Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e5907f1-78c1-3f27-a9ae-1f065c3ff14e.roa
File:                     2e5907f1-78c1-3f27-a9ae-1f065c3ff14e.roa (raw, json)
Hash identifier:          +N0nJ6ZGbuO266/3flBarGYvAmb9BtzG10ayPl41i38=
Subject key identifier:   41:EA:34:72:3B:6C:68:31:AD:90:1A:6A:9B:06:27:D0:41:22:FC:4D
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332E69A8898AACFDD0CD000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e5907f1-78c1-3f27-a9ae-1f065c3ff14e.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        67.140.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:e6:9a:88:98:aa:cf:dd:0c:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=c9f9dc77-5fb2-49cf-9888-ac99712b8c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:ed:40:c7:0b:e3:22:99:da:f1:91:bc:e8:
                    5f:4f:85:da:8e:96:f0:14:7f:42:5c:84:0b:8a:25:
                    93:c8:6a:22:d0:23:38:f2:19:0b:3c:5c:ca:c3:d9:
                    73:d5:0c:1e:97:fe:03:b9:ac:70:a8:ee:d0:2a:2e:
                    bb:ba:60:9a:40:32:07:43:23:0e:df:c3:8d:2e:01:
                    19:b3:2c:5f:73:d1:5e:4d:cc:e4:07:32:c8:42:f8:
                    ff:3f:f7:06:6e:f7:34:83:ae:a8:d9:e2:01:46:a7:
                    9f:db:5a:5f:9c:93:0e:61:31:a6:1d:d9:74:77:bc:
                    15:ba:2b:12:d7:30:b1:ac:ac:d8:e5:f8:9d:9d:fc:
                    b2:2d:85:82:d8:fc:53:79:ce:f3:7d:9d:9d:3f:f7:
                    55:a9:07:56:5c:18:87:3d:11:1d:93:4a:26:69:57:
                    5b:54:bd:fc:df:06:18:d1:7c:a6:b1:6e:d9:99:59:
                    46:95:d3:a6:b2:61:da:26:21:b0:c9:a7:c6:61:2f:
                    16:62:07:7d:6b:ed:05:75:3f:48:35:ce:4e:38:4d:
                    90:a6:b0:9b:35:9d:6e:8a:f5:8a:6a:35:3d:a7:49:
                    60:89:d5:6f:46:e0:da:38:7a:80:15:fb:09:e7:c7:
                    ba:b8:0f:e3:92:10:38:c0:39:1c:6f:f4:b0:fb:0c:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EA:34:72:3B:6C:68:31:AD:90:1A:6A:9B:06:27:D0:41:22:FC:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e5907f1-78c1-3f27-a9ae-1f065c3ff14e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.140.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e3:15:2a:ab:a5:10:61:33:89:8a:71:0b:78:68:1f:6b:2f:
         d5:cb:b2:1d:7c:e7:20:ae:96:29:f4:5b:d8:ab:d1:8d:06:d3:
         f5:d2:81:dc:2e:9b:10:b5:09:2b:92:b9:46:d6:b9:f0:4a:55:
         ab:2d:ef:bb:63:96:9a:6d:ab:a8:d2:c5:7d:40:96:1b:59:72:
         ca:69:50:a0:64:76:e5:3a:89:a2:a2:33:0e:03:1c:01:25:34:
         36:8b:a2:3a:72:81:3f:32:f0:80:09:f6:d8:f4:a7:ca:c9:79:
         52:82:ad:9e:82:01:52:19:01:24:d2:1b:4a:1e:9c:1c:36:a3:
         51:5f:35:a3:33:fa:be:a0:87:df:88:7a:b6:22:a7:0f:db:6f:
         a5:c4:5c:d6:62:a1:0b:0e:cc:09:b4:dd:b5:fd:13:72:b2:b3:
         7d:d6:cb:99:50:c9:a8:bc:80:55:4c:28:58:56:7d:15:b7:0a:
         85:2f:e9:3f:b9:54:14:02:17:56:ad:8c:0b:c9:fb:4c:05:c4:
         2e:ff:76:99:c1:cd:e0:cd:16:16:3e:e5:f5:be:2c:65:63:90:
         86:cb:83:60:1c:77:00:41:51:67:e6:bd:2b:20:39:38:3c:e2:
         f7:4d:d4:af:da:7e:a3:ee:e3:20:ce:74:df:40:ec:2a:ed:c8:
         e5:2b:1b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:52:13 2024 by rpki-client on console-ams.rpki-client.org