Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa
File:                     01549ba4-9860-36fa-802e-973645dc8779.roa (raw, json)
Hash identifier:          XMLxikcZFUoTxaBuPKm6ScezQHP5wOHZpVxfAWQX1gQ=
Subject key identifier:   EB:40:4A:6B:B3:08:49:13:6D:A6:CA:12:14:71:0B:CF:17:43:76:C4
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844DE0FDBB0A8D83349AFEE4AC0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa
Signing time:             Mon 12 Feb 2024 14:00:30 +0000
ROA not before:           Mon 12 Feb 2024 14:00:30 +0000
ROA not after:            Sun 12 May 2024 13:00:30 +0000
asID:                     29802
IP address blocks:        68.233.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:0f:db:b0:a8:d8:33:49:af:ee:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 12 14:00:30 2024 GMT
            Not After : May 12 13:00:30 2024 GMT
        Subject: CN=face4e8b-cb42-45ac-9e97-827d6e19e1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:4a:24:91:43:43:0f:df:44:20:3b:d1:8f:
                    6e:82:ec:4b:a1:f6:61:a9:e6:c8:61:9c:1f:c9:1a:
                    be:65:16:45:ba:24:89:f3:b0:dc:cf:a6:1f:66:53:
                    60:b8:0f:03:53:e4:3e:15:9d:d4:bb:98:08:e4:4a:
                    fa:71:aa:3c:bb:7e:68:29:49:c0:88:6a:a3:bb:73:
                    d9:63:56:e9:8a:d3:6c:e0:b3:f5:0f:fe:2b:1d:8a:
                    95:07:43:15:2f:cb:66:1d:d4:fd:dc:ed:78:93:af:
                    19:99:9c:21:ba:7c:02:3d:89:39:1d:f5:b3:ac:5f:
                    93:9a:47:9a:de:59:1b:1f:20:82:50:ae:69:a3:4c:
                    41:77:4c:ce:a8:d6:58:ff:61:ad:25:b4:49:ef:85:
                    40:18:ca:b2:67:4f:91:da:dc:64:36:95:d6:a4:d6:
                    e4:70:e3:23:1f:20:57:bf:58:79:5f:67:bc:01:14:
                    e3:3e:c2:2e:74:e4:0c:29:65:8b:d3:14:ee:a2:3b:
                    5d:82:a9:4f:46:e6:7d:cf:ee:7d:5d:6a:22:e7:7b:
                    39:57:d1:4b:45:4b:90:f1:72:fc:ea:5c:41:64:de:
                    bd:c5:29:49:39:9d:9d:5f:d4:1f:54:81:90:e5:2b:
                    34:ba:cd:54:fc:48:42:33:19:c8:10:c5:85:1e:66:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:40:4A:6B:B3:08:49:13:6D:A6:CA:12:14:71:0B:CF:17:43:76:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/01549ba4-9860-36fa-802e-973645dc8779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:79:5d:ae:86:28:62:16:35:ad:62:89:a8:20:cc:2f:f7:30:
         a2:3d:ab:51:b0:c0:db:30:ad:ed:c1:98:8f:44:71:1a:97:35:
         d1:25:5a:d9:ee:c5:a8:4e:b1:15:c5:d4:db:58:af:7a:ef:72:
         5f:fc:6a:38:29:d5:cf:bf:77:2c:04:1a:f9:86:e0:0c:34:30:
         35:ba:1e:9d:5d:6d:77:bd:46:62:c6:c0:e1:2f:ed:4d:ad:c9:
         31:76:69:16:30:d6:bd:b0:43:59:cb:1b:bf:b8:d4:26:07:89:
         6b:8c:65:52:fb:97:3d:21:2f:02:f6:a3:64:07:fd:2d:5c:33:
         4a:44:73:96:bb:5e:62:92:44:d6:00:ae:07:ea:db:1e:75:e9:
         57:5c:b2:7f:54:e2:8c:ea:94:4e:fe:a7:fa:e4:34:ec:d9:80:
         e5:d0:11:6a:2c:de:2e:5a:8c:2b:a5:f4:af:42:f4:96:56:a5:
         9e:97:f2:fb:6d:65:88:a7:18:02:6d:c4:8e:56:e6:b3:7d:5d:
         76:22:aa:db:b0:23:b1:68:77:48:b4:f8:42:5f:ba:0f:1b:1f:
         a0:24:7c:fa:9b:6d:b9:c4:82:d5:d3:c8:7c:98:e1:e2:f2:03:
         20:d4:a0:5b:a8:79:3b:0d:0c:29:f5:08:5f:2f:ce:a3:89:0a:
         b7:96:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:12:00 2024 by rpki-client on console-fra.rpki-client.org