Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8405b5e-8853-3e55-87eb-e9a467304dc4.roa
File:                     d8405b5e-8853-3e55-87eb-e9a467304dc4.roa (raw, json)
Hash identifier:          8VpfgOQckYO5QsE4PCMYVKedEmUJVchJknoRH87UcX8=
Subject key identifier:   97:8D:CA:57:DE:AD:98:C9:38:28:03:3D:47:1D:5B:76:5D:84:28:36
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584553330112C3B1F526C914C6B0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8405b5e-8853-3e55-87eb-e9a467304dc4.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        98.18.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:01:12:c3:b1:f5:26:c9:14:c6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=6696fda2-4c7a-4073-8523-7a51b61f841d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:28:c5:c8:d2:cf:0e:7d:2f:75:80:29:89:
                    2c:bf:46:41:dd:60:43:03:4c:87:f4:ac:bc:29:0b:
                    e0:f0:f3:25:04:0a:be:6c:b9:4f:61:41:c1:5f:c4:
                    40:e0:0f:f9:fd:47:86:b9:4a:ec:db:8f:9a:7f:84:
                    1a:78:79:48:65:df:cc:53:8f:24:9b:85:c4:c5:bd:
                    70:bf:1f:fe:4f:1d:52:e3:58:b6:89:37:72:84:ce:
                    01:26:02:67:3a:8d:87:51:51:19:45:f8:bb:b2:b1:
                    e6:fa:57:c7:48:5b:c8:8c:2a:f7:af:fd:fb:87:df:
                    c7:86:b8:f9:d1:49:89:f7:94:6a:b9:f8:2e:67:04:
                    f9:32:65:57:02:f1:63:3d:a0:3a:3f:79:3e:6d:d4:
                    1f:05:24:d0:f3:8a:51:4c:7f:e6:98:1d:25:ee:3e:
                    72:ef:fa:a8:a3:a8:97:3d:d7:56:e7:6a:79:1b:45:
                    45:05:20:6f:d7:6f:74:4a:32:fe:b9:c7:1f:d9:db:
                    b4:0c:61:38:67:2f:cf:3a:f5:13:c3:24:93:67:06:
                    63:6a:e2:89:95:93:5c:d3:25:a7:e3:dd:13:d5:08:
                    dc:e2:f5:6f:ba:d7:8e:cd:4f:02:df:de:dc:3a:08:
                    88:08:b4:ad:dc:66:7a:c4:fb:ac:b4:3e:e6:64:01:
                    d8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:CA:57:DE:AD:98:C9:38:28:03:3D:47:1D:5B:76:5D:84:28:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8405b5e-8853-3e55-87eb-e9a467304dc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:69:7c:a1:e2:5f:22:e7:7c:81:54:83:71:eb:1b:1d:2a:30:
         46:d4:18:c7:a3:6d:4d:29:b0:f2:eb:c4:04:03:e8:ee:56:f5:
         87:be:1d:74:1a:88:82:d3:ad:4d:66:54:42:f1:0f:2c:f2:de:
         98:18:65:6f:7a:a7:d2:eb:8f:69:02:ef:ce:89:35:4f:fc:5f:
         93:a6:70:b7:6f:9e:0e:60:13:1c:a5:b9:4c:18:db:4a:b3:86:
         31:a3:bb:7c:6d:06:26:4a:ac:63:4f:21:f0:c5:39:f6:3c:3f:
         ea:39:d2:38:9c:d5:a2:f1:6f:85:55:bc:dc:af:6b:40:4a:c6:
         3f:f8:ab:0d:f4:10:88:84:97:d2:81:65:b6:6d:1e:e5:e2:bb:
         fe:22:96:fa:ad:cb:7a:14:da:61:ac:3e:56:9b:cc:71:a0:04:
         ee:2f:a1:ab:23:9e:c1:19:5f:04:46:64:fb:b1:df:3e:5b:32:
         4c:75:11:31:92:8c:16:c9:d7:24:17:64:a9:38:41:74:ac:19:
         c4:70:35:15:b3:68:43:6e:6d:ed:a4:c0:e0:d3:c9:53:ea:fb:
         44:09:5f:99:6b:eb:84:41:6e:05:5a:93:f9:a5:46:70:4a:ed:
         35:9d:1f:3e:d6:ba:77:bb:fa:bc:5d:d5:69:ca:e3:38:53:36:
         e1:97:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:40:41 2024 by rpki-client on console-fra.rpki-client.org