Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c5cde1-2a95-3f16-ab99-a140089f8d8f.roa
File:                     b0c5cde1-2a95-3f16-ab99-a140089f8d8f.roa (raw, json)
Hash identifier:          sSYwrgaJOKsrCjD9Uot4rAMDzPDxtTpkVvyEH/jYL1w=
Subject key identifier:   C6:A4:E3:18:37:0E:01:D5:00:BA:A2:BF:3D:CA:B2:65:95:E6:9E:D8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004A1CE31A49E09A6EAAED40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c5cde1-2a95-3f16-ab99-a140089f8d8f.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     33668
IP address blocks:        50.252.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4a:1c:e3:1a:49:e0:9a:6e:aa:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=e3fa6582-a44d-4afa-bdec-2a4517f517c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:c8:39:66:72:34:22:b5:aa:86:6f:3e:98:
                    9d:8d:cb:98:27:42:72:7e:95:85:6e:93:8e:7e:7c:
                    3c:2c:80:b0:3a:ad:74:2a:bd:5c:6d:67:25:00:cb:
                    e7:b7:ee:28:3c:0f:e6:1d:74:6d:01:9a:db:ea:8b:
                    53:ce:ef:5a:a1:60:bc:db:6a:a1:14:f8:42:34:33:
                    42:b0:f9:8b:dd:94:8d:df:48:02:89:06:6e:15:2a:
                    48:8e:6c:ac:1c:c2:8f:bf:78:07:9e:b8:ee:3f:34:
                    28:cb:65:00:c8:ba:ea:94:64:42:6c:df:49:58:61:
                    2d:c1:eb:f3:b1:aa:00:9d:fc:78:84:85:b5:e6:9b:
                    74:b3:f7:3a:1f:98:07:45:78:29:8d:d3:8f:61:a6:
                    88:a1:e3:5d:df:a4:ce:8d:cb:8b:7f:f9:8f:1d:01:
                    f8:d4:35:32:24:f0:a0:15:0d:f4:11:ee:00:8a:ae:
                    46:0c:a2:a9:f0:ec:8d:09:14:10:c9:2a:7d:5e:79:
                    d3:26:a2:0a:c9:dd:17:1b:4a:64:92:9e:72:8a:b8:
                    38:1a:c1:bc:24:d0:f2:2e:45:24:ef:95:a8:27:d0:
                    2d:6d:f4:6a:0c:2a:2c:8c:73:2f:0c:e8:72:05:c4:
                    39:ff:42:c1:52:45:42:da:61:1f:fb:3f:e2:fa:20:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A4:E3:18:37:0E:01:D5:00:BA:A2:BF:3D:CA:B2:65:95:E6:9E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c5cde1-2a95-3f16-ab99-a140089f8d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.252.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:4f:76:2f:90:72:3f:55:73:6b:07:51:12:94:42:8f:06:
         b6:a1:64:ed:e6:d5:0c:2a:a8:21:8f:77:12:5a:00:fe:92:81:
         f7:e2:77:e0:f8:e4:d2:1b:f4:98:64:6a:89:05:e6:48:4e:0f:
         51:12:ab:87:87:5b:76:b7:49:e5:08:af:45:f6:91:41:61:3d:
         94:3b:f6:82:01:dc:7b:69:77:17:e6:4d:11:0e:24:1d:c8:e4:
         b0:fa:fe:2d:46:db:f5:89:54:a6:3f:f6:a3:e3:3a:18:b0:e9:
         7a:a8:6f:81:11:08:df:eb:2c:c3:0f:6c:0a:18:5a:43:5e:8c:
         b2:87:57:52:b4:91:98:46:86:e2:41:15:78:4a:84:7a:12:64:
         5e:67:98:a9:2c:aa:36:fc:be:f8:19:ea:ad:f2:1d:dc:cf:a5:
         a8:07:dd:ca:3a:48:b1:5b:ec:31:5b:56:f0:01:a1:11:fd:dd:
         4c:a8:b3:dd:39:3d:d4:f3:90:d0:ca:9d:c4:65:cb:d3:21:9b:
         cd:06:ab:2e:b7:29:f2:a4:95:05:46:08:34:49:b0:88:86:7a:
         41:d5:06:b4:eb:20:94:cb:9c:ab:6f:da:d2:0d:d0:b2:37:91:
         af:9b:16:4e:4f:03:3d:4d:97:ca:2f:8a:03:65:f3:2b:3f:56:
         3e:7b:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:03:07 2024 by rpki-client on console-ams.rpki-client.org