Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/260788fe-525a-33b4-af9b-007334eb0bc7.roa
File:                     260788fe-525a-33b4-af9b-007334eb0bc7.roa (raw, json)
Hash identifier:          EYmNL2HfGx8SI+9BfjN8pL8scUO/fnw+vvNJiwPJoY8=
Subject key identifier:   28:A5:1B:50:2E:0C:51:2B:E6:F5:F8:FB:EC:4F:9A:E2:59:A5:87:0E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553330BDD53EF39482B955FC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/260788fe-525a-33b4-af9b-007334eb0bc7.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        173.184.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:0b:dd:53:ef:39:48:2b:95:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=99bce542-6d82-47bc-8e07-2a7463009606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:67:ff:eb:5e:d7:a3:08:f7:c6:ae:2b:a4:
                    54:fc:b5:5d:cb:05:a4:58:f3:b3:68:47:5a:a9:a9:
                    c9:48:8a:7b:26:0b:25:fc:7d:12:f8:dc:fe:50:00:
                    9e:4f:4e:05:84:5e:80:ef:6d:0d:59:9c:48:50:fd:
                    fa:0d:ec:3d:ea:2f:05:e9:6e:11:ab:e8:14:c5:2f:
                    41:52:3d:9a:4a:78:3e:d3:0a:d3:5b:c0:b5:45:b9:
                    ae:69:8e:f3:ae:42:b3:90:f4:65:24:5d:17:ba:b5:
                    cd:d8:02:70:8a:54:f1:06:5f:81:9f:ed:48:ef:d6:
                    14:2f:49:70:5a:ad:21:d5:18:2a:ed:13:99:7f:89:
                    13:8b:04:8a:49:3a:12:fe:b9:56:d9:65:0a:ab:a2:
                    8b:76:57:3c:51:b0:b4:50:cc:0f:b5:5b:29:e3:f4:
                    f0:72:fe:b1:be:15:91:af:8a:0c:6d:ba:34:a0:bd:
                    ec:03:18:14:7f:c2:73:29:a9:3d:20:15:d3:32:f2:
                    d1:64:3e:29:29:54:a7:6e:d5:c3:7f:f0:bf:7a:3e:
                    5f:bd:64:17:db:47:0b:1c:00:29:88:96:a2:e0:89:
                    06:88:4c:69:1e:c5:0d:10:4e:d6:d3:16:62:b7:bd:
                    ac:33:ff:81:46:10:94:cc:f9:26:14:e5:a4:a7:d3:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A5:1B:50:2E:0C:51:2B:E6:F5:F8:FB:EC:4F:9A:E2:59:A5:87:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/260788fe-525a-33b4-af9b-007334eb0bc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.184.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c5:0a:03:22:3a:f2:b7:b1:0c:88:e4:eb:ef:b7:0e:a1:fb:
         ab:76:7d:3c:c6:62:56:1a:64:08:ee:29:98:07:1a:9a:7a:9d:
         fd:b8:56:5a:af:7d:79:aa:33:0b:4e:81:83:e6:12:6b:94:40:
         bc:0a:99:2e:5b:75:06:c6:ad:e5:03:94:76:2e:c0:35:6d:3f:
         7f:18:2a:b7:86:7b:16:d7:9c:a9:8f:58:6e:f5:5a:11:53:1e:
         6b:53:fe:91:50:de:d3:e9:b4:73:f4:c8:c3:b4:81:9e:b7:34:
         f5:e3:50:7a:08:14:48:5b:48:f2:fd:75:ae:bf:59:10:2a:8f:
         05:92:d2:b4:09:fb:c6:99:4a:4b:5b:a2:fc:af:58:77:2e:f4:
         5e:64:4e:ac:50:e9:a4:3d:e6:f4:c5:87:e4:23:c2:80:ad:d9:
         97:6d:2d:41:01:c9:54:53:85:9e:aa:a8:6f:5c:60:b2:8d:ea:
         3e:e8:da:a4:a0:f7:a9:66:aa:9a:e8:d6:ee:3d:ad:a0:8a:3b:
         f0:35:7c:ac:8c:3b:99:df:11:8c:59:65:e1:ee:41:bb:3b:bf:
         71:d5:55:74:7a:be:82:11:b0:90:ed:c2:cf:dc:cb:37:d3:9d:
         52:ae:9c:ed:a7:7c:ab:c2:d4:78:39:a3:c0:f3:4a:dc:66:92:
         c3:a0:7b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:28 2024 by rpki-client on console-ams.rpki-client.org