Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13159b11-7617-37e7-8c5f-6a4b701d87f9.roa
File:                     13159b11-7617-37e7-8c5f-6a4b701d87f9.roa (raw, json)
Hash identifier:          vUvcMXrc8AAe53psQXlLOXAiT940JCEOebpQZnJYNDg=
Subject key identifier:   C8:75:EC:11:A9:7A:5A:82:34:44:A2:75:9A:18:1A:EE:D9:EC:2E:2B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004B3365597A1D74A3239D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13159b11-7617-37e7-8c5f-6a4b701d87f9.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33666
IP address blocks:        50.252.152.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4b:33:65:59:7a:1d:74:a3:23:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=9952aa1c-95f7-43b9-a536-3cbcf9899747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:e8:6c:da:11:27:7b:4e:c9:90:f2:de:6b:
                    76:43:4e:d4:f6:c2:f3:02:47:b9:9f:f1:c9:88:23:
                    d7:95:7c:58:10:a0:a2:da:4f:4a:96:e3:d5:d5:ef:
                    3e:72:3d:88:1d:30:40:10:fb:76:68:68:8d:2b:50:
                    84:7a:0e:33:e5:25:c1:9f:30:fe:3f:66:8c:c5:7b:
                    71:23:8f:b8:12:e0:76:19:65:e7:f1:42:9f:2e:df:
                    55:bc:00:80:87:2b:ec:85:89:bc:19:40:57:b6:a9:
                    2a:be:fe:ec:c0:0b:97:ea:10:70:d1:68:a2:e3:8b:
                    cd:ce:e5:66:93:e8:d9:9b:14:eb:ed:6a:30:bc:ca:
                    db:99:46:09:27:d7:5d:4f:b5:53:22:8c:d4:5c:40:
                    48:9a:d6:b1:4f:75:8c:16:ae:43:3d:10:34:18:16:
                    d7:f1:c9:1b:02:bd:f8:46:4d:45:3c:66:f4:e4:f3:
                    f3:bf:13:e7:a1:4a:07:a2:8b:5d:34:b7:93:5d:9b:
                    df:d9:86:eb:5d:2f:9a:55:11:38:c1:06:c0:9f:bc:
                    2c:d9:8d:de:da:59:96:65:d4:9d:63:ba:03:dc:e2:
                    0a:8f:e1:ff:32:dd:93:ba:f7:3a:e4:9f:3d:83:20:
                    92:cc:12:99:b1:4a:b7:0e:c5:62:72:4c:87:9f:e0:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:75:EC:11:A9:7A:5A:82:34:44:A2:75:9A:18:1A:EE:D9:EC:2E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/13159b11-7617-37e7-8c5f-6a4b701d87f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.252.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:98:ff:db:50:61:f8:6b:4d:4f:eb:ba:11:90:9d:83:2d:
         a7:a1:b7:f9:d0:36:4c:2d:f4:73:9e:c0:76:94:b5:90:2d:95:
         00:d4:1f:44:76:89:55:55:a8:b8:c4:99:62:0c:c0:7d:a5:de:
         f6:21:0b:d3:85:6f:10:d0:e5:27:74:42:cf:a3:48:d6:c2:ec:
         8d:ee:fb:72:15:bb:ec:62:6f:18:e2:1b:b7:23:14:26:44:16:
         60:4a:34:52:da:72:e9:2d:06:b4:af:83:08:7e:0d:a6:fc:4b:
         70:50:c7:39:22:78:03:a7:f2:7e:22:ca:f8:67:19:73:a4:dc:
         57:6e:63:ab:c1:53:b6:ee:f3:a3:4c:36:d7:b0:3b:1c:e5:65:
         78:8a:57:0a:96:0a:0a:df:1e:4f:fe:01:61:58:e7:80:13:96:
         93:e2:f2:b9:85:71:57:b7:31:b3:82:59:59:ce:23:63:a1:b5:
         cd:c1:12:ed:5b:f7:33:32:a9:fc:0e:b0:26:91:d3:72:d7:8a:
         02:93:5c:08:ae:a4:49:ac:0d:68:e8:70:72:42:68:6b:ee:cf:
         ac:14:1a:94:2e:98:76:1a:9c:ec:8e:d2:e0:71:29:17:aa:54:
         09:0f:58:01:41:bf:20:5a:ec:be:4a:5b:ad:ce:41:9a:7f:05:
         51:33:a5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:01:39 2024 by rpki-client on console-ams.rpki-client.org