Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa
File:                     555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa (raw, json)
Hash identifier:          75B8NKn7cMeowHnEXk/z88DXPiXljzxbBwFdoNQOlIg=
Subject key identifier:   78:A2:C6:4D:E3:60:B7:8C:7C:4F:C2:23:36:CF:A9:44:F0:AC:5C:2A
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847EFEF8826969B9EA0DA27C358
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        71.29.6.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:88:26:96:9b:9e:a0:da:27:c3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=6524bbd2-847a-4a98-97db-80a17083cf3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:3b:94:60:e3:cd:40:cc:1e:c4:1e:21:d8:
                    d4:ca:5b:57:d1:23:b6:3b:c9:df:fc:22:5f:2a:85:
                    0f:91:92:2c:26:14:f1:2c:7a:8d:62:42:57:26:d7:
                    b6:46:9c:f4:92:bb:cd:31:c9:c7:d2:e8:fa:00:20:
                    04:19:2b:c5:34:dc:b3:2e:f0:93:9d:30:4b:d5:90:
                    2c:da:25:2b:35:ae:4e:72:19:67:74:7a:7d:ee:41:
                    96:d6:70:e5:76:2a:c5:3e:58:78:c4:9f:fe:3a:c2:
                    ee:6d:61:95:de:58:b3:b0:4d:f6:cc:49:a9:6e:9c:
                    87:b9:8b:2f:df:57:98:f7:56:05:69:6a:65:1d:f0:
                    c5:ef:6f:d9:cb:8d:12:f9:10:29:75:e9:56:bf:18:
                    c5:67:b3:09:df:21:5d:1a:c2:42:e8:79:4a:f8:dd:
                    e1:7d:ff:e8:bf:64:00:3f:91:35:dd:d8:75:1b:a5:
                    f7:81:5e:a8:04:9b:72:ba:e6:2e:be:0d:31:c0:b4:
                    8b:c2:1d:76:7d:1f:f5:1c:b9:21:a4:1e:02:4a:03:
                    89:2b:38:03:a1:58:81:fc:ca:ac:20:14:22:ff:76:
                    b5:44:ce:ae:cb:c0:3e:9c:16:ee:5e:57:b0:0a:d1:
                    bc:11:04:b4:9d:46:d3:56:68:cc:38:8e:ed:22:aa:
                    b2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:C6:4D:E3:60:B7:8C:7C:4F:C2:23:36:CF:A9:44:F0:AC:5C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/555ff97b-7db5-30cc-8e0c-ea402b779f0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.29.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:a0:e3:f3:dd:a2:84:83:ca:dd:97:66:ea:78:e8:b2:13:
         e0:1e:6f:0b:0f:1c:61:10:03:fa:d9:e6:6d:f6:35:85:ef:15:
         f0:ce:a9:8c:dd:f1:da:8c:6f:5e:53:d6:36:1f:2e:01:cb:6f:
         8b:de:fa:c7:e0:0d:31:c2:b6:59:43:91:31:c6:af:66:bc:f1:
         c1:38:c7:33:fe:3b:36:de:ce:58:4e:4c:b8:f8:3a:89:4e:7b:
         95:a3:42:02:2a:f1:12:bb:f3:37:9d:de:07:f4:f8:e6:45:49:
         34:f4:e3:b3:61:b9:bb:4f:49:81:33:25:cb:6b:fc:97:f8:f0:
         a3:55:10:82:16:ee:d8:c0:1c:65:8e:b2:4e:7c:3b:48:ab:1f:
         48:d3:c9:f6:08:3a:f9:7c:84:87:6e:47:bf:f7:a2:83:72:6e:
         0e:10:a0:8f:07:7f:59:6d:98:79:42:7c:1f:9a:bf:b3:8b:6c:
         de:0a:8a:0a:cb:a2:78:99:2b:dc:ee:da:cd:c1:85:1a:6e:cf:
         d9:78:ba:dd:b8:40:01:a3:4f:e3:1b:81:be:41:48:78:22:f7:
         3a:3e:6c:b0:25:62:ef:cb:1c:87:b2:8b:d0:78:a6:1c:d7:9d:
         db:79:a8:f7:3a:f7:00:a0:ea:ad:49:c3:69:e2:8d:f5:fa:a7:
         47:d5:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:06:02 2024 by rpki-client on console-fra.rpki-client.org