Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa
File:                     2740e1e0-7980-3707-b098-f21fdbd6be0f.roa (raw, json)
Hash identifier:          S/vIgJsaUm1R/YlmG/dj95RadHbpIRUarRlBfT1+Qao=
Subject key identifier:   B4:47:09:31:2D:86:5D:64:7E:23:BD:CA:AA:B2:43:E7:BA:68:FA:8D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858473117AA47CE85F469DF524C60
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa
Signing time:             Thu 12 Sep 2024 17:22:14 +0000
ROA not before:           Thu 12 Sep 2024 17:22:14 +0000
ROA not after:            Wed 11 Dec 2024 18:22:14 +0000
asID:                     7029
IP address blocks:        75.88.168.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:31:17:aa:47:ce:85:f4:69:df:52:4c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 12 17:22:14 2024 GMT
            Not After : Dec 11 18:22:14 2024 GMT
        Subject: CN=c77239c9-b875-4896-9b63-37089df8c385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:eb:42:81:5b:7c:8e:21:69:6f:eb:ea:71:
                    5d:05:8e:aa:6e:10:8e:e8:8a:9a:9d:ac:20:57:76:
                    dc:88:3d:ee:8d:22:f8:29:8f:36:04:5b:dd:47:ed:
                    19:65:aa:05:6d:a1:5a:15:db:d5:a3:50:01:56:1a:
                    4a:75:f8:6c:72:20:56:02:4f:67:a1:49:43:71:10:
                    7f:03:3a:75:c3:b4:75:78:8c:56:03:0a:3a:4e:01:
                    92:21:74:ad:ab:1c:55:90:56:de:72:4d:47:46:a1:
                    90:7c:78:b9:b7:a0:cc:96:42:f4:a7:f8:92:fa:ca:
                    3c:c0:af:f3:9e:87:8a:44:24:82:6c:22:49:d0:2c:
                    97:bb:ff:42:40:f7:14:7f:22:6a:a9:40:67:89:32:
                    59:3d:ed:53:f0:81:79:3d:4c:ad:f0:95:c0:03:34:
                    8f:dc:c9:e3:80:40:85:11:99:10:13:e2:f3:d7:5d:
                    83:3b:0a:43:68:3b:e5:d0:c7:14:67:e1:38:1e:1e:
                    ee:3f:26:5e:5f:60:44:31:cd:05:51:5f:b0:80:ac:
                    0a:a7:d9:0d:54:07:ce:20:87:3f:9c:4c:45:61:d0:
                    1a:07:04:c3:66:41:d3:b4:c2:79:2d:b6:38:6b:6f:
                    d3:d1:ed:71:42:98:14:2c:3e:25:29:ed:3e:d3:6f:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:47:09:31:2D:86:5D:64:7E:23:BD:CA:AA:B2:43:E7:BA:68:FA:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2740e1e0-7980-3707-b098-f21fdbd6be0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.88.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:86:59:42:c3:41:71:8c:3f:5d:d4:5b:95:6b:0f:28:f9:5d:
         06:81:00:60:e3:b4:2e:b0:b8:80:af:d0:9f:65:cf:9e:85:83:
         f3:56:41:3c:03:62:7a:da:9a:1b:d3:fd:d0:0a:8b:dd:5e:33:
         fd:5a:79:72:bb:da:be:f8:f2:25:98:ce:e4:35:6c:50:23:d2:
         cb:de:91:66:fa:67:75:38:b3:46:7c:46:e0:51:bf:7d:a4:a1:
         9a:98:b1:0b:78:b1:3b:34:63:c0:3a:23:72:93:f9:3f:d6:1d:
         03:66:1c:82:83:26:91:e7:5a:68:5b:1b:19:1a:cc:7f:c2:a2:
         0e:90:60:9d:12:ae:a8:00:d3:be:23:e9:b6:82:a9:4d:b4:b8:
         41:81:16:da:d3:7e:bc:f0:29:bb:77:64:06:b9:63:d5:d6:3b:
         3a:23:ca:5b:90:ab:bb:f3:c6:d1:14:dc:5f:9e:96:22:68:3e:
         e4:b9:de:bf:c2:8c:91:96:d7:80:63:77:23:f7:bf:c9:73:53:
         c1:4d:dd:df:f2:67:c2:0e:ab:ed:e9:e2:da:ad:85:96:21:66:
         8e:f1:05:a9:a9:94:b6:ea:bc:eb:b8:48:d4:41:8e:ad:6e:ec:
         d4:18:56:dd:33:d1:fa:69:c5:90:94:93:c9:a6:36:b6:b7:94:
         a9:22:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:54 2024 by rpki-client on console-fra.rpki-client.org