Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9384ccbf-31c8-33e3-b835-c92e06a65828.roa
File:                     9384ccbf-31c8-33e3-b835-c92e06a65828.roa (raw, json)
Hash identifier:          e88qcYBYSm3dHnxO9Yh5EoaV8XYKRU/WBwPjCGkk+CY=
Subject key identifier:   B1:0B:05:8F:93:2B:3A:F8:6C:8B:E6:10:B2:B7:8C:6B:D8:36:DF:3E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845533303834612961203F431A0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9384ccbf-31c8-33e3-b835-c92e06a65828.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        98.20.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:03:83:46:12:96:12:03:f4:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=6e3c3a59-9db6-499c-bb81-846b8169e527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fe:b7:ab:53:80:c9:19:1a:d7:14:09:13:2f:
                    d3:2d:7b:e7:0f:d9:d5:ca:96:b7:98:0b:61:d9:2a:
                    f1:c9:e4:8d:0c:8e:b2:ab:22:f5:6f:a1:9b:3b:eb:
                    10:ff:94:c9:83:03:7f:4d:b2:0d:33:5e:99:93:c0:
                    a4:f5:3d:3b:c5:dd:b5:56:07:67:55:a5:08:84:3a:
                    36:90:e4:91:8d:05:54:46:1f:68:e4:1f:9e:bb:d5:
                    36:c8:fd:cd:27:c2:fa:2e:70:b2:78:db:f3:b6:6e:
                    4e:f7:87:4b:4e:31:43:4b:a9:5d:e0:af:64:31:a8:
                    31:67:55:a2:bd:75:35:8a:ec:e6:ae:c8:b7:53:dd:
                    65:bf:79:66:59:a9:60:12:f1:a9:a7:26:3c:96:e1:
                    11:6b:90:2b:07:24:d1:2f:fb:64:2e:27:77:c9:4d:
                    b5:dd:e2:30:3b:e8:18:1c:87:9a:32:af:56:09:c4:
                    84:28:59:be:40:d5:5e:eb:34:c8:80:f8:07:ea:d6:
                    b1:a5:4e:16:a7:a0:a5:f1:20:b9:fd:e9:9f:07:88:
                    b3:65:77:47:75:78:13:2f:6f:d5:fe:31:c7:a6:28:
                    b0:4e:5d:2e:ca:92:7f:d1:b4:24:bf:f3:8a:4f:4d:
                    af:1e:fc:20:2b:71:68:f0:93:e4:74:ec:2f:9c:f0:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:05:8F:93:2B:3A:F8:6C:8B:E6:10:B2:B7:8C:6B:D8:36:DF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9384ccbf-31c8-33e3-b835-c92e06a65828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.20.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:8f:bd:5e:da:af:ca:a7:0d:1c:1d:ad:bf:b0:4a:bc:99:
         bb:e3:c4:c1:db:59:9a:a1:56:b1:3f:36:b1:ae:3a:34:36:43:
         35:4b:f7:f2:bf:85:b6:4b:c7:fe:e4:bf:ac:53:e5:13:99:df:
         6d:b1:28:7c:c9:ba:cf:bc:74:34:a3:2f:dd:8f:3b:36:bb:a0:
         c6:92:86:84:b8:20:57:cb:3d:60:81:81:5a:a9:dd:38:49:ad:
         d2:80:c6:d1:c2:d7:b5:68:b9:51:4d:6c:b2:79:9e:fa:c2:3a:
         84:ed:5c:07:74:11:4f:ad:02:4b:b5:78:d9:c1:37:48:15:a6:
         26:cd:19:10:13:5e:2f:8a:46:aa:24:ef:00:38:95:24:b4:29:
         80:8b:aa:55:40:11:2e:ae:c7:e2:99:21:2c:c4:b9:be:3a:e7:
         41:f4:2c:2f:2d:1c:6e:76:40:d9:85:50:07:e6:2a:fd:7e:8b:
         77:41:41:1d:48:55:db:1a:a8:9a:ee:ae:ec:ba:22:34:84:a3:
         3b:d1:7f:4f:4b:da:13:77:ae:34:7a:75:7a:bd:35:c1:c4:30:
         69:ba:b4:a2:46:af:5b:d4:27:55:43:0f:8b:f7:06:e7:47:a2:
         ce:9f:66:49:d6:23:0d:6a:0a:cc:48:d1:51:da:19:cc:19:8d:
         4e:65:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:37 2024 by rpki-client on console-ams.rpki-client.org