Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/875c47cb-7732-3531-86aa-c970abb4a594.roa
File:                     875c47cb-7732-3531-86aa-c970abb4a594.roa (raw, json)
Hash identifier:          WARPwHH3qtph+fXXZucIZDgE824htCvMhJ2Ygyi3V6M=
Subject key identifier:   BB:2D:58:19:14:A4:3E:59:DA:61:ED:AE:E7:01:9E:82:64:6A:E8:07
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332F2C08F82623E8BBAA000
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/875c47cb-7732-3531-86aa-c970abb4a594.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        71.31.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:f2:c0:8f:82:62:3e:8b:ba:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=5ead96d6-66c5-4622-a1fb-a4b8a742b5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:22:69:27:a9:93:17:40:05:72:80:12:02:ef:
                    ef:68:d4:aa:d7:10:2b:2f:6c:0f:d3:27:7f:fa:68:
                    8d:3b:1d:66:82:7b:83:79:16:f5:10:a1:a7:3f:4a:
                    16:93:6c:7d:73:c1:07:63:56:77:9c:91:5a:f9:5e:
                    41:10:ef:97:df:0f:4a:98:b2:46:58:d2:33:2e:d9:
                    f2:da:33:fb:9a:6f:e7:ab:d8:4f:a6:0c:30:49:1c:
                    94:1c:c4:18:b4:c6:81:9a:6c:32:7a:c1:a5:b8:49:
                    70:73:45:e3:a7:84:af:d4:e1:d2:fe:39:9d:8b:50:
                    cb:df:ab:1c:a2:b1:78:7d:d3:79:70:0c:a5:7a:a7:
                    ff:d1:49:9c:19:d3:b3:7d:b3:2c:98:f7:1b:9f:dd:
                    e9:e0:5e:a8:c4:c0:1b:38:36:c1:87:7b:97:16:8e:
                    1b:7b:d2:c4:d0:f2:e9:04:8c:bc:1d:7e:ff:b9:bf:
                    48:b9:3b:94:73:41:c4:07:99:1f:b5:dd:1c:db:58:
                    11:e1:65:94:7d:af:a6:19:92:4d:b3:e6:75:56:51:
                    5e:92:ba:e8:ad:19:82:72:6a:ab:7c:8c:43:9a:12:
                    c1:6d:20:ae:2f:4e:92:28:10:34:b8:af:e1:16:18:
                    14:76:85:74:89:cc:8a:e8:36:21:71:cf:39:73:5f:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2D:58:19:14:A4:3E:59:DA:61:ED:AE:E7:01:9E:82:64:6A:E8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/875c47cb-7732-3531-86aa-c970abb4a594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.31.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:d3:1e:3e:bf:95:4e:b5:ea:b4:4e:06:eb:0e:16:87:92:
         63:ba:8b:51:3f:eb:25:f9:31:b2:54:a2:86:73:e1:e9:6d:8e:
         0e:36:52:3c:ae:25:e9:6a:39:2d:d6:56:39:3b:b2:ff:3a:1e:
         8e:06:f6:5a:fc:c0:09:f4:38:d9:2c:04:84:5a:bb:60:1b:37:
         1d:cc:ad:16:7b:e0:b8:53:96:44:75:c0:50:34:76:df:91:90:
         5e:30:99:c8:c9:2a:5d:30:6f:59:13:e1:bd:bd:c8:1b:10:8e:
         82:77:85:4d:2c:94:c0:93:f3:6b:01:4f:7d:14:1d:9a:63:e5:
         ef:88:4e:d2:d2:86:e3:71:8c:5d:51:14:5e:94:fd:96:4a:aa:
         de:10:62:97:08:d6:15:12:2f:2f:7b:46:98:d6:8e:cf:05:cb:
         14:b3:7d:6d:9a:54:97:b7:eb:b9:d2:e5:7a:44:16:44:47:06:
         1e:a2:1e:9a:0c:4a:43:97:f8:e5:ae:46:a3:40:17:0f:7f:a7:
         b7:c5:93:74:5b:f5:a9:f6:29:cc:3a:4a:ea:21:65:19:fe:0f:
         87:bd:d9:36:03:01:66:a0:3b:d0:62:ef:10:70:8e:f9:85:e5:
         b2:ec:c7:66:b8:6b:08:e0:4b:81:fe:e5:b5:a6:62:d1:22:56:
         72:61:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 15:53:50 2024 by rpki-client on console-fra.rpki-client.org