Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa
File:                     5c388c98-e698-3634-a1c7-a223e82c1398.roa (raw, json)
Hash identifier:          E0G7fcICu0QzFWYs5Y722ysf8kdLiWg2axXACGLy93s=
Subject key identifier:   7B:F6:AA:6E:AF:5E:5C:A8:32:E9:43:E7:68:7D:62:41:01:CD:A2:0E
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844DE0FDB9C1C216CB9E84E4780
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa
Signing time:             Mon 12 Feb 2024 14:00:30 +0000
ROA not before:           Mon 12 Feb 2024 14:00:30 +0000
ROA not after:            Sun 12 May 2024 13:00:30 +0000
asID:                     29802
IP address blocks:        66.232.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:0f:db:9c:1c:21:6c:b9:e8:4e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 12 14:00:30 2024 GMT
            Not After : May 12 13:00:30 2024 GMT
        Subject: CN=f7c7baf3-b3af-45e8-92b9-2afdaa27ec0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:0e:e2:fc:61:3c:77:9d:93:ba:57:c3:8d:
                    8f:a3:08:48:6b:f4:dd:18:d6:12:b6:65:12:ac:06:
                    53:58:64:24:a6:f9:35:17:fb:17:81:5f:87:a0:17:
                    57:be:ba:89:c0:94:7f:f8:ef:76:36:6d:e2:e7:64:
                    ce:93:ba:3b:02:97:c6:93:08:9c:34:d1:6f:a5:dc:
                    ea:7d:1d:2b:f4:c8:2f:6b:fb:02:b4:8f:17:20:bf:
                    56:ce:d3:a0:78:56:da:1a:05:ad:18:c3:5f:98:4c:
                    2d:f2:a3:62:aa:25:41:a9:e5:73:41:19:10:35:ad:
                    d0:ae:55:a6:8d:67:b1:fb:b9:c2:9b:9f:aa:50:a0:
                    10:6f:73:de:94:c0:3a:10:e8:d4:f3:18:33:53:dc:
                    24:c2:f6:f4:fd:01:13:68:9c:e3:5b:b0:91:e7:f2:
                    58:d4:f8:5c:b5:64:9e:b8:cc:92:69:08:4d:65:d8:
                    b8:f9:13:d3:7b:18:8d:5e:cc:1f:58:fb:6c:9a:78:
                    e1:b7:80:0c:79:91:91:ac:5e:dd:7c:84:ac:11:de:
                    c0:d9:ac:7d:59:74:04:e7:ed:f2:83:54:56:cb:38:
                    9c:6b:5b:49:17:82:95:3a:96:09:f0:99:15:45:9f:
                    c8:ec:12:97:de:4b:ec:8e:ab:67:37:6a:0d:ee:0c:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:AA:6E:AF:5E:5C:A8:32:E9:43:E7:68:7D:62:41:01:CD:A2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/5c388c98-e698-3634-a1c7-a223e82c1398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:77:2b:cf:6e:16:83:b8:06:7f:99:01:8f:68:51:00:97:06:
         0e:67:f5:1f:d5:b0:8a:7a:e6:f4:72:c0:a0:25:3e:e0:90:ea:
         28:d4:2e:b2:fc:3a:6e:b0:dc:ae:9d:e3:1c:09:89:46:10:bd:
         7a:14:13:ef:8e:34:9b:d7:f8:5b:a1:c2:6f:3b:72:a7:da:78:
         b1:60:6e:f3:ab:ab:69:1c:10:e9:84:fb:96:3c:6a:e9:18:f3:
         10:57:c4:43:ee:1b:0b:b0:88:e6:52:1a:8f:e3:65:d8:9c:75:
         48:b0:f8:bd:2c:b8:d1:cb:12:72:c5:f4:64:0b:1f:c8:98:b8:
         ab:6e:3a:8c:cb:00:3c:bc:7c:38:ac:b3:0e:03:4d:43:72:7e:
         7b:c2:ec:5a:72:e2:48:23:14:21:de:8a:c6:41:de:ce:25:c1:
         96:f2:1f:3a:19:33:c1:a2:7f:65:6a:21:60:d5:6c:4a:aa:df:
         87:c0:8e:de:ad:57:31:64:93:b6:da:2f:f9:de:b4:ee:0c:9e:
         7d:f1:50:28:0b:3b:44:60:1b:00:23:98:40:1d:4d:5a:a1:9f:
         86:a5:02:2d:82:35:1b:82:d1:c0:a7:6d:1a:63:9f:a5:ef:45:
         47:d6:04:e5:64:dd:5e:fb:eb:2a:10:99:80:7e:f6:66:6a:d6:
         32:30:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org