Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa
File:                     814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json)
Hash identifier:          1fFMf3seOVcY9hNE7+9+fdCO9ROWyrb+CkmAL7yWpEo=
Subject key identifier:   09:6D:34:A0:44:1A:E7:2A:DC:62:4A:7F:71:46:EE:CE:48:FB:B5:A5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F1553A82D296738EC85E6B00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     7029
IP address blocks:        208.101.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:3a:82:d2:96:73:8e:c8:5e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=bc30ab67-8ced-4b6e-b186-0186f6de7801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:50:ac:42:e2:30:ce:e5:b5:01:57:63:ed:
                    f7:cc:0f:1c:c8:90:57:eb:3d:b4:8e:e1:7f:35:12:
                    a0:88:34:36:59:3d:dd:4a:6c:14:ad:a0:ff:e6:53:
                    d6:34:3f:8a:dd:9d:82:7f:d8:c9:34:8f:c3:1f:f7:
                    17:5b:29:28:31:ee:04:74:1e:a2:dc:89:6b:f6:c7:
                    de:e8:cf:f9:23:3d:f2:51:82:d0:db:af:1a:e2:b4:
                    8b:cf:34:3b:95:15:df:7e:51:cb:c9:61:3c:ad:b5:
                    fe:59:72:bf:36:e1:e2:b2:6d:72:8b:58:13:4a:24:
                    05:ef:56:7c:db:18:c4:52:7a:18:f5:54:40:be:20:
                    9f:c6:0e:5a:03:a9:7e:01:29:ba:0a:3b:fb:e0:ac:
                    0f:0f:dc:82:26:87:6f:9a:ca:9b:01:cf:08:ba:6a:
                    e6:9f:3c:82:36:4d:a2:47:44:cd:9c:16:80:36:c0:
                    74:15:05:ab:f3:57:43:e0:4a:68:3e:45:54:7a:6e:
                    43:01:05:18:29:95:9a:3a:33:7d:fe:7b:d0:75:e9:
                    0f:92:45:86:49:77:52:e9:a1:3e:24:77:5b:b7:90:
                    e3:e3:16:12:cd:b1:97:c7:36:cc:d6:af:1a:10:43:
                    17:4d:60:b2:c1:48:62:e3:ba:8b:37:1c:2c:e4:2b:
                    1b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6D:34:A0:44:1A:E7:2A:DC:62:4A:7F:71:46:EE:CE:48:FB:B5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:42:26:54:09:4d:b6:68:d3:8a:bf:08:6a:9d:85:55:8e:
         0d:9d:17:ff:64:92:21:9f:de:d0:94:c7:84:3f:3d:ff:4f:5f:
         00:b8:a1:e0:07:08:e8:17:e1:eb:07:83:65:7b:a5:8b:c2:d9:
         4a:83:ad:a0:85:eb:b3:bb:5f:8b:61:e2:59:b6:71:80:5d:3b:
         b8:95:8f:34:67:c8:13:c5:9d:07:ba:c4:b5:19:4c:84:4e:6f:
         fe:bf:82:e6:2a:33:4c:a1:9d:fe:e8:5f:c7:a1:bc:c5:45:d1:
         06:02:72:cf:42:aa:2c:69:14:62:c2:bc:cb:d0:4e:ad:9a:e4:
         0d:06:c4:d0:c7:4d:3f:7f:d3:fb:c0:ed:52:65:ee:ed:c7:8b:
         d1:e7:01:82:67:45:73:ee:06:5b:12:5e:03:7f:27:82:5b:bf:
         e1:93:c5:3b:4d:9b:67:f1:bf:22:9b:23:75:c0:b9:9d:95:10:
         0d:63:18:9c:a2:71:c0:2e:82:27:3a:21:78:0c:14:3c:75:eb:
         65:1f:be:1b:68:be:1a:5f:5f:ff:f0:ea:bc:a2:4a:b8:25:8c:
         42:13:60:93:f9:bf:3a:7b:93:4e:8a:43:da:3b:d1:32:a7:7f:
         7d:2c:d2:26:00:50:c2:0a:ea:ea:e6:fa:59:a7:1c:3a:2a:c9:
         b5:e0:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:53 2024 by rpki-client on console-ams.rpki-client.org