Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/529da82e-c161-3d58-8b17-00711ca7efc6.roa
File:                     529da82e-c161-3d58-8b17-00711ca7efc6.roa (raw, json)
Hash identifier:          FbMtBl5fx/5/pQ1R4zTL/y6oYBiawPQxU33x4KSrUoY=
Subject key identifier:   A7:03:A1:28:C1:0F:D5:DB:0C:83:FD:58:4F:33:6B:C8:28:2F:CB:D2
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332E7C056DA9A3ECAD7D080
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/529da82e-c161-3d58-8b17-00711ca7efc6.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        67.141.104.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:e7:c0:56:da:9a:3e:ca:d7:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=205957e8-721e-410a-9590-72dc50890550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:49:e5:e0:87:69:4d:7d:19:29:58:27:5f:0f:
                    b7:9f:6b:ff:11:67:20:ab:1a:4a:51:cd:49:05:a1:
                    e1:bc:d7:16:57:b1:5f:58:b1:4c:0f:3d:18:68:da:
                    29:a8:22:42:5c:f7:43:84:00:70:7f:0d:37:f8:7c:
                    bd:56:67:5b:8b:dc:4c:60:42:e0:15:cf:9a:36:cb:
                    40:52:b6:80:01:62:d1:dd:75:4d:68:5d:aa:85:3c:
                    b2:0b:45:bb:94:7d:28:92:2d:36:4a:10:30:db:dd:
                    82:34:56:24:f0:13:e9:8a:57:73:3c:6b:de:02:85:
                    1f:10:ac:88:ff:b4:11:1b:6a:e3:33:3b:a0:e0:57:
                    52:de:43:d2:fb:45:f9:c7:dd:81:82:70:d5:67:3a:
                    97:81:30:e0:09:85:5c:e5:d3:b5:b3:0e:1c:85:aa:
                    e2:22:c9:05:d5:d5:37:a9:7b:b1:f5:4d:40:f3:f1:
                    2d:4d:19:85:68:53:30:49:83:90:71:a0:5c:c6:1c:
                    59:b7:73:e2:5e:5b:9b:ab:94:9c:12:89:ce:04:59:
                    e2:43:2b:c4:89:84:a6:2c:a2:de:82:66:34:b0:45:
                    3a:48:04:70:a9:2d:c1:7e:0a:00:77:23:ac:65:01:
                    0e:ce:2b:59:5d:8a:65:d7:3c:4f:ce:1a:a0:0a:c1:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:03:A1:28:C1:0F:D5:DB:0C:83:FD:58:4F:33:6B:C8:28:2F:CB:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/529da82e-c161-3d58-8b17-00711ca7efc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.141.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:2f:5c:3e:cf:9f:9a:2b:37:8e:54:3d:f9:8c:e9:cd:e8:
         d4:22:92:57:85:91:c5:86:d3:e4:5e:aa:b4:bf:66:50:f7:92:
         b7:67:64:96:54:ff:59:e8:ea:97:60:f0:aa:4c:8d:c0:2a:ec:
         53:dc:a0:bd:38:1b:eb:ea:9d:da:bc:e0:47:fd:55:70:d9:a7:
         09:d8:ba:e3:7a:2d:0f:8a:a2:c4:62:c5:ac:fd:03:7c:75:0c:
         ca:8a:3a:49:ea:8f:d0:36:7c:5d:41:1c:7c:f6:69:20:c0:20:
         bf:c9:d3:12:85:9c:bf:89:a7:02:cd:ab:c0:e6:07:e1:b1:7d:
         cc:38:b7:75:02:25:f4:1d:4d:be:04:52:fa:0c:71:03:27:75:
         1f:56:08:a0:44:ad:77:4c:68:0d:d1:d2:f2:14:75:38:24:8a:
         64:ce:63:77:30:e0:78:72:18:97:d6:38:78:5b:39:fe:d0:6a:
         aa:55:9e:07:16:5d:aa:a8:1e:f9:22:9f:f2:75:69:a4:f6:2d:
         d0:69:83:cb:1b:82:d0:7e:49:b3:ae:96:e7:6e:18:71:9a:c2:
         1d:94:ac:73:a4:2a:62:b8:b9:83:e7:62:db:78:c9:6b:df:f3:
         e1:2a:e8:37:22:b9:59:62:b9:4c:40:d6:03:8b:f1:72:bf:2b:
         db:0d:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:54:32 2024 by rpki-client on console-ams.rpki-client.org