Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4061c0bd-4ddd-3c7b-b5ef-ac88a0b2a95e.roa
File:                     4061c0bd-4ddd-3c7b-b5ef-ac88a0b2a95e.roa (raw, json)
Hash identifier:          XIalYgpxk5i21tDRIsSNupZDtSBx9HYTFTz1IKbiQcg=
Subject key identifier:   0A:E7:CA:12:CA:CF:2A:33:3E:17:04:46:D0:95:F0:32:5D:4D:3C:22
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553331FC14CC8226CAD96F880
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4061c0bd-4ddd-3c7b-b5ef-ac88a0b2a95e.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        208.83.24.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:1f:c1:4c:c8:22:6c:ad:96:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=0168d869-1f3d-4cab-a3ce-35b2bafff428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:df:5a:d7:59:e0:3c:ab:ce:b6:60:cd:2c:ae:
                    d0:41:48:15:02:d6:e1:2a:4e:49:b4:d7:85:9e:2b:
                    6d:82:21:14:33:51:84:57:2e:8e:c2:12:74:ce:20:
                    ac:56:dd:e9:46:61:77:cc:09:3b:60:88:4e:a2:cd:
                    2d:85:c8:38:cc:c0:9d:f2:11:88:32:f7:e0:e0:7c:
                    e9:a5:13:ec:df:3e:c9:7e:27:da:17:86:6e:d1:0f:
                    3c:1b:b1:a7:b3:32:78:35:85:5d:c2:6a:4a:85:f6:
                    f1:f6:a7:3d:24:5a:bf:84:08:ba:f1:0e:ad:c4:f4:
                    42:16:63:f1:75:10:48:32:78:f7:e4:92:28:0f:8e:
                    dd:44:3b:2a:50:b8:b1:92:e5:fd:e8:e2:73:c8:e5:
                    6b:a2:36:5f:f7:6c:a4:79:7c:5f:8d:64:27:b8:56:
                    2b:47:bb:e2:0a:f9:06:4a:a0:cf:94:5c:5c:27:56:
                    47:91:89:ea:43:d0:8e:58:ca:c6:c2:88:ec:fa:04:
                    24:60:ae:87:7d:75:7d:83:74:59:62:d7:4e:68:9c:
                    1f:85:7a:04:9b:4a:6c:73:6a:e7:42:bc:1b:a2:e1:
                    06:6c:22:5c:b4:a3:9f:98:81:4b:ca:40:91:8c:dc:
                    7b:5c:32:79:8f:24:0c:9c:21:64:ec:ce:fa:a6:41:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:CA:12:CA:CF:2A:33:3E:17:04:46:D0:95:F0:32:5D:4D:3C:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4061c0bd-4ddd-3c7b-b5ef-ac88a0b2a95e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:81:b7:4c:63:c2:18:6a:f2:94:89:36:72:cf:88:20:a8:
         1d:35:c7:64:13:8b:03:41:ad:c0:e0:a2:1e:ab:f8:9b:5c:60:
         a1:c0:11:69:61:21:fb:b6:36:24:45:5e:7f:d6:58:c4:37:e8:
         48:54:12:e3:ab:de:5e:68:60:b4:e7:72:7d:d0:55:69:03:c7:
         40:37:6f:bc:5a:77:98:13:80:dc:3b:f7:e1:75:1e:09:2b:90:
         05:9d:59:62:dd:62:ae:64:8f:bf:10:bf:6c:82:8b:e8:d7:f0:
         96:07:9d:47:32:bf:96:ab:40:1a:d4:b8:b7:4e:1c:5d:93:36:
         43:28:c3:4d:20:30:43:98:a7:9f:d2:5b:46:c1:98:31:59:e3:
         8d:7e:e4:69:f2:cb:d5:65:3b:4c:4f:a2:c0:14:77:2b:7c:22:
         f3:e5:f3:ed:b2:78:6e:84:53:ba:57:33:22:3b:e6:50:fb:7c:
         76:63:4f:bc:2c:19:a6:fb:e1:14:ba:a6:85:6f:3c:1f:91:5e:
         1b:a2:03:39:45:b0:94:09:60:fa:52:af:db:54:bd:fe:64:c3:
         2e:5d:9e:e5:5e:3b:35:1c:d1:97:32:23:3f:c2:b7:17:a7:d1:
         fe:1b:af:e9:f0:f7:2b:ab:f2:fe:ad:fd:b4:66:e7:78:74:b9:
         4d:ea:63:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:30 2024 by rpki-client on console-ams.rpki-client.org