Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7581368b-d986-32d2-ade9-1f03bfeecda1.roa
File:                     7581368b-d986-32d2-ade9-1f03bfeecda1.roa (raw, json)
Hash identifier:          KVE6Drj1EZALyRSqiVlxwuYL6Bm/NzqfnkeBICk3A4E=
Subject key identifier:   29:7C:2C:40:15:EF:07:C2:0A:12:94:A3:16:31:B1:82:5C:7F:6F:68
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F15502D81AE380D4672FBD80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7581368b-d986-32d2-ade9-1f03bfeecda1.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        162.39.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:02:d8:1a:e3:80:d4:67:2f:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=92dafd40-f218-4151-a53e-fdb4afce2307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:90:d2:0f:39:91:54:f1:9e:db:72:13:88:
                    f6:ef:73:2e:1e:76:ef:49:be:d9:dd:a2:fe:89:69:
                    9e:08:ff:94:ce:a9:94:c7:2c:ff:bd:48:c3:bc:94:
                    a1:55:d6:48:47:09:68:f7:48:3c:2c:d9:62:52:83:
                    ad:48:43:fc:9a:10:89:29:ac:0c:78:fc:b4:3c:77:
                    61:4c:17:b8:4d:ba:c3:4a:b9:4a:49:eb:71:da:b4:
                    e1:89:61:d8:24:4e:4e:68:cc:07:ea:a7:d8:91:98:
                    64:d7:69:7f:8e:66:96:94:1b:ae:f3:53:9c:7c:8c:
                    54:09:01:f9:b1:cf:76:28:5a:9d:8c:a5:3c:75:04:
                    76:c0:6b:f2:15:1c:63:92:1f:76:f1:ea:77:b9:6d:
                    33:0c:11:32:e9:b8:4e:98:7e:0c:e2:69:78:1d:2e:
                    cc:38:11:d2:3a:1a:c7:d2:d4:5f:8b:48:0d:68:2e:
                    cd:0c:98:b4:5b:b8:62:40:47:47:04:50:cd:57:55:
                    1d:47:bc:ed:d4:06:f8:18:6c:6d:cd:6f:3f:c1:9e:
                    af:26:39:18:1c:7d:1d:d9:c9:3d:82:49:eb:71:30:
                    51:c8:55:4d:e6:91:f3:07:0f:5f:e0:d6:3f:fc:3f:
                    a7:e3:b2:75:07:42:47:b8:d2:27:95:5c:f6:c8:e7:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:2C:40:15:EF:07:C2:0A:12:94:A3:16:31:B1:82:5C:7F:6F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7581368b-d986-32d2-ade9-1f03bfeecda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.39.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:e6:0d:0f:6a:76:eb:be:e5:b0:72:ac:6a:6b:a0:1c:a8:
         54:2d:5c:51:8b:03:d1:b8:8b:dd:9c:4c:6c:7b:04:28:fa:a3:
         8c:7e:a3:51:23:a4:da:96:ef:1a:2d:32:a1:6f:26:e1:a2:01:
         fe:db:ce:e3:93:ba:d9:3c:12:74:57:c5:a5:46:02:41:fc:20:
         87:b9:78:94:ca:9c:9c:03:50:6b:e5:aa:1e:e7:04:d7:cb:a3:
         48:6e:c1:72:68:b8:1f:52:52:48:3c:a2:c8:98:73:0c:68:5f:
         39:ab:38:4a:6e:cd:ba:9a:87:2c:eb:f5:c9:b8:54:b3:ad:c8:
         5e:b6:d0:30:77:02:0f:b6:fb:05:6c:f2:e3:ef:0b:33:9c:c0:
         5f:fb:84:ae:9a:b6:77:8d:a5:cb:2f:41:84:84:07:9c:04:c3:
         4a:44:f2:4f:9b:1d:7a:e8:33:f8:14:53:25:e0:a0:af:86:74:
         f5:2c:1c:7e:4a:18:81:2a:be:fc:b1:02:5a:99:2f:13:05:34:
         32:79:f3:c5:a6:3f:62:e1:63:ee:45:ae:29:58:d6:d6:65:28:
         a3:a9:ea:0c:27:16:19:8a:0c:4b:ba:c0:86:6e:9e:4c:0a:2e:
         5f:22:65:99:0c:46:38:34:d0:8e:d7:b5:60:74:e7:cf:23:87:
         89:be:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:46:42 2024 by rpki-client on console-ams.rpki-client.org