Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66313dc8-b83f-3a2f-a089-6741c6b1e99e.roa
File:                     66313dc8-b83f-3a2f-a089-6741c6b1e99e.roa (raw, json)
Hash identifier:          t2AR+gr8oi4kRNOYhFfRSJswztcaII/yeQIass/D63I=
Subject key identifier:   EE:08:86:81:98:41:35:62:07:9F:5B:0E:7D:D8:D2:3F:62:B5:BE:66
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A1B90DCD27C4C67D98A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66313dc8-b83f-3a2f-a089-6741c6b1e99e.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33668
IP address blocks:        50.173.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:1b:90:dc:d2:7c:4c:67:d9:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=76437321-979c-47e3-8767-12a9641ae049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:12:88:ac:04:ae:49:fb:85:7d:37:a5:b5:a1:
                    25:a5:2b:02:6a:02:f4:5c:2e:01:e3:7c:ba:9e:fc:
                    be:54:3e:17:42:d4:98:71:4f:76:d7:53:93:fd:ea:
                    54:11:b9:35:40:40:ce:0d:c7:a9:40:46:e1:4a:d4:
                    da:4f:8a:fb:d9:a8:e4:79:fd:38:3e:2e:2c:0c:72:
                    dd:7f:60:19:42:b4:59:21:58:d5:38:e0:3f:df:8b:
                    c7:6c:20:ab:bc:7f:82:cc:71:20:db:91:f4:ca:b5:
                    74:3b:96:34:76:6b:d6:aa:76:b8:30:b1:2b:95:20:
                    3c:5e:b4:5f:40:15:d3:2f:36:ab:33:fb:7c:31:ed:
                    a0:80:e5:5a:fd:b7:51:c2:c7:72:7b:a7:c3:58:34:
                    ee:36:81:29:0c:b4:7d:d9:2f:81:6f:9f:71:84:a8:
                    e3:4a:60:bb:fa:99:36:6c:f0:20:48:80:d3:54:42:
                    a8:67:65:d5:53:c2:03:34:79:a6:6f:8b:14:49:34:
                    37:a9:88:95:23:f8:47:01:50:09:9f:c2:3b:67:39:
                    20:46:ee:29:b3:38:bf:e7:5e:49:02:dd:5a:75:7a:
                    95:74:3c:39:61:2b:ce:cc:a3:ea:8b:26:8c:56:63:
                    bd:09:cb:66:d1:bb:e0:2c:c9:34:ee:df:9e:df:6f:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:08:86:81:98:41:35:62:07:9F:5B:0E:7D:D8:D2:3F:62:B5:BE:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/66313dc8-b83f-3a2f-a089-6741c6b1e99e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.173.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:16:69:90:e2:36:e8:b6:ec:f4:cc:92:27:80:4b:c2:95:e7:
         2c:79:7f:f4:f0:15:64:fd:69:a2:0b:9b:a7:06:8f:22:2f:bd:
         df:20:fe:bd:20:8b:1c:9d:49:32:30:e5:8a:62:55:62:03:d1:
         6f:3a:09:57:30:db:a7:5e:2f:f5:f9:25:cc:7f:dc:df:b3:a6:
         58:c7:eb:33:0e:44:49:93:32:97:3a:96:a9:25:61:59:26:25:
         19:f1:8a:14:4e:38:92:25:60:9e:b6:0b:84:2c:ff:1b:b4:8c:
         23:b9:b9:b4:6d:cb:e1:e8:26:8d:89:bc:a8:fe:97:51:a0:c0:
         46:5b:de:ef:02:6f:de:29:c7:ac:50:7b:9e:ae:73:20:15:5e:
         3c:5b:17:82:65:aa:1d:42:c0:87:41:cf:d5:6a:fe:ea:71:60:
         33:03:98:c4:68:f3:3b:ea:79:25:18:6b:1b:eb:f7:10:6a:f1:
         24:00:75:04:12:3f:07:36:e6:bb:86:ef:02:66:f4:9e:3e:bc:
         83:a7:16:ca:47:92:e9:e6:44:15:e8:80:1b:39:a0:ba:67:ff:
         51:7d:03:6e:28:83:bd:f1:2c:ba:d7:fc:51:f8:eb:96:7c:ea:
         82:85:a5:1c:c9:0a:0b:ed:f5:52:71:56:1b:e5:99:bd:2d:47:
         98:e1:db:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYAShuQ3NJ8TGfZigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
NzY0MzczMjEtOTc5Yy00N2UzLTg3NjctMTJhOTY0MWFlMDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRKIrASuSfuFfTeltaElpSsCagL0XC4B43y6
nvy+VD4XQtSYcU9211OT/epUEbk1QEDODcepQEbhStTaT4r72ajkef04Pi4sDHLd
f2AZQrRZIVjVOOA/34vHbCCrvH+CzHEg25H0yrV0O5Y0dmvWqna4MLErlSA8XrRf
QBXTLzarM/t8Me2ggOVa/bdRwsdye6fDWDTuNoEpDLR92S+Bb59xhKjjSmC7+pk2
bPAgSIDTVEKoZ2XVU8IDNHmmb4sUSTQ3qYiVI/hHAVAJn8I7ZzkgRu4pszi/515J
At1adXqVdDw5YSvOzKPqiyaMVmO9Cctm0bvgLMk07t+e328I9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4IhoGYQTViB59bDn3Y0j9itb5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjYzMTNkYzgtYjgzZi0z
YTJmLWEwODktNjc0MWM2YjFlOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMq2tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIWaZDiNui27PTMkieAS8KV5yx5f/TwFWT9aaILm6cGjyIvvd8g/r0g
ixydSTIw5YpiVWID0W86CVcw26deL/X5Jcx/3N+zpljH6zMOREmTMpc6lqklYVkm
JRnxihROOJIlYJ62C4Qs/xu0jCO5ubRty+HoJo2JvKj+l1GgwEZb3u8Cb94px6xQ
e56ucyAVXjxbF4Jlqh1CwIdBz9Vq/upxYDMDmMRo8zvqeSUYaxvr9xBq8SQAdQQS
Pwc25ruG7wJm9J4+vIOnFspHkunmRBXogBs5oLpn/1F9A24og73xLLrX/FH465Z8
6oKFpRzJCgvt9VJxVhvlmb0tR5jh2xY=
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:17:17 2024 by rpki-client on console-fra.rpki-client.org