Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33490.roa
File:                     AS33490.roa (raw, json)
Hash identifier:          LHC9u5Uxs02r15zWCCGorUyM9NN9haYI5qrLRYzuLb0=
Subject key identifier:   33:68:FF:66:CC:12:CB:78:55:BD:CD:21:88:54:E7:B8:B5:A0:7C:EE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       66E2C76A733FEE265060DF185CD203798B94C53E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33490.roa
Signing time:             Tue 23 Jul 2024 14:50:58 +0000
ROA not before:           Tue 23 Jul 2024 14:45:58 +0000
ROA not after:            Tue 22 Jul 2025 14:50:58 +0000
asID:                     33490
IP address blocks:        74.50.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e2:c7:6a:73:3f:ee:26:50:60:df:18:5c:d2:03:79:8b:94:c5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 23 14:45:58 2024 GMT
            Not After : Jul 22 14:50:58 2025 GMT
        Subject: CN=3368FF66CC12CB7855BDCD218854E7B8B5A07CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:51:6f:30:b0:93:91:bc:76:5c:09:1c:30:
                    ea:a4:c7:47:3e:b9:93:44:91:1a:6a:e1:73:1a:ac:
                    99:16:6a:04:a0:45:74:1d:73:38:bb:5d:78:4d:b7:
                    d7:18:a4:e9:a4:04:fb:92:00:87:da:f5:9d:5b:eb:
                    40:c8:05:6d:cb:80:6f:f9:ee:14:f1:04:8a:e8:02:
                    a7:65:0c:4e:53:ff:06:0c:7b:27:a7:f8:26:bd:da:
                    34:52:9f:de:4e:73:5e:66:b7:16:72:41:d2:3a:67:
                    32:55:9c:45:a4:e3:e5:95:d7:dd:9f:ec:a2:02:a2:
                    08:49:81:a3:11:cb:b4:4f:19:54:24:fc:a0:db:4e:
                    d2:c8:f1:c4:04:80:41:c3:d5:0a:58:42:bf:eb:10:
                    95:55:03:eb:09:53:80:6e:19:f6:78:55:d2:df:0a:
                    3f:06:03:61:a6:94:f0:49:13:f1:7c:eb:08:78:7e:
                    6d:ae:c0:b2:05:7e:2d:c8:ae:f0:aa:3b:25:d4:d4:
                    0a:80:31:45:ca:d2:e9:ba:55:11:13:51:f6:55:03:
                    4d:f1:bb:8b:6c:0e:b1:a2:59:4f:1d:68:37:da:a5:
                    8c:95:93:73:92:2f:ed:37:5f:fc:79:a5:15:01:23:
                    36:b4:3d:41:82:f6:5f:0b:06:79:df:33:24:5d:e7:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:FF:66:CC:12:CB:78:55:BD:CD:21:88:54:E7:B8:B5:A0:7C:EE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33490.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:7e:54:20:2d:a9:27:09:16:f5:90:ac:0d:70:da:60:00:a4:
         54:28:e2:36:60:ae:58:92:29:2f:d5:9c:ee:44:58:15:c6:e4:
         7a:ec:b9:b6:37:1c:c3:60:f2:5c:4f:27:03:48:35:e5:20:3c:
         32:ef:55:e1:eb:a5:85:6b:5e:56:b7:c0:4c:ce:ff:12:93:11:
         29:25:aa:1b:0a:c9:40:57:b9:8a:66:3e:84:c3:a3:32:b7:3a:
         b3:10:bf:de:15:9c:46:5d:56:9d:b0:07:46:f8:db:b2:4b:18:
         70:e9:0c:38:76:95:4d:08:5a:69:bc:29:5b:90:91:a5:14:f0:
         a3:81:b3:18:08:37:d3:b5:9a:f9:9c:9b:53:57:b7:73:54:13:
         23:7d:8d:85:22:26:4c:87:19:ea:12:0f:67:30:a4:39:0c:a4:
         d0:33:5a:a8:94:a2:5e:e6:f6:f0:e7:da:29:fa:48:fd:3d:0d:
         d1:a3:fe:e4:f3:b2:f9:cc:af:e5:f2:3e:93:f9:be:72:93:28:
         82:37:d4:fb:5b:ad:ad:03:86:d0:e1:56:88:b8:b2:6e:8a:25:
         ed:54:e5:49:a1:d5:3f:4a:12:1b:4a:26:8d:63:b3:2d:94:e6:
         bc:c1:9f:3f:e0:36:1f:59:6d:72:6e:d7:29:28:c0:31:8c:92:
         3c:cb:78:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:59 2024 by rpki-client on console-ams.rpki-client.org