Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa
File:                     dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa (raw, json)
Hash identifier:          8137HLVakOr6IQSJdYYWgTXvCefp1rIE5R47KDwJQJ4=
Subject key identifier:   97:DB:84:9F:7E:43:B3:1E:92:A9:20:BF:6C:09:08:10:C5:61:42:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285846004C7C7EEB1E8803774B6300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa
Signing time:             Sun 26 May 2024 13:00:34 +0000
ROA not before:           Sun 26 May 2024 13:00:34 +0000
ROA not after:            Sat 24 Aug 2024 13:00:34 +0000
asID:                     36679
IP address blocks:        50.204.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:00:4c:7c:7e:eb:1e:88:03:77:4b:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 26 13:00:34 2024 GMT
            Not After : Aug 24 13:00:34 2024 GMT
        Subject: CN=2f4aa882-f7af-4896-9263-2af758b1492e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:29:b0:76:18:0e:fe:1f:ca:76:9e:8f:79:
                    bb:c3:e7:e3:fc:db:36:e9:5c:ae:9a:21:8c:76:6f:
                    6c:62:13:ac:15:44:58:92:8a:e8:61:7a:86:5f:45:
                    d4:39:3b:35:a4:71:d9:12:1d:e8:ff:99:03:0f:7f:
                    de:cd:b6:64:ab:d2:6f:eb:38:2e:24:c8:1a:b2:a1:
                    a3:f5:e7:70:49:be:8e:12:f5:e2:b5:54:e3:e4:65:
                    6a:f3:10:82:18:05:67:2f:03:e9:45:49:e5:3e:cc:
                    cd:44:63:b0:11:5f:a5:72:f4:e6:04:a5:b7:16:fb:
                    68:1a:52:4f:53:72:a2:d0:da:9d:73:f3:4d:83:6f:
                    b1:14:c0:6a:14:7c:ae:cc:4d:0c:e8:ac:1b:0f:0f:
                    fd:5c:ed:f8:87:58:ac:c5:ff:80:22:1d:2c:77:36:
                    b3:25:e9:e6:60:e4:49:59:ed:8d:8e:19:f8:dc:07:
                    41:a1:7d:c5:0e:7c:90:4e:65:d4:39:b0:7c:cb:a3:
                    87:59:f6:20:f8:29:13:ab:c5:c6:7f:8f:11:8b:7d:
                    2d:ad:e1:3f:c4:d1:a9:f9:48:4d:b3:0b:4f:46:4c:
                    67:ae:7a:e4:05:4d:78:31:21:40:e0:6c:e8:5a:a5:
                    cb:43:d1:02:cf:85:9a:26:8f:4f:f3:37:7a:8c:d6:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DB:84:9F:7E:43:B3:1E:92:A9:20:BF:6C:09:08:10:C5:61:42:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dfc5c43e-75e4-3813-a14a-70c186c1dcdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.204.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:ae:7e:24:b9:60:4a:1e:17:ae:4c:84:08:35:d0:a7:12:
         31:f4:bd:ef:39:da:f7:fe:cf:12:a4:72:57:dc:08:78:1b:6f:
         e0:03:c2:48:3d:c2:f3:9f:b0:91:5f:03:43:38:d7:9e:8b:74:
         34:56:38:17:3c:95:3f:54:75:67:d5:21:77:43:90:dd:3a:45:
         46:e5:be:21:22:0e:a9:98:69:e3:93:f7:e1:f6:cf:66:67:cf:
         1d:52:31:06:2c:32:5a:b5:a9:5c:0e:69:93:ce:d0:9f:ba:12:
         65:47:ff:1b:4e:c1:06:21:25:8c:95:f3:df:33:d2:c7:6d:77:
         32:63:82:7f:fd:1a:8c:09:4f:a6:7a:ac:20:16:77:52:f9:65:
         f4:50:e8:9d:96:ea:34:ff:83:c4:b8:1c:c4:c5:5a:09:e7:02:
         ff:4b:96:ef:8f:a0:e4:21:c9:d8:e9:9e:85:b7:40:a8:38:15:
         9c:f2:4f:7b:43:91:6e:c9:36:94:f0:bb:5c:02:e2:7a:ba:20:
         1c:34:4e:b3:ff:7c:10:f3:8f:74:a6:01:55:d9:ca:fa:3a:53:
         5b:bb:48:2a:33:51:0d:fa:86:92:92:a9:95:e3:1d:da:a1:cc:
         12:76:bc:13:e2:6b:71:69:11:83:a9:d8:3b:f7:3d:62:0f:9f:
         d1:ea:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:04:53 2024 by rpki-client on console-ams.rpki-client.org