Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4527487f-6d7d-3c9c-877b-f0d38158881c.roa
File:                     4527487f-6d7d-3c9c-877b-f0d38158881c.roa (raw, json)
Hash identifier:          MIK5Z+wVM3SK4E21h+/Tx7XgAj8KQ3sWgwsmzfbi72o=
Subject key identifier:   98:F2:6F:A2:01:77:7C:F3:A4:57:94:7B:98:45:FD:8D:0A:40:8F:B2
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844E23FD8783FDFF14666F4B380
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4527487f-6d7d-3c9c-877b-f0d38158881c.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        190.124.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d8:78:3f:df:f1:46:66:f4:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=26c73645-5d15-410f-a0f9-78b516191369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:38:31:d9:33:d5:57:9c:99:e1:22:33:64:
                    00:8b:b2:c8:b3:f5:0b:7b:3e:e6:be:d4:8c:13:12:
                    59:7b:33:19:7c:75:bd:26:1b:69:45:cb:2f:cb:b3:
                    58:64:03:ff:41:9e:72:1a:a3:76:30:24:2a:63:50:
                    c9:1d:01:50:de:0d:8e:3a:53:66:6c:e9:23:5d:3d:
                    50:13:2c:16:ec:cc:0e:ad:31:70:5b:e1:4a:64:6e:
                    db:c8:e0:f1:0b:2e:03:e7:20:01:94:0b:98:3b:54:
                    b2:b8:35:54:98:8e:a3:92:08:71:74:20:e3:8d:63:
                    39:bc:3e:7d:68:dc:a6:71:14:a2:28:e5:52:32:78:
                    fa:7a:23:fb:f5:7d:e8:d5:99:46:e4:77:d0:58:18:
                    17:fe:f1:ac:29:79:66:4f:a0:1c:49:2f:fb:f9:e9:
                    10:45:e7:c9:23:02:51:f6:7d:0d:46:bd:41:1a:72:
                    4f:53:0d:41:83:63:ce:b8:cf:10:6e:af:13:64:28:
                    c1:ea:ff:bd:e3:cf:dc:73:08:c1:a0:1a:7c:9c:81:
                    de:91:0e:ab:c2:5a:cd:e5:ad:e4:3a:a8:dc:f7:72:
                    a9:40:28:03:81:bb:18:c1:64:2e:9a:ee:7e:4f:3f:
                    55:9b:40:2e:35:7e:ac:4d:9d:4d:56:ea:83:fc:89:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:6F:A2:01:77:7C:F3:A4:57:94:7B:98:45:FD:8D:0A:40:8F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/4527487f-6d7d-3c9c-877b-f0d38158881c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:a4:5e:06:7b:f4:18:4f:8e:42:3b:40:48:4c:2e:91:ae:
         9d:aa:1e:2f:3a:55:4b:e5:f8:76:9c:9d:ca:71:5f:31:30:36:
         71:16:91:9c:f9:5a:71:1b:eb:04:7f:99:67:c6:21:e8:01:43:
         30:3a:99:58:3e:ea:3b:3b:9f:c6:dd:a1:49:d4:15:a0:6d:2b:
         09:9f:0a:07:d1:38:04:fd:20:9b:4a:5c:1f:9d:c0:4c:c4:74:
         0b:1c:74:09:2b:e8:3a:63:91:a7:f7:5d:c9:c4:ec:a2:23:85:
         0f:46:a8:e5:f5:1c:c8:78:be:f4:10:5e:c2:00:51:44:8c:2a:
         fd:c3:c1:57:ed:1a:ae:8f:0d:0e:95:ae:e1:f5:17:71:b5:32:
         43:06:cb:c8:16:3a:2e:6b:b5:cb:ec:77:b9:90:d4:96:db:15:
         4c:c0:08:3d:af:7c:b2:a5:70:d4:d2:07:74:33:02:08:42:c2:
         d4:3f:e3:a1:2d:f1:7e:fd:04:87:b0:ca:6c:96:81:67:04:6a:
         43:43:e6:a2:6f:6a:22:4d:5c:ba:39:f9:3a:ef:49:e8:03:33:
         70:61:a3:20:77:dc:d8:8b:b1:0a:60:80:91:c0:e8:db:b9:c8:
         b0:58:2e:3c:05:32:11:27:77:21:31:a4:81:7d:ff:77:0b:67:
         2e:dc:ce:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org