Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41ef5bfc-191f-306f-9f7a-4d6cfbeeab6b.roa
File:                     41ef5bfc-191f-306f-9f7a-4d6cfbeeab6b.roa (raw, json)
Hash identifier:          oBCqBGUGVTTGp93yDL0ni0RDrxydlk2NAwFjOEvXgH4=
Subject key identifier:   24:55:B0:08:3D:83:8D:BB:00:F1:5F:D1:F0:2B:FD:9B:66:6F:DA:54
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332F35CB32229041DCDC500
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41ef5bfc-191f-306f-9f7a-4d6cfbeeab6b.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        71.31.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:f3:5c:b3:22:29:04:1d:cd:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=adbc78b5-7f9f-424a-acb9-812bc9c59dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6f:a3:e8:fd:a2:3a:f8:2f:a8:3c:30:d4:77:
                    ae:2c:84:5d:fa:fd:a8:69:b6:aa:33:70:bc:62:66:
                    f5:48:9c:d2:3a:bd:8b:2f:e8:a1:10:06:5c:6c:99:
                    9e:b9:ea:f4:9e:24:17:0a:ae:1c:9c:5a:a8:c7:67:
                    43:b8:aa:1e:c4:da:01:a3:a4:d9:14:95:ff:39:76:
                    27:84:c7:f8:47:a7:0f:bb:e1:2f:50:9c:6d:84:35:
                    bf:59:fc:48:55:8c:8b:80:e9:1d:78:9b:81:fd:6e:
                    86:dd:f5:82:71:64:6d:81:8f:da:42:14:24:3f:17:
                    19:3f:0b:2a:4a:68:bd:bf:b1:10:93:7e:c9:8e:e9:
                    67:4b:a3:f7:79:cc:9a:53:37:c9:d7:c9:b3:b1:27:
                    a2:23:c2:41:2c:ef:52:6c:bb:07:24:f7:a3:e9:89:
                    bc:01:de:61:9f:81:d6:8c:2e:d2:fd:a5:24:06:16:
                    13:af:b7:63:ec:9c:59:16:af:8b:2f:ef:e9:18:e6:
                    80:92:6d:33:0b:c9:fa:55:d5:c6:dd:7a:53:37:ed:
                    f5:3d:8f:36:f9:90:95:6e:67:fa:4d:cb:40:76:63:
                    97:d3:fc:69:b1:72:22:18:14:4c:1a:92:21:15:14:
                    c2:0f:47:5e:46:bb:80:85:64:ef:0d:92:47:bf:8a:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:B0:08:3D:83:8D:BB:00:F1:5F:D1:F0:2B:FD:9B:66:6F:DA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41ef5bfc-191f-306f-9f7a-4d6cfbeeab6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:2b:5e:96:11:86:c6:c6:c8:9d:1d:6f:eb:6f:19:cd:f3:
         02:af:55:c0:f4:60:c6:67:a9:c6:0e:5a:d5:4a:69:d5:6e:8a:
         9f:48:9e:e4:b5:ea:74:94:93:ed:ce:ff:20:25:4b:d9:ea:10:
         87:0a:7d:90:a6:17:e5:30:57:e8:ce:b8:01:83:94:95:b9:25:
         b8:fe:f9:d8:e9:44:79:7b:46:d5:53:8d:0f:fa:6c:ef:35:b1:
         fb:07:cb:b9:b0:6b:96:96:11:18:02:a7:55:28:fa:df:9f:4d:
         c9:7f:9b:9a:32:9e:3d:76:89:b3:d7:80:82:1a:95:a5:47:00:
         ba:a4:0b:ce:ac:fe:01:38:af:31:fc:a5:85:f9:1e:0d:86:14:
         de:32:a6:c2:c2:7a:02:6f:04:c6:82:16:99:9e:66:7f:48:20:
         db:64:b4:bc:40:8b:90:ed:00:5c:d4:5e:ef:25:75:9b:78:7c:
         72:d1:09:f9:68:db:bd:73:09:50:9e:2c:a4:54:a0:a2:3a:08:
         83:0b:99:2d:d1:06:b0:d2:68:cd:7a:98:be:db:fd:f1:7c:cb:
         d6:d6:a6:d1:dc:02:51:83:c9:ec:c1:ad:ca:17:05:a4:b6:e9:
         9b:39:65:a1:83:99:e6:0d:a8:54:85:a1:47:8c:9e:ac:05:b8:
         03:03:f8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:53:59 2024 by rpki-client on console-ams.rpki-client.org