Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d329a312-4445-3625-871b-9bf9e11f564f.roa
File:                     d329a312-4445-3625-871b-9bf9e11f564f.roa (raw, json)
Hash identifier:          c+7FYJXX45EeL56o+iLY2OwKhKcz7jAElzYg9q0Ijis=
Subject key identifier:   DF:D1:60:AC:C6:63:BE:23:C2:9A:DB:B8:5B:36:9C:11:44:05:5B:30
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845C8965047446ED06078E6FD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d329a312-4445-3625-871b-9bf9e11f564f.roa
Signing time:             Mon 06 May 2024 14:10:36 +0000
ROA not before:           Mon 06 May 2024 14:10:36 +0000
ROA not after:            Sun 04 Aug 2024 14:10:36 +0000
asID:                     7029
IP address blocks:        209.83.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c8:96:50:47:44:6e:d0:60:78:e6:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: May  6 14:10:36 2024 GMT
            Not After : Aug  4 14:10:36 2024 GMT
        Subject: CN=f9df7301-1a5a-4018-8b4b-654c0a9e9de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:20:77:c4:84:5b:77:99:ba:2a:bb:09:a7:
                    03:00:3f:4f:7c:e9:cd:8e:5c:29:ae:46:6d:45:f4:
                    bb:98:3c:d3:81:2d:7c:d8:32:22:ac:7c:6f:69:97:
                    ad:aa:15:c2:6b:56:21:28:f9:cb:dd:e9:e8:a3:b8:
                    5b:75:43:35:cb:9c:68:ca:d6:14:92:af:d2:35:53:
                    b2:5b:d2:34:2c:de:94:e4:75:1d:2e:37:94:5d:bd:
                    25:18:c1:91:3f:0d:d6:6b:3b:5c:fe:b0:76:ac:a2:
                    69:e1:e9:6a:9f:6e:e4:90:90:57:c2:6d:61:72:30:
                    50:00:d3:70:6b:66:ab:ea:17:65:c7:0e:46:fd:c2:
                    10:00:4e:b8:48:3f:b7:72:24:b6:09:34:bc:1d:ee:
                    a8:78:19:57:a3:c8:11:f3:0c:c2:80:23:f2:1e:03:
                    20:95:1e:76:ea:a0:e1:f6:07:85:06:fc:c7:38:1f:
                    2b:6b:bb:32:6f:45:48:0f:91:be:77:56:37:8a:50:
                    5b:02:38:d6:59:bb:4d:ba:fc:ba:fa:3f:ef:36:dd:
                    7a:4e:2b:a6:97:51:0c:e8:8d:0d:1e:7e:14:3d:55:
                    25:57:ad:22:d7:d5:47:a8:a1:89:28:b9:3d:ea:d3:
                    56:30:27:b9:c6:42:54:ac:6c:c4:5f:ee:39:f5:52:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:60:AC:C6:63:BE:23:C2:9A:DB:B8:5B:36:9C:11:44:05:5B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d329a312-4445-3625-871b-9bf9e11f564f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.83.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:84:0c:24:44:c5:f1:9a:f6:38:06:93:0f:49:e0:62:5c:
         84:b9:bc:b1:d7:21:d6:b4:1d:b7:3c:b9:7a:fc:c3:06:f6:fa:
         d1:b7:ce:89:33:ce:af:81:94:55:22:4d:fd:49:da:58:a2:55:
         0f:01:4c:18:10:5d:16:35:4f:7f:b3:ce:00:7f:4c:56:73:15:
         62:42:80:c0:3d:38:d4:cf:de:3a:f8:d6:00:f9:47:3b:f2:06:
         0d:89:bb:68:92:2b:c0:13:a4:07:1e:66:3f:4a:98:d1:af:37:
         eb:05:d5:d2:50:7b:dd:7c:63:7f:7c:92:e2:de:44:84:5b:aa:
         f6:ed:31:3f:ad:97:9a:80:76:8d:c8:1e:f4:f8:62:76:f1:df:
         fb:fd:99:6f:cb:c9:27:09:6d:86:9f:22:7d:61:62:62:f4:8b:
         87:5f:b8:f3:f8:0b:c9:d7:87:9c:1b:a0:3c:be:6e:69:ff:a9:
         e6:40:18:16:a7:e2:2f:e8:44:c0:0b:4e:66:18:ba:bb:af:5b:
         af:f2:ca:65:31:56:0a:80:33:a1:fe:e7:9a:5b:09:e7:3d:45:
         03:21:79:25:40:f9:eb:42:b7:ae:c9:83:25:d8:1a:0b:7f:35:
         f9:80:26:e7:46:a8:0e:e4:71:da:33:b9:fc:6b:0b:d1:5a:15:
         dc:20:c6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:56:58 2024 by rpki-client on console-ams.rpki-client.org