Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4372951c-fff4-3427-9024-4c33d1f4b339.roa
File:                     4372951c-fff4-3427-9024-4c33d1f4b339.roa (raw, json)
Hash identifier:          tIRUou6DCLyPTS3qvHtJdrT46QJfDhJDUQPHZLzFuLI=
Subject key identifier:   75:3B:0A:73:22:7E:91:35:32:2B:EB:E3:76:A6:54:60:C4:E2:D9:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858460FA40FD0252969E794BCAA80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4372951c-fff4-3427-9024-4c33d1f4b339.roa
Signing time:             Sat 01 Jun 2024 01:00:28 +0000
ROA not before:           Sat 01 Jun 2024 01:00:28 +0000
ROA not after:            Fri 30 Aug 2024 01:00:28 +0000
asID:                     33661
IP address blocks:        50.197.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0f:a4:0f:d0:25:29:69:e7:94:bc:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 01:00:28 2024 GMT
            Not After : Aug 30 01:00:28 2024 GMT
        Subject: CN=b9b2b385-34aa-4722-9342-4438da2bfd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:cc:98:60:b9:da:cd:3f:01:af:7a:28:95:
                    50:c3:dc:16:46:a2:e5:97:60:45:0d:fd:dd:1b:29:
                    3c:94:52:77:1f:1a:b1:b9:84:90:9e:48:4c:04:60:
                    fb:0f:cf:46:c4:e2:62:60:f0:01:a0:7b:05:16:2b:
                    ea:aa:c5:d2:a1:61:4c:12:ff:bb:8b:2a:1c:e0:23:
                    b6:cf:c5:c5:92:07:cb:b1:b9:99:d4:bb:e6:ca:a7:
                    fc:56:4d:30:a2:49:53:a1:2f:da:39:f5:cb:b7:c5:
                    53:d0:e0:fa:43:d8:48:c8:4f:57:88:55:8e:ee:4b:
                    1a:ff:35:89:1b:05:c2:4c:5a:e5:fa:cf:91:59:45:
                    bd:f0:0b:42:77:d1:d5:9b:1b:3c:7f:46:68:cb:90:
                    88:0a:3c:bf:ff:4f:3e:9f:34:8d:85:35:2f:1e:39:
                    7b:5b:4a:43:d5:ae:3a:00:4a:59:b0:a6:7f:3f:3e:
                    fd:f5:f4:b4:2c:c8:0f:c4:fa:98:50:b7:bc:38:4f:
                    dd:c1:3a:af:57:67:f7:b6:26:89:80:ee:89:d1:86:
                    9f:2c:af:f0:f0:e0:2b:df:8f:7d:00:6e:bb:46:01:
                    a9:ad:ce:bd:f0:0e:cc:f3:01:74:a5:73:7e:eb:89:
                    9c:c3:c4:0e:1f:42:44:11:2d:93:13:3e:34:e7:70:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:0A:73:22:7E:91:35:32:2B:EB:E3:76:A6:54:60:C4:E2:D9:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4372951c-fff4-3427-9024-4c33d1f4b339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.197.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:78:cd:96:25:69:3c:c6:ae:00:ff:16:1e:12:67:94:fa:
         07:bf:57:45:44:99:a7:ed:dc:2c:cd:da:1e:fc:30:74:b0:f5:
         50:b5:5f:a9:41:9c:05:cb:51:ca:5a:fb:66:66:19:8d:0d:61:
         07:4a:04:37:8d:58:33:a0:12:9e:ae:17:36:f8:92:e9:a1:89:
         12:f2:52:8e:25:9d:65:ec:28:a4:3d:3b:7c:76:eb:cb:a7:85:
         58:4e:b5:64:c7:3d:f0:61:7f:9a:36:14:5f:09:f0:06:7e:8d:
         9e:09:fa:b6:05:77:02:6d:70:52:bd:81:df:e4:23:dd:09:fb:
         f6:aa:d5:27:f2:f3:81:18:9d:d9:4a:2c:d3:71:88:d3:8d:75:
         78:33:db:74:fd:f4:47:ca:09:36:fc:6c:33:9c:9e:f2:98:d0:
         33:d0:45:fc:12:ba:a3:9c:fe:3c:f7:ab:94:d0:8f:4b:b4:7a:
         d7:4b:da:87:2e:b4:f6:6d:24:e8:08:99:8f:87:1b:6f:d0:81:
         8b:89:48:72:7a:99:d8:b7:59:1d:4a:89:00:10:7e:bd:58:cd:
         fe:ca:0f:cb:88:56:a0:4b:b6:09:5c:f6:c1:5b:8d:fa:2e:8e:
         3a:c0:83:c4:e5:be:56:b5:74:a8:ee:d4:7a:9a:a9:7b:56:79:
         41:01:73:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:41:03 2024 by rpki-client on console-fra.rpki-client.org