Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9056df6a-71bd-3789-82f2-fe683698a3bf.roa
File:                     9056df6a-71bd-3789-82f2-fe683698a3bf.roa (raw, json)
Hash identifier:          Hy6298gOHFcja+8etBUs/BJxq01qPA64ArDdCqI+uIU=
Subject key identifier:   3B:0D:2D:46:51:5E:6F:4B:F9:0D:B7:D0:24:3C:8C:00:71:77:39:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C7A992ACEC7D09B1A0D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9056df6a-71bd-3789-82f2-fe683698a3bf.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     30248
IP address blocks:        50.201.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:7a:99:2a:ce:c7:d0:9b:1a:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=876d973a-1590-4a02-b336-c65a0536bbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:a1:54:f4:9b:b5:3b:30:52:c7:d3:ab:fd:
                    8f:eb:13:9d:b7:39:e0:94:cc:57:0e:0b:0f:a2:64:
                    86:16:06:e0:23:fa:23:fc:60:ab:a3:1e:7b:49:50:
                    7c:8d:cc:96:99:b3:0e:68:72:be:4d:1a:3c:f6:00:
                    ad:17:9c:ce:0b:c4:88:9d:b1:25:bd:de:28:30:7f:
                    90:4a:dc:4b:05:a5:80:e7:fc:04:01:f7:8b:02:d7:
                    07:68:96:cf:0e:1b:5d:fc:03:9a:db:bc:28:db:25:
                    a4:0d:44:b8:12:d2:cd:9f:18:42:56:5a:53:0c:8d:
                    86:64:0d:97:93:75:26:7a:2c:e5:d4:6f:ce:5e:84:
                    a8:47:58:2e:20:ab:b0:a7:5d:75:d8:44:86:d2:a4:
                    03:d5:7a:b6:9b:fe:54:dd:b8:c3:e0:43:43:40:75:
                    fa:67:93:cc:39:02:48:67:c7:3a:1f:49:08:f3:30:
                    2f:1b:72:75:45:07:89:2b:88:3f:28:ff:07:2c:c2:
                    4c:4c:91:4b:f9:d1:28:0e:4e:27:d0:41:ab:a0:4a:
                    51:95:10:a7:4d:1b:f6:a6:e7:81:48:bf:25:57:7e:
                    34:9f:80:8b:c3:ec:8e:6a:4d:88:f4:cd:35:a3:0e:
                    5f:ba:85:98:ee:fd:7d:5b:ae:6c:54:e3:c3:75:ca:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0D:2D:46:51:5E:6F:4B:F9:0D:B7:D0:24:3C:8C:00:71:77:39:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9056df6a-71bd-3789-82f2-fe683698a3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.201.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:78:0c:ec:6d:4a:43:84:9d:92:59:1a:d5:e7:5b:12:e3:
         9f:12:17:a1:a8:b8:0f:82:60:2e:1b:7d:98:26:65:21:f2:03:
         39:04:39:ea:b0:e8:4f:52:3c:0c:e3:51:5a:bf:21:72:c6:6b:
         fa:80:ed:ed:c7:11:bc:f9:bd:50:49:ca:09:bb:73:a4:82:ec:
         a2:1d:c2:c6:a1:ad:11:1d:fd:e2:3b:c2:d9:a2:59:46:f9:0d:
         01:dd:bf:13:a2:9f:ee:7d:fa:52:ef:2d:25:8b:87:23:2b:52:
         5c:dc:b9:32:29:07:d0:fb:c3:ab:d6:02:d6:4c:d9:d9:67:9b:
         32:1d:8f:49:fe:c8:60:03:e0:73:c3:85:e9:a6:08:06:db:66:
         a1:e6:6a:a2:76:49:cc:6a:f7:a1:92:98:b3:f5:74:01:3d:f0:
         68:87:a2:f9:90:58:a3:34:64:e1:de:ab:ad:a9:78:5f:93:80:
         6c:5a:75:3b:09:ce:d2:b3:b9:63:6f:43:66:64:8c:f0:da:16:
         6e:99:0b:a9:0a:d6:63:49:39:6b:4f:3f:71:c7:d2:ae:28:8e:
         5c:3a:b0:2d:e2:34:fe:41:5c:b2:78:7c:16:e5:6f:f8:c9:06:
         67:90:4c:d0:27:03:43:82:b8:d3:d4:fb:43:91:7b:56:12:c0:
         95:2c:90:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYATHqZKs7H0JsaDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDUyNjEzMDAzNFoXDTI0MDgyNDEzMDAzNFowLzEtMCsGA1UEAxMk
ODc2ZDk3M2EtMTU5MC00YTAyLWIzMzYtYzY1YTA1MzZiYmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaChVPSbtTswUsfTq/2P6xOdtznglMxXDgsP
omSGFgbgI/oj/GCrox57SVB8jcyWmbMOaHK+TRo89gCtF5zOC8SInbElvd4oMH+Q
StxLBaWA5/wEAfeLAtcHaJbPDhtd/AOa27wo2yWkDUS4EtLNnxhCVlpTDI2GZA2X
k3Umeizl1G/OXoSoR1guIKuwp1112ESG0qQD1Xq2m/5U3bjD4ENDQHX6Z5PMOQJI
Z8c6H0kI8zAvG3J1RQeJK4g/KP8HLMJMTJFL+dEoDk4n0EGroEpRlRCnTRv2pueB
SL8lV340n4CLw+yOak2I9M01ow5fuoWY7v19W65sVOPDdcrvuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsNLUZRXm9L+Q230CQ8jABxdznYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTA1NmRmNmEtNzFiZC0z
Nzg5LTgyZjItZmU2ODM2OThhM2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMsmJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHu/eAzsbUpDhJ2SWRrV51sS458SF6GouA+CYC4bfZgmZSHyAzkEOeqw
6E9SPAzjUVq/IXLGa/qA7e3HEbz5vVBJygm7c6SC7KIdwsahrREd/eI7wtmiWUb5
DQHdvxOin+59+lLvLSWLhyMrUlzcuTIpB9D7w6vWAtZM2dlnmzIdj0n+yGAD4HPD
hemmCAbbZqHmaqJ2Scxq96GSmLP1dAE98GiHovmQWKM0ZOHeq62peF+TgGxadTsJ
ztKzuWNvQ2ZkjPDaFm6ZC6kK1mNJOWtPP3HH0q4ojlw6sC3iNP5BXLJ4fBblb/jJ
BmeQTNAnA0OCuNPU+0ORe1YSwJUskMY=
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:31:07 2024 by rpki-client on console-fra.rpki-client.org