Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/70082917-4d74-3930-a4b4-219b155f6b2e.roa
File:                     70082917-4d74-3930-a4b4-219b155f6b2e.roa (raw, json)
Hash identifier:          bAgkXt7VojrP4Wb6kiRn0sXvk9Ra4z4InltdVz/HwL0=
Subject key identifier:   47:EC:9E:C7:5A:98:D3:70:1C:F0:94:EC:CE:17:BF:EB:12:EF:5B:FA
Certificate issuer:       /CN=0d1af089-3ace-488d-8f52-6b375c813ba2
Certificate serial:       010D0C9F4328584789EBF78F5C2059608AD14BC0
Authority key identifier: A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/70082917-4d74-3930-a4b4-219b155f6b2e.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     33600
IP address blocks:        149.149.0.0/16 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f7:8f:5c:20:59:60:8a:d1:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1af089-3ace-488d-8f52-6b375c813ba2
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=ae6f0f14-7680-4684-bdbd-17dcae7172d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:0b:f4:07:42:79:34:af:1a:bf:54:16:2d:
                    7e:8e:1c:65:1f:42:de:dc:ce:37:6f:f4:0c:4c:4a:
                    bb:1f:d9:31:04:81:2b:73:fc:03:01:4e:9a:3d:75:
                    d1:fc:f6:60:fe:bd:6b:b9:aa:68:88:73:01:0f:ff:
                    ef:96:17:ef:8b:c8:bb:f8:39:dc:41:4e:82:38:ac:
                    65:c4:1f:38:74:ef:bb:47:a7:fb:07:8d:06:42:a7:
                    6c:a8:76:47:fe:9c:fc:e0:cc:02:5b:44:1a:c2:5c:
                    59:7a:f2:95:c7:9c:aa:ac:71:85:82:1f:a7:a0:65:
                    58:85:af:40:a0:e4:69:83:ad:f8:b0:8c:eb:20:ad:
                    93:30:05:63:8e:81:8a:6a:12:a7:52:bc:1c:32:48:
                    99:eb:59:27:f3:72:09:10:a5:7a:3a:ad:ab:02:71:
                    cd:60:03:52:e9:f1:e6:73:a0:12:76:fe:63:87:13:
                    26:36:92:60:da:ab:26:8b:ef:1f:30:00:d9:f3:59:
                    08:03:0e:7b:61:de:8e:bf:d6:7f:87:24:bb:b1:d6:
                    9f:78:f5:17:21:30:41:d4:62:64:e0:6d:9b:a2:3b:
                    22:4d:79:8a:bd:83:4a:ec:60:68:a3:01:a1:c2:dd:
                    1c:4a:5e:f7:2f:11:8d:02:9b:62:a2:30:9d:1c:e9:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:9E:C7:5A:98:D3:70:1C:F0:94:EC:CE:17:BF:EB:12:EF:5B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/70082917-4d74-3930-a4b4-219b155f6b2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2/0d1af089-3ace-488d-8f52-6b375c813ba2.crl

            X509v3 Authority Key Identifier:
                keyid:A6:9C:CE:F2:D7:BC:3F:8C:EE:2F:16:34:59:64:85:BD:CE:1E:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d1af089-3ace-488d-8f52-6b375c813ba2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:70:17:52:23:eb:44:aa:21:1c:ed:d6:d5:81:15:32:64:2f:
         85:23:6f:b1:c9:f3:06:67:47:1a:fb:2b:38:29:a9:95:e9:32:
         28:8c:a7:10:53:14:4e:88:d8:7d:7c:80:70:34:46:8a:8d:ba:
         58:1c:f5:1f:1b:a4:76:6d:f1:b9:21:12:ee:26:71:61:3f:e1:
         d9:78:5a:82:08:03:57:d4:5a:8d:19:dc:89:dd:fa:15:11:21:
         b6:8b:41:79:82:50:71:35:31:33:d0:f4:8c:fa:fa:f8:7a:97:
         fc:0d:ef:6d:03:ff:dc:46:4a:12:11:6e:e4:88:6b:41:d8:cf:
         07:58:f7:3e:4b:88:15:42:41:13:3f:f7:23:c3:33:97:d1:6d:
         8d:09:f8:04:9d:c1:dd:52:08:44:fa:7c:01:2c:0b:6e:b9:bc:
         12:c9:63:4b:1b:01:a3:98:ef:8f:34:25:db:c6:5c:e0:8f:54:
         00:03:31:c1:4d:d8:25:de:c3:e1:62:bb:3f:9f:49:b5:f9:31:
         f0:ec:15:7a:94:6c:6c:69:8a:8d:66:8a:0b:97:fb:e7:43:99:
         27:92:8e:12:c2:23:ab:6a:9c:3b:38:2a:3c:70:00:2d:82:a8:
         a4:86:2d:8f:6e:48:52:93:00:68:11:0f:aa:5b:37:aa:04:7d:
         9a:d8:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:24 2024 by rpki-client on console-ams.rpki-client.org