Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa
File:                     a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa (raw, json)
Hash identifier:          be+2nK0SlI8JwIwsyvyzJEtofv8WfqQEH7QUgwX37Ls=
Subject key identifier:   23:B5:7B:A1:D6:E4:5F:08:08:DB:78:D8:BE:85:C1:01:D6:F3:CF:FA
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455332FA26A5BFD6E22FE70E40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        75.90.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:32:fa:26:a5:bf:d6:e2:2f:e7:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=08bd8d92-10c7-4c97-b626-5bbf5cd024eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:33:77:5f:30:bc:d9:db:23:4f:3d:15:3c:8b:
                    5b:c1:06:68:3a:3a:4a:26:5f:91:a3:38:49:f9:48:
                    e4:3b:81:e1:60:e1:77:ed:4d:fc:f7:33:cd:c4:dc:
                    18:f1:6c:88:3d:12:4c:6d:8f:cc:94:ad:f8:e6:52:
                    34:c7:18:0e:90:ff:36:6b:ed:bb:56:23:75:8e:48:
                    36:f9:0a:b1:d7:13:e4:0f:4b:b1:6b:f4:77:00:e7:
                    b4:9e:8b:19:ba:e0:e7:ab:0f:11:78:d3:14:a3:16:
                    0b:69:43:76:7b:69:a7:ff:4d:32:c5:86:c2:95:a4:
                    ea:8b:9e:7b:d1:3e:6a:aa:49:a3:5e:2b:a3:8d:63:
                    1d:91:19:8e:00:eb:27:5a:be:33:18:50:7a:1f:b7:
                    55:3e:c6:8a:dd:bd:0b:15:89:8b:10:f3:85:b3:d5:
                    95:ae:fa:08:3c:f3:a7:7c:71:8f:27:87:6c:93:f3:
                    30:9c:f1:a5:35:91:2b:62:48:c6:0c:42:41:12:1f:
                    28:ef:54:f5:fc:0a:e2:97:3f:6f:1b:39:dc:36:e8:
                    07:c5:3f:8c:c2:82:64:99:ec:6b:47:51:ee:41:e9:
                    81:22:ab:5c:5c:7e:33:ad:92:9b:43:1a:c9:c5:2d:
                    c5:e8:77:04:82:a6:a1:72:12:b2:cd:f5:35:a2:18:
                    8d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B5:7B:A1:D6:E4:5F:08:08:DB:78:D8:BE:85:C1:01:D6:F3:CF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a9bdb0ef-b6ad-3a2e-b5cd-b2dc53cb3c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.90.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:15:78:80:0a:8f:f9:c5:b7:73:af:f2:b6:78:4d:aa:7a:24:
         ab:20:07:fe:b9:a0:bf:1d:74:11:27:7d:9a:38:c4:e3:cd:9c:
         7d:15:6a:a7:b6:ff:b0:38:3b:25:a9:e6:c2:b9:71:ef:ff:f5:
         7c:5f:64:d6:69:d8:76:f3:fe:d5:ef:31:34:c5:86:05:77:f3:
         c4:92:82:77:8b:21:9b:93:a0:af:20:5b:31:28:eb:4d:1c:d2:
         c8:01:9f:0d:ef:d3:f5:8d:26:ce:9b:c1:7f:42:4e:25:13:96:
         fa:1c:2c:92:dc:1e:68:87:96:27:08:f4:b8:69:47:07:52:96:
         9c:e1:e3:fd:3c:2b:3b:0d:e9:ba:5f:12:6f:4c:ed:45:45:29:
         2b:b7:dd:5e:2a:fd:ee:48:41:a8:03:e9:79:0f:9c:d9:96:d7:
         c4:1e:03:3a:81:cb:34:39:22:bc:0a:4d:23:e6:f1:30:48:37:
         b4:d9:be:89:6b:f5:e4:17:67:58:e8:53:e1:d1:ca:c4:39:fd:
         ca:aa:4a:c3:74:5c:41:23:95:9d:d9:fe:38:ee:69:3f:9c:12:
         53:2d:be:5e:2b:a5:8a:06:93:38:1b:92:ea:ed:f7:1c:60:f4:
         1b:67:eb:c9:23:b1:82:7e:b6:62:d3:6c:c1:06:9f:11:c5:5e:
         9c:76:ac:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVTMvompb/W4i/nDkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDMyNTEzMDAzM1oXDTI0MDYyMzEzMDAzM1owLzEtMCsGA1UEAxMk
MDhiZDhkOTItMTBjNy00Yzk3LWI2MjYtNWJiZjVjZDAyNGViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TN3XzC82dsjTz0VPItbwQZoOjpKJl+RozhJ
+UjkO4HhYOF37U389zPNxNwY8WyIPRJMbY/MlK345lI0xxgOkP82a+27ViN1jkg2
+Qqx1xPkD0uxa/R3AOe0nosZuuDnqw8ReNMUoxYLaUN2e2mn/00yxYbClaTqi557
0T5qqkmjXiujjWMdkRmOAOsnWr4zGFB6H7dVPsaK3b0LFYmLEPOFs9WVrvoIPPOn
fHGPJ4dsk/MwnPGlNZErYkjGDEJBEh8o71T1/Arilz9vGzncNugHxT+MwoJkmexr
R1HuQemBIqtcXH4zrZKbQxrJxS3F6HcEgqahchKyzfU1ohiNwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCO1e6HW5F8ICNt42L6FwQHW88/6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTliZGIwZWYtYjZhZC0z
YTJlLWI1Y2QtYjJkYzUzY2IzYzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCS1o0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYVeIAKj/nFt3Ov8rZ4Tap6JKsgB/65oL8ddBEnfZo4xOPNnH0Vaqe2
/7A4OyWp5sK5ce//9XxfZNZp2Hbz/tXvMTTFhgV388SSgneLIZuToK8gWzEo600c
0sgBnw3v0/WNJs6bwX9CTiUTlvocLJLcHmiHlicI9LhpRwdSlpzh4/08KzsN6bpf
Em9M7UVFKSu33V4q/e5IQagD6XkPnNmW18QeAzqByzQ5IrwKTSPm8TBIN7TZvolr
9eQXZ1joU+HRysQ5/cqqSsN0XEEjlZ3Z/jjuaT+cElMtvl4rpYoGkzgbkurt9xxg
9Btn68kjsYJ+tmLTbMEGnxHFXpx2rCY=
-----END CERTIFICATE-----
Generated at Sat May 18 01:40:38 2024 by rpki-client on console-fra.rpki-client.org