Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c0cfdd5-9a5c-33fc-896c-af8835926976.roa
File:                     8c0cfdd5-9a5c-33fc-896c-af8835926976.roa (raw, json)
Hash identifier:          T95eq+NgTANsRgqtUU3mEvsmZ1S3GUCf24P0L5dHlTs=
Subject key identifier:   6F:F5:63:36:01:03:AB:89:6A:BA:F1:4C:AE:6D:DA:9B:5C:B8:2D:37
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333451BEF1441BFB7AC8B80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c0cfdd5-9a5c-33fc-896c-af8835926976.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     64200
IP address blocks:        216.41.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:45:1b:ef:14:41:bf:b7:ac:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=d6af5bc3-8ae8-47c5-b69b-0841fe2c7aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:66:2e:08:22:84:15:94:0b:9d:3a:4c:da:3a:
                    4f:f9:a9:a1:b7:dc:d7:54:8c:a1:6c:8b:dd:98:e6:
                    b7:31:a7:22:57:9e:6a:b2:49:6e:ac:04:c6:bc:2d:
                    7d:c8:85:98:86:f7:04:ad:34:2d:77:e1:78:25:fe:
                    5b:07:0f:7a:2e:d1:57:2a:90:02:ef:c5:66:77:c8:
                    f4:00:20:ec:85:d2:2d:5b:9b:a2:30:91:51:a2:5d:
                    79:f2:e0:51:0d:b5:1f:7a:2c:5d:d1:1c:36:dc:68:
                    ee:78:ac:4a:8f:0e:53:75:1e:46:64:dc:c0:03:c8:
                    99:44:7b:38:14:45:a5:30:70:a5:ef:01:ae:f8:11:
                    7b:17:d3:cb:76:a0:2d:2c:74:0f:c7:6f:f4:25:c1:
                    3f:75:ae:3e:31:d3:83:be:d1:c5:42:1e:26:ed:85:
                    59:0e:71:6f:19:c7:5a:03:81:f3:13:f9:b6:a1:fd:
                    3c:c9:93:39:87:ab:86:ef:56:fc:32:de:77:80:60:
                    4b:11:49:6f:0f:30:3f:c1:69:0d:4c:9d:10:c0:b7:
                    b4:1f:c1:0c:6d:92:c4:d7:ac:00:11:22:78:93:0a:
                    96:34:d8:c3:64:c4:97:14:29:09:36:1f:a3:fe:2b:
                    20:09:43:e5:29:6c:a4:58:1b:f0:a6:e5:7b:77:07:
                    da:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F5:63:36:01:03:AB:89:6A:BA:F1:4C:AE:6D:DA:9B:5C:B8:2D:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c0cfdd5-9a5c-33fc-896c-af8835926976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.41.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d0:fc:eb:d4:9d:81:84:92:a7:15:be:82:df:9b:80:f1:72:
         7c:c8:40:f6:80:a1:26:54:0e:2f:0a:af:78:f3:ac:4b:f0:bf:
         d9:a4:1f:b2:a3:40:09:1a:b3:12:73:f2:5f:b1:c1:2e:fe:3f:
         6e:3f:f6:58:a9:e4:1a:3c:78:ba:5d:d4:0f:f7:ab:d3:ca:25:
         d7:3e:95:ae:5f:4c:24:26:5b:b4:a0:b7:c1:09:cb:70:79:1e:
         82:2b:df:b7:76:07:ac:94:95:54:82:81:3f:67:a0:4c:f8:6c:
         51:6e:bd:c8:61:2a:68:dd:63:9e:ec:5f:67:41:7d:90:e7:17:
         e2:2b:ce:2a:e9:a2:0d:25:5d:ab:84:01:32:11:eb:95:95:bb:
         e4:7c:1e:80:e4:cf:1f:13:9a:74:9e:a8:0e:5f:16:0d:57:8d:
         57:d5:60:7d:4f:2a:a1:89:01:36:bc:20:f4:6b:7b:4e:0d:eb:
         2a:cb:9e:52:6e:b4:3b:4f:03:b6:79:0c:a7:c8:37:e5:17:ae:
         dc:1c:44:cc:8f:14:b2:85:a0:73:b1:0c:50:e9:c2:02:67:ef:
         a6:06:b4:3a:75:c5:fb:2d:01:39:ee:4b:88:98:ee:f7:0a:60:
         41:0d:9c:0b:0d:b3:6c:8a:73:ac:2a:e8:d2:db:08:3b:8c:ed:
         aa:5f:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:23:55 2024 by rpki-client on console-ams.rpki-client.org