Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85b64629-1b7f-3911-8082-952cf287c054.roa
File:                     85b64629-1b7f-3911-8082-952cf287c054.roa (raw, json)
Hash identifier:          Nz6O0wohvWsBY8zu+inCmL3cdGIMrNcAWzy7RpPY+sw=
Subject key identifier:   AA:8F:02:16:C4:FC:76:55:B3:19:4C:90:72:E2:F7:55:46:55:AF:FB
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553330C034AF1C38BF7189180
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85b64629-1b7f-3911-8082-952cf287c054.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        173.184.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:0c:03:4a:f1:c3:8b:f7:18:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=291afcab-cd3d-430f-807e-5a840524e96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:8b:a9:22:98:f2:f3:46:43:c9:17:82:06:
                    61:da:b1:7c:57:56:01:53:83:56:6d:96:80:6a:2c:
                    65:fc:4d:4d:ab:e7:28:a6:df:92:99:bd:16:c3:e3:
                    c2:32:7a:09:a7:cb:27:2a:c4:e9:09:e7:06:42:a5:
                    80:19:35:c5:d1:ac:b8:50:4e:a8:6a:3b:29:d4:ad:
                    fd:95:ca:13:1e:ab:1b:7a:e3:89:fb:47:ed:cf:63:
                    ae:e0:01:ff:23:ba:d4:b7:6d:1d:80:92:2d:e3:7c:
                    0a:27:80:66:b2:6b:9e:70:45:79:37:c5:8c:28:ac:
                    c8:98:d3:f9:6b:fb:41:1f:75:54:17:0e:2e:47:bf:
                    d7:0c:11:a4:8f:6a:9a:d8:a3:97:57:45:ee:71:7d:
                    04:d2:26:ee:db:db:2e:dc:f0:4d:a3:57:d1:87:f4:
                    da:a7:1d:20:f0:56:ba:ab:d1:a6:2f:75:c2:69:fe:
                    96:01:f2:6a:cc:91:d6:d2:1e:31:de:27:05:91:e4:
                    b5:66:9e:46:56:5c:ad:92:d8:33:e2:a6:47:51:d6:
                    8d:88:1c:46:1d:2c:12:6a:d4:2b:ac:c5:1f:26:ca:
                    23:b2:c9:f0:77:09:f6:1a:57:ff:c1:cc:5c:67:5b:
                    40:93:2e:e5:e2:10:21:1d:05:7d:d6:74:71:cb:aa:
                    a1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8F:02:16:C4:FC:76:55:B3:19:4C:90:72:E2:F7:55:46:55:AF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85b64629-1b7f-3911-8082-952cf287c054.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.184.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:24:8d:e6:d8:81:98:c5:93:2e:84:d0:61:26:ce:7c:6a:33:
         bf:0f:89:0f:3c:18:14:e8:2d:c3:e7:0a:4c:2c:dc:62:6d:d9:
         85:94:d8:e7:7f:f1:0f:c6:cb:80:35:ca:f5:bc:40:23:0f:a9:
         23:35:3a:da:28:2c:9c:8e:8f:5c:1b:56:f0:de:38:76:18:31:
         a0:ca:b8:1e:8c:2d:49:6a:18:29:af:31:42:bc:0e:54:c3:70:
         b1:09:70:d0:b6:37:32:90:71:d9:5e:36:1e:50:f8:f7:d2:56:
         41:e3:44:6b:70:13:4a:af:51:74:ac:5e:27:f9:f7:b7:b7:b8:
         f1:a6:73:72:eb:0e:4a:32:a6:e1:93:47:6e:f0:fc:5c:cd:a3:
         61:ff:d6:51:c9:7d:e6:52:db:fd:5d:e3:fd:01:b6:e4:b2:4a:
         f6:04:19:1a:a5:3c:5d:54:b4:a8:26:52:fd:21:1f:70:9e:ca:
         77:3b:e4:9f:ef:58:2e:45:33:fe:42:09:aa:94:c9:46:15:8c:
         f6:e8:b8:a7:03:cf:7e:d8:f5:ee:1e:5d:28:fb:f4:e5:fd:d6:
         55:88:ff:1b:81:84:8e:00:10:bd:04:d7:98:03:0a:ae:73:36:
         83:5a:0f:d5:16:fe:e5:dc:f1:4b:a5:29:60:9b:8f:60:a4:16:
         3b:3c:59:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:35 2024 by rpki-client on console-ams.rpki-client.org