B21AF8C224B04C1E600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14212fdb-d678-3e05-952f-99ddfc65235f.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     13393
IP address blocks:        150.220.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:7b:21:af:8c:22:4b:04:c1:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=27b3aa7c-3de1-4636-93fc-cd2fcb17a0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:03:71:5a:e0:23:de:fe:d7:be:e6:f9:7e:67:
                    8c:72:18:be:59:6f:81:40:07:5a:10:48:cb:8c:0c:
                    92:67:70:3d:d1:17:63:fa:58:b8:ac:9f:ae:db:a9:
                    c5:45:ab:f3:86:bf:fc:e6:37:81:dc:10:dd:37:c7:
                    ad:2d:15:7e:4d:22:ee:c3:3c:3d:12:24:7f:98:8c:
                    0a:64:f6:6f:d1:49:27:0a:1b:12:b8:80:17:a0:f3:
                    08:d5:ea:33:66:54:ab:7e:3b:00:61:22:f2:36:7f:
                    53:0b:a4:22:66:1d:b2:38:88:2d:48:76:be:e3:69:
                    58:99:45:a6:62:bb:03:f8:d9:24:57:7a:42:ca:77:
                    c4:b2:c3:d4:63:f5:b0:1a:8d:44:0a:dd:db:c0:ca:
                    ba:fd:94:38:cf:9f:99:70:b0:27:67:a7:31:ea:3b:
                    36:e7:9c:2e:02:45:10:33:81:59:d9:b6:13:0e:e7:
                    c4:af:4d:16:aa:97:d8:0f:c5:bb:2e:b4:ee:55:93:
                    14:6b:e5:d6:b0:fc:73:7c:c9:dd:03:a2:cb:bc:63:
                    3f:db:21:6c:ac:a5:69:eb:ed:40:e1:b8:21:67:2d:
                    24:90:dc:65:06:73:ea:9f:03:ae:8a:22:c3:4d:61:
                    ce:47:3e:f3:ce:8b:b4:de:75:75:8c:62:48:d1:05:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:90:CD:C6:39:EA:91:9A:19:96:16:C0:C8:52:68:FF:61:59:8C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/14212fdb-d678-3e05-952f-99ddfc65235f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.220.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:d2:61:14:50:a5:44:8e:da:d1:76:b3:b2:68:d4:09:03:23:
         b6:58:84:0f:ae:f9:a5:f7:30:5d:b2:01:16:27:25:b8:92:17:
         66:be:9b:60:ce:9c:c1:d3:85:70:15:e3:51:21:27:ea:3a:8f:
         f7:50:5e:82:b4:67:34:33:a3:3c:0a:68:20:99:4b:8c:5d:44:
         77:79:bd:8f:ca:56:98:69:8d:b8:3f:1b:66:73:07:e6:d2:11:
         2d:4a:1e:3c:75:91:bc:e8:93:66:ed:9f:c6:49:46:01:1d:e6:
         12:ac:f8:8e:4a:39:a6:60:36:54:76:f4:33:4a:7e:e9:88:da:
         29:07:72:77:84:2e:8b:29:a6:67:de:b8:58:9e:88:5f:1a:0d:
         dc:0f:09:1f:c1:ef:9b:92:81:79:e0:26:62:3e:d6:f3:cb:63:
         26:2e:0f:7f:d9:64:80:3c:a9:37:9d:89:6e:21:25:ee:4f:1b:
         3d:a0:4d:37:9a:3b:05:d6:c5:4f:a6:be:e5:64:75:2c:05:51:
         eb:ed:7f:b3:ed:ea:14:e8:db:24:46:ba:50:7f:9a:ae:fa:44:
         c3:72:c4:19:9b:5f:a8:8f:4d:19:e7:cb:f0:12:67:f5:44:8a:
         62:3f:64:65:f6:bf:b7:3a:6b:3f:4c:73:d5:f9:cb:b5:ad:64:
         22:f8:ba:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:45:48 2024 by rpki-client on console-fra.rpki-client.org