Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa
File:                     36ae05ca-1685-3b04-877b-765a67c8b22a.roa (raw, json)
Hash identifier:          mIUqM0MIdRqWztaX5P1tma5FzW+hQQeYQ9UnjcQh5bA=
Subject key identifier:   48:4D:EC:D4:75:CB:E6:90:56:D9:37:9D:6B:B0:B6:9F:9A:7D:1C:0D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332E390A1F8799A6DEA4080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        66.148.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:e3:90:a1:f8:79:9a:6d:ea:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=6f625ba6-284f-4a2d-b5a2-886903f09a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:7a:84:72:16:0c:c2:37:bc:42:a3:84:f1:
                    e6:a8:1a:21:75:5a:5b:b5:61:d4:92:da:c5:53:66:
                    cb:43:ab:5a:c2:2d:14:8d:35:f7:bf:dc:c7:f8:a6:
                    92:1f:aa:27:39:9b:3b:49:52:99:1d:d5:ff:17:6e:
                    e7:16:43:b3:5e:c7:ec:e4:f3:bf:8f:ed:2a:76:e2:
                    48:7f:e1:31:31:b4:22:22:d3:ad:c4:3a:b7:31:41:
                    cb:e4:7f:97:e8:8b:45:90:bb:ee:96:99:a3:a2:96:
                    36:5e:d1:2a:36:50:30:1d:c1:f8:f8:09:62:6f:6d:
                    6a:1e:34:c6:15:ea:0b:6f:9d:ee:34:21:77:3c:ad:
                    46:60:d9:f9:f1:f5:11:52:4c:a5:d3:fe:12:b2:a1:
                    d8:ce:e1:9f:88:7f:c1:39:88:1a:4d:13:eb:da:23:
                    e4:4a:c0:59:5c:7e:0d:d1:fb:bc:d5:36:98:d1:88:
                    c5:05:8f:7f:5f:b8:17:cf:97:aa:07:22:72:ba:2b:
                    71:63:db:20:0e:cf:0d:44:b1:12:f8:6f:94:30:98:
                    f1:34:ca:6d:06:b3:07:a6:f2:80:14:b7:0d:bc:76:
                    53:41:b1:93:28:9e:a6:ac:41:5a:fa:f8:8b:e5:8f:
                    c0:41:5e:db:49:25:f4:cb:dd:0f:8f:f0:d4:91:e2:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4D:EC:D4:75:CB:E6:90:56:D9:37:9D:6B:B0:B6:9F:9A:7D:1C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36ae05ca-1685-3b04-877b-765a67c8b22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.148.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:af:83:19:21:40:de:0b:f7:95:80:b7:fd:46:f5:8f:72:
         23:a9:c4:bc:b0:46:1f:ca:7d:f4:3a:e3:67:bf:59:be:4d:34:
         9e:f0:b2:ca:86:dd:4b:eb:72:fe:ef:f6:1f:66:83:e2:f3:18:
         97:50:09:0c:d7:69:e7:b1:fd:83:11:18:e1:7e:f2:7e:14:57:
         7c:f3:98:5d:ef:d7:81:24:27:ff:7c:3f:e6:23:6a:86:34:91:
         34:2a:71:6a:6e:18:c7:37:6e:78:01:86:ba:1a:79:3d:50:ca:
         6e:5b:67:08:d8:0a:80:e4:9a:ae:be:eb:f9:15:a0:9a:7c:8a:
         b1:1b:49:1a:61:50:92:c0:cb:a7:03:42:a4:15:89:a0:82:cc:
         ac:43:d7:7e:62:aa:8e:79:88:ac:b8:a6:07:45:be:4d:74:e0:
         5f:9b:64:fc:93:6e:21:a1:2c:0f:1a:e7:0c:c7:37:df:37:09:
         f9:0c:ad:94:d4:53:dc:a6:ea:47:c9:17:b7:de:c5:0f:6a:3f:
         ed:fe:20:29:6b:23:a6:c1:fb:ca:35:d4:65:d0:88:8d:ea:5d:
         8b:6a:4d:87:c2:bb:12:22:74:41:9b:59:80:dc:52:ef:2f:d5:
         b8:f2:5a:71:3a:24:75:c4:00:36:af:c3:95:c9:73:14:27:65:
         4e:77:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 19:42:25 2024 by rpki-client on console-fra.rpki-client.org