Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa
File:                     e9b31ccf-98da-348c-b41c-4897b4b0a929.roa (raw, json)
Hash identifier:          eq2jSb4FtLZ8JeZLQoA7xQ9i/mHizA/zbRZlAYapyN8=
Subject key identifier:   FA:7F:1F:BA:E6:36:CF:01:40:D3:C1:D7:38:38:1F:05:47:72:68:D6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455B6E65ABB747172B5D70AB60
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa
Signing time:             Thu 28 Mar 2024 11:47:04 +0000
ROA not before:           Thu 28 Mar 2024 11:47:04 +0000
ROA not after:            Wed 26 Jun 2024 11:47:04 +0000
asID:                     7029
IP address blocks:        75.88.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5b:6e:65:ab:b7:47:17:2b:5d:70:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 28 11:47:04 2024 GMT
            Not After : Jun 26 11:47:04 2024 GMT
        Subject: CN=1854fc65-c310-4d8c-ad3b-b8d48eb0169e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:2d:c8:97:a1:d6:c4:31:6d:21:62:33:de:
                    3a:82:7d:8b:eb:42:a0:13:61:af:d2:e8:43:72:86:
                    08:3b:c5:0d:a5:cd:c3:1e:07:99:c6:e5:70:05:98:
                    c3:11:ee:0b:c7:f3:d2:07:22:2f:70:77:ca:f4:ff:
                    96:a8:a7:46:f5:e9:0b:59:24:87:b1:71:19:7c:33:
                    c7:13:01:ed:81:53:87:87:ea:b8:ff:44:56:df:a1:
                    09:67:0c:c1:e5:4c:b8:3c:78:14:22:23:61:46:4f:
                    92:a7:52:be:4b:8c:18:7d:69:bb:cc:1e:f1:9a:fc:
                    66:e7:0c:1f:bf:72:34:5f:d0:e4:86:05:28:89:70:
                    54:98:79:77:4c:83:8d:b6:f2:7d:81:a0:40:9f:ce:
                    5b:27:44:8d:41:73:15:d9:d6:8a:96:ff:1b:5f:d9:
                    a4:f9:ed:4d:e2:3c:74:14:6c:ae:13:f6:a7:e3:95:
                    52:fd:72:90:66:e2:09:d9:fb:ec:b6:14:41:fe:e4:
                    d1:a8:bb:a8:84:c9:35:b9:07:84:05:3e:f8:73:88:
                    87:61:b2:73:01:d6:3f:90:4b:8f:64:eb:d5:a4:25:
                    84:5b:91:87:e5:6e:c6:d0:31:54:61:77:40:e0:62:
                    7c:f8:13:7b:16:3e:0c:36:ea:72:29:c2:f8:ee:19:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:1F:BA:E6:36:CF:01:40:D3:C1:D7:38:38:1F:05:47:72:68:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e9b31ccf-98da-348c-b41c-4897b4b0a929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:97:ca:79:5b:17:62:26:71:f7:a4:44:89:fc:ca:56:bb:53:
         32:3e:09:b9:c9:b8:62:37:d8:51:95:19:68:3e:6c:3c:b1:82:
         4a:89:2d:ad:9d:3c:4a:c9:b2:4c:15:79:3a:e2:58:90:d0:22:
         b5:e4:eb:56:09:0f:09:0c:3e:26:5c:6a:c0:49:a0:96:d2:c9:
         7c:c9:b0:44:22:4a:d6:97:cd:eb:dd:3d:66:26:1f:29:f1:03:
         1c:7d:c9:7b:ec:38:21:02:1f:a6:04:a7:c6:b7:78:bf:73:29:
         20:84:a5:82:ca:1e:9c:7e:63:bf:b9:06:30:75:e5:b8:b6:88:
         9d:6b:c3:45:c9:1c:65:42:8b:b8:0d:93:2d:29:92:f3:36:16:
         3d:06:56:1a:2f:1c:69:9d:d7:43:88:27:49:b3:eb:d1:cb:12:
         17:64:32:50:ba:4f:d8:09:f8:0a:e9:2b:43:c1:cd:22:83:3f:
         02:f2:8f:9d:ee:19:df:2a:9a:b6:e0:10:ef:62:8a:27:93:bb:
         bd:7b:34:ae:e8:fd:d5:82:54:db:ab:db:59:5d:18:1b:e3:d5:
         1b:d0:d1:42:ee:19:c1:0c:7b:a5:6d:e0:6f:9c:3e:3e:8d:39:
         91:2d:80:bd:f5:e5:0e:33:a8:a2:2b:66:dc:63:3c:34:df:f2:
         bf:ab:23:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:42 2024 by rpki-client on console-fra.rpki-client.org