Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa
File:                     7f634129-9df2-33a9-9d13-537681daf704.roa (raw, json)
Hash identifier:          Gm6Gtw97jreRDShM191PMD9N3QgYwWiXAYJpPst+1+E=
Subject key identifier:   0D:77:8E:23:AC:7D:1B:EE:5C:B9:30:88:6E:2F:D1:E3:82:BF:30:36
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844E0DA88252188FFCABC967B80
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa
Signing time:             Tue 13 Feb 2024 14:00:29 +0000
ROA not before:           Tue 13 Feb 2024 14:00:29 +0000
ROA not after:            Mon 13 May 2024 13:00:29 +0000
asID:                     29802
IP address blocks:        104.156.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e0:da:88:25:21:88:ff:ca:bc:96:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 13 14:00:29 2024 GMT
            Not After : May 13 13:00:29 2024 GMT
        Subject: CN=5dc8fd8a-2910-4afb-b6d7-9b0ad083037a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:45:37:bd:db:eb:a7:51:bf:f2:e5:80:d3:
                    f5:cf:48:9c:d5:e0:a0:fe:8a:8e:0a:99:b0:62:9d:
                    3b:94:19:ae:31:b7:41:6a:8d:6e:8e:49:44:74:8a:
                    16:1d:6f:65:ad:16:78:2f:64:90:18:2a:5e:bd:bb:
                    3a:a4:ab:a8:d9:55:17:1c:9f:8f:9c:e2:c5:e4:8c:
                    32:5b:8a:28:d9:be:29:8c:97:70:b0:2e:4b:65:5b:
                    4f:e9:0a:db:4b:ab:23:e5:84:ad:a4:e1:f4:0f:fb:
                    26:79:b1:82:03:53:f5:72:73:8b:89:c7:ef:c4:70:
                    0e:76:89:b9:09:88:e4:57:fe:10:5d:16:f0:5a:e7:
                    13:59:2d:fb:e2:18:b3:90:68:7f:8b:d0:2e:03:28:
                    23:4f:6e:98:24:45:8d:d6:99:39:91:bc:b5:4a:f0:
                    63:47:d4:83:39:32:ca:5f:2f:78:ad:2e:56:f2:6f:
                    c3:31:32:32:bd:1c:a0:84:99:7a:51:49:d0:d1:29:
                    9c:e3:bf:4e:0e:c9:85:47:f2:98:6b:f7:49:37:03:
                    42:cc:71:6d:94:18:c7:09:f4:d6:8d:ea:12:7f:20:
                    6c:5e:e5:47:f3:2c:08:b6:38:57:44:eb:0d:95:51:
                    53:c9:b2:06:7d:39:f2:30:54:3b:69:13:90:39:aa:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:8E:23:AC:7D:1B:EE:5C:B9:30:88:6E:2F:D1:E3:82:BF:30:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/7f634129-9df2-33a9-9d13-537681daf704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:62:fe:66:0a:78:13:4c:7c:f5:5d:29:d5:a5:6f:30:be:d8:
         eb:83:7f:a6:bd:fd:f9:25:06:63:87:26:4a:d3:3f:c0:29:5c:
         de:38:53:ed:fd:1b:e0:43:19:4e:83:f7:2b:d6:95:8d:c1:1a:
         2c:cc:4f:9a:98:c4:62:86:49:47:8a:15:d8:e9:1f:10:46:b4:
         86:5d:8b:be:a8:a2:10:54:1f:a9:72:06:cb:56:67:a4:93:85:
         4d:f8:32:ca:fa:af:53:4b:fc:77:ab:64:1d:46:50:3e:b8:31:
         60:f2:56:16:d6:ea:ad:e2:d8:e5:b3:2a:21:79:85:87:2c:a2:
         25:61:13:e0:cf:70:be:63:5c:e9:6a:b3:95:b0:3c:ab:50:62:
         be:c8:ae:1c:8f:6e:53:77:85:68:57:6b:8d:4e:17:30:93:da:
         1c:08:f2:db:31:9e:aa:56:51:58:20:46:d5:10:75:b6:18:84:
         d1:9b:87:19:f7:b2:52:51:ad:cb:14:e7:59:89:ea:bd:71:e1:
         e2:8c:13:0a:7c:37:f6:65:13:b7:b8:66:bb:15:03:bc:75:8d:
         a7:87:cc:fb:0e:44:dc:13:e8:2f:6d:a7:95:0e:a5:6d:fd:d6:
         bc:5c:69:bf:7f:e5:5b:d4:25:85:15:a4:02:0e:50:32:51:7b:
         4c:1b:f4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 02:22:48 2024 by rpki-client on console-fra.rpki-client.org