Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6611bed8-942a-35cd-9ae6-ef3a61f28dc5.roa
File:                     6611bed8-942a-35cd-9ae6-ef3a61f28dc5.roa (raw, json)
Hash identifier:          tZ8k+68QND41jGhsgBsa+DWTqJxmOD9Xkes28nw/Ofk=
Subject key identifier:   17:E8:29:B3:9A:28:2D:6F:42:7F:00:68:33:99:91:F9:5F:24:15:CA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845533317051B4DB88FCBA8C4C0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6611bed8-942a-35cd-9ae6-ef3a61f28dc5.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        199.182.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:17:05:1b:4d:b8:8f:cb:a8:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=e0c724c1-07c4-41aa-b0ff-21d0ef553440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:47:84:92:39:04:c9:2c:e6:42:8b:4a:0b:69:
                    bb:4b:c6:ab:80:32:45:09:ca:6f:6a:b8:1e:2a:3b:
                    4c:d0:18:f6:60:f1:4f:be:60:50:47:25:42:ac:50:
                    43:84:4a:ca:4c:65:bd:0e:65:77:aa:2a:b7:3c:4d:
                    c1:ca:ff:dd:3e:12:93:31:06:ba:41:31:44:0f:0c:
                    66:35:63:e5:6a:7c:58:7a:81:93:06:44:b6:94:fc:
                    12:6f:fe:ed:c2:1e:02:98:81:3f:0d:39:36:c8:36:
                    47:8f:ba:4e:5f:cd:41:e8:ed:0d:03:e1:7a:47:7e:
                    6a:e2:c4:b2:4b:3c:0b:a0:13:f6:21:25:f0:6e:d1:
                    b2:18:0d:42:48:8a:44:cf:d2:77:5c:f3:55:58:1e:
                    c2:78:80:6b:2a:7c:b8:10:38:4a:eb:e8:7f:31:16:
                    3e:e7:47:b2:d4:1b:01:a7:99:d8:cb:c0:de:4f:6f:
                    43:7d:5b:66:fe:45:30:2f:b0:53:33:80:3d:79:02:
                    40:7b:82:38:57:90:51:dc:2c:21:cb:d8:19:da:f0:
                    33:b9:d5:0c:49:dc:b6:26:ae:7e:16:f0:c8:c7:ae:
                    ac:0a:6e:ec:d6:72:93:b4:16:e2:d2:e7:cd:db:25:
                    63:01:fd:05:3a:8c:81:ec:ca:ae:8f:dd:a3:27:5d:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E8:29:B3:9A:28:2D:6F:42:7F:00:68:33:99:91:F9:5F:24:15:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6611bed8-942a-35cd-9ae6-ef3a61f28dc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:1d:21:5f:f5:1a:f7:1a:9f:22:ac:12:2a:a8:dd:70:de:46:
         fb:55:2f:65:13:2b:89:c3:49:14:56:57:7a:10:f0:52:8b:6d:
         d6:6f:4c:16:03:14:e6:55:0b:e3:ae:ea:c3:58:3e:89:f2:e3:
         93:d4:6d:59:22:ec:fd:f4:26:44:11:3c:60:1f:80:7b:35:68:
         be:28:fc:2e:9c:75:95:da:9a:f3:64:a7:a7:fe:bb:f1:b3:81:
         1c:d3:bb:ac:10:7f:42:20:d6:14:28:ca:bc:84:71:13:18:21:
         db:41:c8:df:a4:2d:b9:11:6e:27:80:3d:6a:f2:e1:89:5a:af:
         14:3a:1c:6f:53:3e:5c:02:a1:0d:45:42:fb:15:a3:ba:53:28:
         8b:3b:d8:49:79:44:33:a0:8b:8b:8c:a2:4b:eb:5f:fa:db:4b:
         ab:a3:bf:6b:dc:9e:dd:21:bf:9b:f9:af:1f:7e:26:69:b7:a9:
         a2:f4:3b:39:32:f6:44:03:ba:c2:a9:6c:4b:0d:9f:f2:66:c6:
         ce:ac:38:57:89:1c:31:cd:6a:40:85:81:79:00:24:99:ae:db:
         d4:2b:83:f8:04:a4:25:04:0b:ef:2d:88:12:c1:fe:bb:c8:f4:
         29:a4:e8:34:d9:06:70:c3:a8:18:a2:5a:6e:b2:a8:50:e3:b6:
         09:c6:93:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:33 2024 by rpki-client on console-ams.rpki-client.org