Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbcf3f3c-2385-3fb7-bad2-2f10015a46d1.roa
File:                     cbcf3f3c-2385-3fb7-bad2-2f10015a46d1.roa (raw, json)
Hash identifier:          ODbVPft9xJxSJixkgn+g9juhiVssp6nSJEDsm8r+02Q=
Subject key identifier:   1D:94:31:D2:54:D0:BC:F9:3C:CC:52:5B:EB:91:E1:E4:74:AB:A4:EF
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285845D0EDBAA3A9D37F8725155900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbcf3f3c-2385-3fb7-bad2-2f10015a46d1.roa
Signing time:             Thu 09 May 2024 13:53:12 +0000
ROA not before:           Thu 09 May 2024 13:53:12 +0000
ROA not after:            Wed 07 Aug 2024 13:53:12 +0000
asID:                     394916
IP address blocks:        50.174.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d0:ed:ba:a3:a9:d3:7f:87:25:15:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May  9 13:53:12 2024 GMT
            Not After : Aug  7 13:53:12 2024 GMT
        Subject: CN=14d58d1a-e750-46a6-a1bc-b8c02c9e6e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:f3:60:57:5e:87:c0:a2:d9:31:26:03:0f:
                    65:00:f4:55:4e:93:05:cf:e7:87:42:74:d9:93:c3:
                    d2:16:1a:9e:2f:21:ab:8a:36:49:5c:86:89:cd:bf:
                    5b:af:85:cd:8b:76:58:f6:00:1c:80:83:28:ff:44:
                    bf:d1:f8:01:11:af:43:f3:c2:28:42:69:54:5f:ad:
                    a5:0a:f6:7b:c1:86:95:4d:b1:5d:1a:18:24:da:1f:
                    2d:49:e3:6d:54:9a:73:a2:47:68:af:7f:94:d0:9c:
                    d7:07:15:58:08:da:71:ae:14:d9:00:5b:9f:73:ff:
                    75:49:dc:4f:b7:e8:63:21:e6:c1:d9:f0:5b:5b:c0:
                    aa:22:4a:64:76:10:56:31:79:5f:38:f5:42:84:26:
                    d7:84:d6:a2:b8:09:8b:73:6e:87:84:af:d3:b1:79:
                    e4:76:fb:f6:58:d6:5f:8b:1a:f8:80:7e:5c:52:db:
                    e0:7e:f6:e6:d6:e8:59:ef:75:36:38:a8:6f:ef:c4:
                    90:db:6b:79:63:04:78:db:8f:77:74:b1:de:d0:dd:
                    79:16:a9:c2:c5:db:28:85:6f:a6:b2:7b:ce:5b:08:
                    c7:05:69:17:db:d9:93:19:4d:2f:f0:ed:70:6a:2f:
                    84:dd:37:68:20:95:82:7f:3c:23:bf:04:ae:8e:ae:
                    25:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:94:31:D2:54:D0:BC:F9:3C:CC:52:5B:EB:91:E1:E4:74:AB:A4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbcf3f3c-2385-3fb7-bad2-2f10015a46d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.174.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:76:45:d7:de:c7:5d:8b:63:aa:35:bb:3d:80:8a:f3:ea:26:
         94:80:a8:9c:6c:53:45:c9:d9:ef:47:b0:96:c7:f8:4e:d7:78:
         18:cf:be:a6:9f:74:56:aa:b9:af:d6:c6:63:67:23:da:1f:4d:
         2f:7d:ed:76:8e:16:1d:16:ff:85:55:cd:eb:a3:e8:e2:5d:3e:
         5d:9e:e2:3b:8a:cb:32:2c:95:6e:64:64:f0:7a:40:65:f9:29:
         7a:24:c5:a8:7d:ad:15:48:e6:a8:b8:fd:82:9f:a7:be:0d:9c:
         e6:8c:c9:1e:1d:28:ec:76:e5:56:dd:e9:17:d8:17:34:82:06:
         59:c0:46:d5:db:e1:95:42:b9:31:ca:bf:a0:d7:e6:f0:df:72:
         63:50:82:d6:50:af:e4:25:8c:1a:cd:96:57:c4:6e:7f:34:3b:
         ac:0b:f3:9b:67:08:fc:ef:56:eb:87:5d:c7:6b:b6:6a:c2:96:
         c5:6d:f6:04:20:13:ee:a3:6d:5c:ab:e2:a1:02:29:70:92:82:
         46:f8:b0:5d:20:8e:ad:18:14:34:44:50:b3:e2:16:12:ea:93:
         cf:ca:1c:25:22:fd:ec:1d:44:97:e1:ee:fd:f0:00:c3:a2:9c:
         63:bc:86:48:1a:e3:96:6c:0d:d5:0b:52:f6:27:a7:1b:00:76:
         5b:c1:ab:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:32:40 2024 by rpki-client on console-fra.rpki-client.org