Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa
File:                     49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa (raw, json)
Hash identifier:          1kxxQCPxl/vv/ngaVOv7FI530T5eb3Q/VMOc7986Kmo=
Subject key identifier:   EA:95:A7:2C:D2:61:17:EB:33:D5:67:BF:0C:DD:00:46:9F:1F:93:69
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F432858456C530A47BF957F802D5ECE00
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     4181
IP address blocks:        208.73.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:0a:47:bf:95:7f:80:2d:5e:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=0d65173e-e33d-4561-b69b-c35038d8d860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:28:96:94:6e:95:db:48:14:58:03:70:a9:3f:
                    1a:ea:4e:a3:d1:64:64:66:15:11:0e:3b:59:bf:aa:
                    01:ea:00:02:3b:08:86:91:36:8e:83:22:c7:65:25:
                    95:23:0f:79:d4:62:1a:4b:0c:da:04:27:e7:b6:98:
                    2f:e5:2d:48:e4:76:4a:97:54:e1:d5:67:97:8b:50:
                    59:42:06:9c:41:fc:5c:48:0d:81:ee:85:cf:37:75:
                    92:c0:32:74:64:9c:8d:9a:99:00:c7:d6:42:88:81:
                    80:d6:29:35:bc:7d:5b:65:21:71:67:10:9e:d0:6a:
                    25:9a:08:91:39:f8:af:f7:3e:93:4e:66:87:53:00:
                    7a:82:fe:74:aa:6d:b6:12:7f:51:0d:07:fe:19:c2:
                    1b:8d:43:4b:86:7c:36:01:ad:0e:08:93:75:18:5c:
                    c2:cf:2e:ca:a6:8d:55:c6:be:b3:e5:8b:40:9d:38:
                    c5:68:fc:4b:83:51:70:30:62:b1:84:1e:44:33:53:
                    11:18:ec:20:21:e9:10:f8:19:e8:16:79:29:4d:39:
                    ac:48:78:54:6a:14:d5:b8:0c:88:53:ef:d7:84:36:
                    aa:72:72:29:d7:3b:dc:bf:38:78:24:87:e6:be:89:
                    2b:70:17:45:c7:f8:f4:cd:93:43:fd:92:74:00:0c:
                    e8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:A7:2C:D2:61:17:EB:33:D5:67:BF:0C:DD:00:46:9F:1F:93:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/49bbe62e-dbe4-39c1-a737-53299cd7ce97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:11:55:e5:e8:69:52:77:5b:b9:ea:0c:de:b2:e1:be:d1:
         1b:1c:13:e1:f3:1d:48:93:28:53:85:ff:55:ca:14:7c:a1:ff:
         92:81:d8:71:44:58:ee:72:df:d7:51:ab:32:51:76:ab:e5:d0:
         e6:04:8a:81:cc:0c:d4:ef:97:80:dc:eb:74:53:bc:59:ec:6a:
         79:0d:0f:f2:a9:97:54:4c:bc:9c:3c:95:82:27:d8:2f:53:0c:
         55:ea:6b:17:4f:1e:08:58:e1:f2:ce:93:ab:a6:5b:d6:e9:dd:
         f0:11:92:93:9e:51:90:16:68:63:76:9b:3f:a2:80:84:7e:4f:
         1b:ed:f2:a3:56:88:ea:f2:1a:a6:9e:58:a8:12:bf:44:b4:ea:
         ab:b7:f8:fe:f9:da:40:09:91:8b:60:3d:9e:f6:13:02:02:18:
         e2:4e:8e:00:1b:29:a7:fb:da:af:21:52:16:41:b5:49:6f:35:
         cc:67:e4:24:ed:84:9b:52:9a:f2:f4:fc:0a:5b:da:bd:2d:f3:
         ab:b2:bc:8f:23:44:c3:c5:c5:db:75:c7:1b:c1:a7:cf:01:e5:
         6b:55:b5:4e:1c:76:41:ff:f5:9b:ae:60:da:ed:dc:45:f4:44:
         76:58:04:d3:9c:ae:f7:50:e3:87:75:37:d4:d5:f3:87:36:bd:
         3b:8b:0b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:29:36 2024 by rpki-client on console-fra.rpki-client.org