Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9418f23a-a001-320a-ac19-10f1ccbd219f.roa
File:                     9418f23a-a001-320a-ac19-10f1ccbd219f.roa (raw, json)
Hash identifier:          4cN2hb2njsJFCRogx8FoLtEmMnL43QGJDrDAbOLHgQY=
Subject key identifier:   01:B8:49:5C:1B:6F:A5:DC:E9:EF:7D:04:13:A1:E1:75:E8:DB:31:D3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332FA6EBEF773D29F094D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9418f23a-a001-320a-ac19-10f1ccbd219f.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        75.90.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:fa:6e:be:f7:73:d2:9f:09:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=4a12dae5-db09-4f03-9533-01481b86037b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:aa:30:d0:93:38:7e:09:e1:d7:3c:c8:bc:
                    ff:8d:aa:f7:ab:b4:b8:bb:64:f8:7e:01:cf:cf:5d:
                    39:f6:e3:e1:be:8d:c7:2b:5f:00:92:a5:3b:04:d9:
                    21:81:81:1f:88:9c:e6:00:bd:c2:1f:81:96:55:ac:
                    14:2c:11:07:d5:50:e6:a1:90:99:82:b3:1f:eb:ed:
                    21:49:b5:d7:ec:eb:d6:30:c9:a0:46:40:f1:35:41:
                    6a:8f:5b:ff:11:29:29:e1:b3:19:58:e4:52:c1:1c:
                    47:69:1e:0b:17:f6:04:4b:2c:d8:dc:4b:c2:a7:7a:
                    d3:28:b3:a0:2c:af:d8:bb:10:9c:40:98:6f:16:13:
                    38:83:83:06:7f:cd:2e:f8:49:42:77:84:e3:48:81:
                    a5:19:51:cf:c1:93:c7:55:0f:41:f8:9d:90:f8:8b:
                    87:e8:b7:35:f6:e8:31:97:2e:d0:be:e6:94:87:3c:
                    54:f2:e2:f7:56:08:cc:3c:ae:89:4e:c0:45:91:00:
                    1c:78:70:67:60:73:06:11:7d:ad:e4:82:06:49:61:
                    11:ac:54:a5:07:c5:15:88:fa:1b:cc:87:4f:7a:80:
                    4a:ec:df:bf:a9:b6:95:8f:aa:65:a7:40:88:1f:90:
                    56:05:06:a7:ee:46:d3:ae:fb:37:11:a4:34:68:56:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:49:5C:1B:6F:A5:DC:E9:EF:7D:04:13:A1:E1:75:E8:DB:31:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9418f23a-a001-320a-ac19-10f1ccbd219f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a0:f1:f4:55:07:f0:0a:8a:a1:7b:23:19:8d:fb:92:14:09:
         e0:a6:85:d3:a9:cb:02:3d:d5:01:1b:a1:46:ad:de:b1:44:b1:
         1c:3b:39:36:11:e4:66:e1:ec:87:e4:96:17:c3:60:28:f9:df:
         5d:de:6a:f9:c6:e2:ff:67:43:3b:5c:71:cb:95:b7:3a:eb:73:
         a8:17:95:2c:a6:51:83:65:35:b6:13:4f:38:2b:b6:af:e6:81:
         d7:3d:e4:0e:96:24:a1:94:21:c7:fe:ce:4d:a7:89:e5:76:31:
         3d:c8:14:1f:5a:bf:9b:ec:50:60:03:40:76:2f:f3:60:8a:ed:
         44:5c:fc:b2:98:7c:c7:ca:56:e7:42:e3:d0:e2:c7:6d:62:87:
         5b:7c:4c:af:88:73:1d:32:9a:71:1a:d7:c9:13:f2:82:ec:a9:
         c3:db:7a:df:4b:61:24:01:fd:d5:a9:7e:5c:bd:77:5d:c1:dc:
         65:6f:ae:58:df:5b:9e:5d:eb:c9:55:7c:d8:ca:fe:c2:ad:7f:
         60:51:28:14:3f:e2:a5:a4:a3:5c:7a:ab:59:26:92:f9:39:53:
         bf:65:fb:2e:69:e6:2d:48:58:c7:7e:84:58:61:a7:5e:c8:44:
         20:2b:a2:c2:18:d4:67:68:6c:d0:89:f8:c2:5c:68:3f:7a:44:
         95:08:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:37 2024 by rpki-client on console-ams.rpki-client.org