Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa
File:                     ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa (raw, json)
Hash identifier:          CaVRYpEQrpwWl09KO5vkQENl5yC4pJ/BDhRBwAVvKBc=
Subject key identifier:   0F:98:23:76:CA:A1:DA:16:C7:6E:12:C9:86:DD:6A:DE:00:CB:B8:F0
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553331B88548EF4AEB5331940
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        207.7.74.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:1b:88:54:8e:f4:ae:b5:33:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=de97b732-2951-4017-8f49-b4e7cf591027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c6:57:53:85:f1:fc:53:1c:c2:11:5e:df:f1:
                    0f:73:8d:e7:80:2e:fe:6d:4a:7f:0e:26:73:04:fe:
                    01:c8:22:20:73:c3:e3:ca:07:26:64:91:1c:07:12:
                    fa:b4:69:a2:43:aa:07:84:91:5f:06:b8:54:73:2d:
                    02:5d:57:43:13:b3:da:7d:3a:79:3e:94:8b:7b:ca:
                    ba:2b:3d:df:05:25:df:94:26:68:64:24:0c:c6:c2:
                    8d:31:ce:77:fc:94:fa:17:ab:77:9a:da:92:b3:6e:
                    55:7a:30:0e:88:59:dc:6f:aa:9f:e9:48:d9:0e:1f:
                    fa:83:ba:53:f3:1b:48:43:66:fa:1f:a3:68:25:ac:
                    74:ce:10:62:a0:b0:50:32:56:45:86:a4:ac:15:f5:
                    fc:b7:3d:0c:fe:95:4f:25:be:97:38:21:b0:36:19:
                    62:34:1b:39:0d:25:ce:e7:0f:15:0c:cf:b9:44:28:
                    62:b9:df:99:4d:59:ad:ce:de:79:6d:94:64:15:2d:
                    eb:88:cd:fe:a2:85:d6:a5:62:b1:77:a6:13:25:ce:
                    85:07:07:e1:e2:13:02:c1:9c:45:26:24:4a:4f:80:
                    fc:cc:a3:f0:75:cd:e1:da:04:20:9c:b2:62:f7:65:
                    6f:5e:1f:bb:4b:7f:cc:fa:12:53:25:82:7b:cd:38:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:98:23:76:CA:A1:DA:16:C7:6E:12:C9:86:DD:6A:DE:00:CB:B8:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca87d08f-0a5e-32e2-b1b7-af1fd6946fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.7.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:de:c2:96:77:94:a1:9a:73:0e:ea:e8:50:b0:7f:51:8d:ba:
         df:29:56:5a:77:36:11:1e:04:49:b0:6c:ca:6e:32:29:e9:35:
         c2:6f:d2:4e:26:22:98:f3:d9:ed:77:13:c4:19:85:10:e1:0a:
         bc:f0:84:da:30:25:58:8e:30:2e:ba:17:de:8a:44:f9:a7:c6:
         6d:81:77:a6:fe:60:d6:00:44:b4:bc:85:59:7f:39:38:b2:7c:
         77:09:99:23:73:2b:ab:6e:a4:93:78:4d:48:e6:4e:23:07:48:
         15:6c:61:89:22:2a:45:93:50:20:74:bd:8c:37:63:6f:2f:6c:
         fb:88:4a:99:70:15:5e:d2:24:c8:57:72:db:8b:20:1a:d7:c5:
         f2:c5:55:00:5b:09:63:21:de:6d:53:4c:7b:8a:ef:b2:2d:da:
         46:7c:eb:7d:1c:45:91:81:51:09:76:9d:dc:e4:fa:14:bb:99:
         f7:a7:f1:cc:a7:8a:90:95:7e:95:ae:c9:9c:11:2d:fe:a4:fc:
         70:7b:44:87:c8:7c:0f:bd:f2:7b:1c:67:dc:cb:4b:a0:25:2c:
         0e:3f:ad:c2:ab:0a:5d:21:81:c9:af:9f:e5:00:35:0a:1a:7c:
         52:3d:f1:0f:e5:3a:e6:68:48:aa:fe:c4:ac:87:89:50:d9:d7:
         29:6f:d0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 01:53:58 2024 by rpki-client on console-fra.rpki-client.org