Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa
File:                     8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa (raw, json)
Hash identifier:          TX1X0cQruDZCtl1xHyTtkZBQ8gBc4vMO9mjQuracqww=
Subject key identifier:   05:85:EF:D2:C1:F9:F9:F4:A6:E6:AA:9C:EE:40:83:24:1C:19:95:CF
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333395E06DB4D67DC01C580
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     26284
IP address blocks:        209.83.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:39:5e:06:db:4d:67:dc:01:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=44aeeefc-0dcb-4ce2-897f-3d3247adb50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b6:01:91:59:20:1f:13:e5:1f:64:92:83:eb:
                    de:83:a5:fe:cb:6b:a3:e8:d4:06:3e:ba:ef:cb:3c:
                    b3:f7:76:a4:31:cd:5d:09:5b:10:ec:24:27:5f:ab:
                    be:92:51:b5:a9:26:74:e1:61:c1:10:98:1a:f1:27:
                    fb:53:43:ee:e4:b0:c8:00:ab:4a:6c:52:3c:b1:a7:
                    9e:04:40:ec:9c:3e:11:82:3f:6f:f1:fc:c0:d2:47:
                    cd:10:ab:f4:85:df:23:4e:5d:88:2d:20:56:bc:a4:
                    e4:e1:2b:92:c2:48:51:23:e4:a9:43:b7:16:4a:da:
                    58:b7:d7:53:ea:e0:5d:51:13:b8:86:00:dd:df:2e:
                    21:99:2a:31:ff:95:c9:ee:ef:e9:dc:d4:a6:fb:4b:
                    2e:c7:ed:5c:ea:53:0b:c9:ce:02:7b:93:ea:66:b0:
                    fa:2c:93:1e:21:59:ea:a3:75:c6:94:f9:fe:02:8d:
                    89:b0:2c:c2:6d:d0:db:7b:92:11:61:87:dc:38:b4:
                    d3:28:08:c0:d7:1c:7f:f9:20:96:c2:91:9e:f0:d3:
                    9e:06:f8:2c:c9:b4:54:5d:b8:41:34:af:1b:61:66:
                    5f:0b:79:83:f1:2d:42:40:f4:ae:51:aa:98:5f:85:
                    c9:b4:98:6e:fd:99:41:bf:43:1d:12:30:54:cd:06:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:EF:D2:C1:F9:F9:F4:A6:E6:AA:9C:EE:40:83:24:1C:19:95:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8be3f7fa-0551-39a8-9fb4-da15a66a91ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.83.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:47:f1:9d:cb:0d:76:5f:7f:d5:c3:3e:7c:18:52:cf:94:53:
         67:f9:cd:e9:9b:2e:76:b5:e6:c3:27:f9:f8:1f:ca:2b:ab:a3:
         41:47:16:21:02:2b:2b:0e:d6:d0:94:1b:6e:a4:a4:9b:76:40:
         29:98:2a:8c:e2:96:74:4e:46:20:3e:b0:6b:92:19:b2:97:ae:
         11:17:c3:33:c1:3d:de:aa:0b:28:32:56:7d:46:bb:29:7c:97:
         c9:57:06:8f:6f:72:29:8e:f7:4e:24:4b:f2:a3:0e:14:f5:ee:
         5d:f0:41:58:c2:c2:f3:3e:7b:6b:6d:1c:df:08:67:c4:23:7a:
         35:21:f2:e1:f8:db:87:a6:39:f4:73:b2:1e:61:b6:40:ae:04:
         42:95:48:c9:5b:57:99:9f:c3:94:bc:c9:5a:2d:68:92:97:ff:
         01:49:13:5a:32:0a:50:ba:24:6f:cc:69:36:ce:37:7d:6f:07:
         d5:1f:63:ea:d3:dc:3f:15:3b:7a:e1:2e:ed:fb:46:f5:32:ab:
         ff:b9:d9:f8:1a:d5:26:13:f4:08:a4:75:70:2b:e6:23:07:f9:
         2a:5e:7f:8b:5f:c3:04:41:32:c9:74:44:fc:22:6b:68:9b:b4:
         61:38:00:94:96:28:85:b1:c5:0e:f1:6a:32:87:c7:b3:c3:b1:
         54:20:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:44:17 2024 by rpki-client on console-fra.rpki-client.org