Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa
File:                     13f8b48d-987f-3c57-85f8-3033b23c241a.roa (raw, json)
Hash identifier:          aMJxi8Hqd7+HPfV8CbD8S+4UlhDJXWI05VCB0tudtQk=
Subject key identifier:   C2:66:12:D5:08:D3:4C:F6:17:C8:9E:69:99:BA:EF:82:8D:6F:5E:E6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332FF13928A4067292AF680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        98.16.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:ff:13:92:8a:40:67:29:2a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=0e6bab81-a0c2-4be7-8bd4-81ddd7d3df82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4c:13:41:71:6e:60:4f:8c:3e:a9:e9:ef:6e:
                    c5:91:c5:c6:99:99:6a:77:23:4c:ba:41:bb:3f:74:
                    a0:93:6d:c9:cb:69:32:3a:09:57:ad:35:af:92:1f:
                    d3:bc:62:36:d6:e6:42:74:e9:85:35:72:8f:67:fa:
                    fe:c4:8b:e8:a9:69:10:81:1c:fd:6a:b3:56:c3:06:
                    f5:70:a7:03:9e:84:d4:73:79:23:5b:19:a0:81:8b:
                    8c:fd:dd:bd:62:9e:09:63:ac:d1:9c:2b:0a:bc:14:
                    d3:f2:e0:e9:1b:bf:e9:1f:6d:cb:3b:a6:c4:66:fb:
                    f8:b5:60:f3:7e:91:fc:11:1e:04:be:b4:86:e6:60:
                    ec:83:fb:09:4f:97:00:e0:48:c0:56:6b:31:ba:01:
                    40:51:90:5d:59:54:41:8a:33:4c:3a:30:d9:9d:0c:
                    93:89:12:4d:02:52:15:28:b8:75:5e:58:15:af:fa:
                    91:63:34:d3:ae:02:9d:ba:51:ab:53:15:27:13:0a:
                    1a:c9:a4:e3:40:b0:3e:42:b9:bd:9b:80:37:69:13:
                    a8:bc:11:db:8c:bb:4e:cb:9b:02:d3:85:ac:8b:21:
                    68:1b:c6:85:ff:4a:2a:65:1b:36:90:ab:92:9b:3b:
                    10:32:11:74:56:1d:ef:50:33:fe:47:7d:ed:ef:a7:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:66:12:D5:08:D3:4C:F6:17:C8:9E:69:99:BA:EF:82:8D:6F:5E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13f8b48d-987f-3c57-85f8-3033b23c241a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:6c:e1:57:9e:17:02:7a:9e:96:c2:17:d4:d1:01:0a:cc:
         33:9e:96:e5:ed:d9:80:9f:0c:b4:fd:bf:dc:64:5b:7e:a4:1a:
         4d:64:08:5b:e8:4f:78:ab:c8:e0:da:91:79:45:bb:df:01:71:
         22:8e:8e:ea:79:0a:d4:c9:d4:0e:86:27:56:f8:ab:7f:55:e8:
         d1:87:82:49:1d:b4:5b:39:c0:57:b1:e9:2a:04:5c:c6:a6:f6:
         ee:d9:9e:7a:c6:fb:65:c3:ff:2b:00:e7:77:e4:e8:56:ad:1b:
         27:2e:7a:f0:1f:df:38:4d:56:48:39:5e:66:1f:2a:a2:8e:d8:
         7c:a5:f8:0b:74:c0:5d:cf:5f:b4:d7:4a:4d:33:45:4d:ea:c2:
         3e:df:e8:0c:21:b9:50:d3:08:72:53:78:5f:eb:d4:bb:33:4b:
         b4:6a:2d:fd:91:e0:35:27:a6:3c:1f:6d:ad:66:2d:0b:47:f1:
         5a:93:b2:8f:4f:5f:13:0e:8d:8d:70:e8:43:27:62:9a:97:f0:
         9e:32:d0:e8:16:04:68:8d:25:c9:64:76:7f:59:a9:9b:70:95:
         db:8f:fd:99:09:c2:55:0e:4f:00:23:cb:2c:d0:26:8b:75:a3:
         75:17:f9:f3:fc:24:c5:2a:a0:c5:20:d7:33:94:95:45:1e:80:
         8b:a6:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:09 2024 by rpki-client on console-fra.rpki-client.org