Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          FNaBAPwrR7GLBv+Fo4DBcqu3FI18WzsEhJ6sU2uY8H8=
Subject key identifier:   3E:BF:D5:06:54:5F:C1:D1:A7:14:63:34:54:19:EC:CB:32:7C:C5:1C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       66F73601385709D483C31F3FBB076081E61C93F0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa
Signing time:             Fri 10 Nov 2023 11:56:46 +0000
ROA not before:           Fri 10 Nov 2023 11:51:46 +0000
ROA not after:            Fri 08 Nov 2024 11:56:46 +0000
asID:                     7029
IP address blocks:        190.92.160.0/22 maxlen: 24
                          190.92.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f7:36:01:38:57:09:d4:83:c3:1f:3f:bb:07:60:81:e6:1c:93:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Nov 10 11:51:46 2023 GMT
            Not After : Nov  8 11:56:46 2024 GMT
        Subject: CN=3EBFD506545FC1D1A71463345419ECCB327CC51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:bd:4e:e6:59:98:c9:f9:f3:f4:4c:1d:0a:
                    62:dd:12:ae:c7:f4:73:54:fd:7c:f6:a4:b5:57:86:
                    28:f1:7a:05:73:87:0b:45:8c:8b:75:c0:d5:8d:6e:
                    a5:da:7c:94:d7:d5:5e:b3:0d:70:98:83:05:84:cb:
                    09:17:4d:a3:b7:6f:70:ce:43:cc:bd:7d:e8:c5:77:
                    ad:84:61:a9:2b:09:2b:e4:46:da:7a:3d:63:5f:e6:
                    62:4e:41:8a:ec:37:c4:58:35:28:da:d5:5f:4e:03:
                    6a:8e:cf:67:cc:38:82:c3:3f:37:5d:fd:5f:15:19:
                    2f:54:35:12:d6:b3:26:91:c1:2c:03:d4:c0:eb:3e:
                    80:de:0b:bd:1a:34:f5:6d:7b:23:83:b2:4d:6c:ff:
                    19:9c:53:f1:74:6d:4d:dd:51:b6:46:5d:40:59:c3:
                    62:f5:9c:93:f1:1d:40:fc:e8:ce:37:bf:36:4e:07:
                    a4:1a:d4:32:e5:c3:30:c8:b1:41:af:c1:bf:fa:34:
                    51:9e:e3:d2:2a:68:9a:ed:76:a3:1d:53:44:df:3a:
                    fe:89:67:f7:9d:71:4e:ac:84:1b:8b:44:f3:f7:7f:
                    9f:22:5f:02:88:3a:f2:a0:39:78:78:ff:46:73:00:
                    68:10:f9:e9:09:64:9f:7a:8b:38:af:79:38:b6:7d:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BF:D5:06:54:5F:C1:D1:A7:14:63:34:54:19:EC:CB:32:7C:C5:1C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b1:d2:4d:86:cc:9c:e0:2c:4d:a2:ec:ab:ca:0e:dc:fb:c1:44:
         41:92:bf:aa:0b:2f:0f:e6:29:7c:09:81:34:d9:02:a8:5e:f1:
         81:54:16:07:52:2c:1c:9e:b5:73:a2:7b:25:f3:ba:71:07:d2:
         67:25:f2:19:13:08:96:49:a4:08:17:86:dc:bc:4f:ea:5a:18:
         ae:de:75:f5:fc:ed:b4:d2:ba:6a:ec:7d:90:e1:17:8d:00:db:
         3e:60:ba:cf:be:4e:4a:00:58:27:00:76:be:46:07:d1:56:ec:
         dc:eb:2e:8e:ba:c7:b3:36:31:71:c9:ea:2f:c2:33:a4:df:5f:
         62:4e:0e:45:7b:59:3c:22:49:49:ba:d9:16:c4:f6:b9:2f:81:
         a1:46:b3:98:fc:9b:95:a3:b3:47:16:a2:f6:01:aa:d2:e8:8d:
         ee:f2:19:5b:1b:bd:af:32:64:db:8e:ed:9d:26:9d:7b:05:64:
         20:af:00:8a:18:33:b9:a5:3a:f5:68:15:88:bf:63:54:78:a4:
         d4:17:0d:ad:26:c8:44:94:fa:10:b1:1e:a2:4e:89:46:94:25:
         3c:1f:87:aa:53:dc:32:be:22:e8:cc:66:2f:13:1d:3d:63:65:
         58:1a:93:11:0e:06:d6:82:0f:1c:70:aa:28:c4:8b:8e:2e:0c:
         b6:7b:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:17:04 2024 by rpki-client on console-ams.rpki-client.org