Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38854621-f66a-3a5e-93c3-7a69ade85e51.roa
File:                     38854621-f66a-3a5e-93c3-7a69ade85e51.roa (raw, json)
Hash identifier:          igWK3PWu8exXZABUHT0XMvyn6lc3WcaBbmfNVdZJrPA=
Subject key identifier:   37:14:4B:28:2E:B6:01:FD:CA:8F:A9:95:1B:B3:63:C7:BE:C2:4A:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004AE5E7AE02F6008EEC9960
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38854621-f66a-3a5e-93c3-7a69ade85e51.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     399271
IP address blocks:        50.220.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:e5:e7:ae:02:f6:00:8e:ec:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=d7e1b860-9869-4bfe-951e-45db34085dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2a:a3:34:0c:7d:25:cc:a8:8c:87:94:7d:96:
                    07:17:fd:a3:60:1b:6f:4c:c5:49:7d:5a:2e:42:67:
                    9b:13:c4:79:8e:e1:27:ff:ed:96:88:e0:52:9c:34:
                    e6:ce:51:6d:71:cb:08:f5:98:ae:f5:f1:aa:80:6a:
                    fb:9c:37:97:3f:8c:81:f7:0a:19:7d:a4:7b:0c:44:
                    16:9b:06:b5:a3:98:63:22:8e:33:2a:d6:bc:d5:46:
                    7f:62:71:15:a4:66:6c:45:9c:87:c3:06:43:c7:8a:
                    74:80:b2:2a:a6:8a:ca:36:f4:4d:29:a4:57:d9:6b:
                    fb:31:53:70:c7:f6:95:5f:f2:ba:c8:bc:f5:d9:0f:
                    34:e0:55:c2:7f:06:59:a9:c9:32:dc:51:ec:a7:86:
                    8c:ee:2b:d1:5f:6b:4f:65:0e:b4:15:00:7c:99:d4:
                    a2:8c:1a:03:63:91:9b:87:2d:12:2a:7a:86:53:de:
                    9c:79:7a:03:75:06:c5:fe:e2:7b:13:ba:65:89:3e:
                    63:89:52:90:a9:b2:e8:8b:53:de:db:36:51:75:04:
                    63:fa:b4:cb:1d:f6:8b:75:c4:60:86:d3:0a:5f:1c:
                    dc:92:da:34:3e:d4:b5:74:48:0c:6d:e1:72:74:f3:
                    ea:1e:9a:dc:6e:8c:28:0c:e7:c5:d8:10:7f:14:e6:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:4B:28:2E:B6:01:FD:CA:8F:A9:95:1B:B3:63:C7:BE:C2:4A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38854621-f66a-3a5e-93c3-7a69ade85e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:08:49:a9:e1:64:08:18:d4:62:ad:c2:b9:99:2a:73:fe:
         54:a0:a7:ac:91:d5:02:64:44:c5:d7:27:a9:1e:01:26:d6:71:
         61:68:4b:be:a0:bc:74:53:b7:db:58:50:86:0a:af:ca:14:7f:
         94:6c:8f:de:d8:53:92:8a:ac:79:31:61:b9:be:b3:6e:64:b6:
         10:7b:23:ce:49:4c:d7:3e:d1:79:a8:3c:c0:30:cd:1b:e8:d0:
         1f:40:86:72:9d:57:ef:69:2d:20:64:97:8b:fc:a9:cf:a0:f9:
         80:41:1d:56:69:18:1d:6b:87:ac:75:9c:a2:16:8e:1c:dd:05:
         6c:ee:8d:8b:77:15:ee:54:e4:74:bc:d1:58:63:2e:19:d6:9c:
         5a:cf:46:5c:df:47:aa:56:cf:b6:ea:de:3f:37:48:f8:6b:a4:
         2d:6f:b9:fd:da:92:a9:db:65:35:d3:aa:1e:11:a7:30:23:3d:
         01:5d:94:67:c0:fc:40:4c:18:ee:4a:89:c2:c6:7a:45:37:4c:
         dd:40:1a:ad:11:c7:75:97:c5:f3:d7:c3:35:5d:6c:d3:47:01:
         d5:3f:f7:f9:9f:bf:a7:e7:bd:a2:4c:66:81:57:a3:c0:1e:bb:
         6b:2e:d9:c1:b1:9a:65:81:94:32:a5:35:2a:93:36:38:74:ad:
         36:9c:de:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYASuXnrgL2AI7smWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
ZDdlMWI4NjAtOTg2OS00YmZlLTk1MWUtNDVkYjM0MDg1ZGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyqjNAx9JcyojIeUfZYHF/2jYBtvTMVJfVou
QmebE8R5juEn/+2WiOBSnDTmzlFtccsI9Ziu9fGqgGr7nDeXP4yB9woZfaR7DEQW
mwa1o5hjIo4zKta81UZ/YnEVpGZsRZyHwwZDx4p0gLIqporKNvRNKaRX2Wv7MVNw
x/aVX/K6yLz12Q804FXCfwZZqcky3FHsp4aM7ivRX2tPZQ60FQB8mdSijBoDY5Gb
hy0SKnqGU96ceXoDdQbF/uJ7E7pliT5jiVKQqbLoi1Pe2zZRdQRj+rTLHfaLdcRg
htMKXxzckto0PtS1dEgMbeFydPPqHprcbowoDOfF2BB/FObYRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcUSygutgH9yo+plRuzY8e+wkr4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg4NTQ2MjEtZjY2YS0z
YTVlLTkzYzMtN2E2OWFkZTg1ZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtzDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGe7CEmp4WQIGNRircK5mSpz/lSgp6yR1QJkRMXXJ6keASbWcWFoS76g
vHRTt9tYUIYKr8oUf5Rsj97YU5KKrHkxYbm+s25kthB7I85JTNc+0XmoPMAwzRvo
0B9AhnKdV+9pLSBkl4v8qc+g+YBBHVZpGB1rh6x1nKIWjhzdBWzujYt3Fe5U5HS8
0VhjLhnWnFrPRlzfR6pWz7bq3j83SPhrpC1vuf3akqnbZTXTqh4RpzAjPQFdlGfA
/EBMGO5KicLGekU3TN1AGq0Rx3WXxfPXwzVdbNNHAdU/9/mfv6fnvaJMZoFXo8Ae
u2su2cGxmmWBlDKlNSqTNjh0rTac3nc=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:28:52 2024 by rpki-client on console-fra.rpki-client.org