Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc9c161-863c-37d1-b046-3caf9242dc82.roa
File:                     2fc9c161-863c-37d1-b046-3caf9242dc82.roa (raw, json)
Hash identifier:          zzIIqvoX0ghVXAmwBAHbujA3zJofKw0NgtPySisYUoc=
Subject key identifier:   73:FC:26:96:B2:D5:AA:C1:03:7A:E0:D9:6A:58:EA:77:44:8D:EC:A7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553330BBF82621D1E9A8B0EC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc9c161-863c-37d1-b046-3caf9242dc82.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        169.130.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:0b:bf:82:62:1d:1e:9a:8b:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=c76d75f3-9a7f-4934-8e67-effb318bff7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:d6:4b:04:3b:14:f6:fe:03:09:41:9d:78:
                    42:a8:d5:42:0c:68:20:f9:3f:03:82:02:44:86:12:
                    3f:43:9b:9e:8c:5d:5d:89:e2:9b:d3:00:d5:3d:61:
                    a2:7e:99:39:25:6a:2c:81:b7:37:99:09:a5:54:53:
                    43:18:06:09:1b:9e:f1:2a:3a:37:7f:d5:82:41:6c:
                    61:21:28:09:6e:fa:dc:4a:43:2b:a9:f3:db:95:d9:
                    a2:c7:49:13:26:8c:c8:82:26:74:70:25:7c:cd:05:
                    12:e3:ac:76:35:1a:2e:0d:ed:85:c0:38:96:40:c9:
                    3c:a6:fd:66:1d:42:c7:22:d0:9f:63:27:b9:32:c9:
                    84:9b:b2:15:da:94:24:1d:70:a5:ed:54:fb:a1:29:
                    4f:0b:12:94:ed:e3:5f:2b:c7:09:17:01:21:9c:9e:
                    0a:1c:0b:3f:a9:ef:4c:34:96:db:f6:3b:88:5a:6a:
                    2d:30:e8:55:01:b8:1c:bd:97:c0:d7:4b:44:57:f5:
                    17:df:2b:51:4d:04:fe:0e:34:60:3e:b3:1f:c7:a4:
                    38:ac:53:7c:3c:47:3c:11:94:91:d5:77:48:b1:98:
                    31:b9:d5:89:66:c1:62:bf:43:63:2a:06:be:59:2b:
                    07:6c:71:3e:02:71:20:18:78:59:e2:29:06:14:83:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FC:26:96:B2:D5:AA:C1:03:7A:E0:D9:6A:58:EA:77:44:8D:EC:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2fc9c161-863c-37d1-b046-3caf9242dc82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:37:15:79:c5:c9:83:c4:3e:8d:39:b2:52:b6:45:09:8b:17:
         c7:ca:91:d5:8d:4d:30:d4:38:dc:19:ac:a8:f6:9b:de:7e:99:
         7a:17:b4:f1:e1:ea:cb:32:bd:d6:09:fb:53:d5:1f:06:55:1d:
         59:d0:c6:8e:06:b3:53:a4:6d:b4:22:cd:35:23:44:f1:00:10:
         d5:e3:b0:0b:eb:ff:01:cc:86:1e:38:31:4e:7b:95:35:4b:ae:
         44:99:8c:74:90:30:84:62:e4:e3:d9:20:0a:a8:37:c1:93:b1:
         33:f9:d0:1c:dc:31:9f:28:3e:d5:25:ff:bc:3f:2c:82:54:86:
         70:7e:10:a7:ca:4d:46:01:83:d4:fd:78:68:be:48:10:5b:e0:
         f0:02:7c:04:9e:85:b0:28:b1:b2:b8:48:51:f4:3a:e0:f1:60:
         bb:17:b3:5f:d2:1f:95:8d:71:cf:d9:fc:76:3e:ae:a1:0a:65:
         2f:ea:1b:47:76:ab:f5:b8:bb:37:d9:c6:0d:2b:0e:fb:88:d5:
         b5:f1:c3:1d:68:97:87:f0:02:16:a8:56:56:c2:da:fe:77:73:
         25:4f:5a:5c:3c:5d:a9:23:db:46:2f:59:d3:e3:71:9a:ff:68:
         fe:6a:5a:e1:96:4e:ab:88:31:03:8a:4d:4d:19:e5:bf:61:e1:
         09:a1:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:33:32 2024 by rpki-client on console-ams.rpki-client.org