Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
File:                     ea2f508b-c908-363a-83c1-c21d843b61c0.roa (raw, json)
Hash identifier:          r1MGuL3XoLOG0uPq3UcpSVtmKpegIF8nH+tR6ssqJyQ=
Subject key identifier:   EE:5E:59:0B:94:2D:B9:2E:9F:67:29:C6:63:28:EC:96:87:BB:86:2F
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844E93A9BA7AAB3E5A0860C9400
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa
Signing time:             Fri 16 Feb 2024 14:00:29 +0000
ROA not before:           Fri 16 Feb 2024 14:00:29 +0000
ROA not after:            Thu 16 May 2024 13:00:29 +0000
asID:                     29802
IP address blocks:        23.92.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e9:3a:9b:a7:aa:b3:e5:a0:86:0c:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 16 14:00:29 2024 GMT
            Not After : May 16 13:00:29 2024 GMT
        Subject: CN=721039dc-bb79-4542-b11f-a9fd11b5c298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:40:3b:73:29:75:90:af:d1:5f:be:c7:b4:
                    26:15:cd:12:16:c0:fc:15:65:de:df:7d:58:b2:c3:
                    12:52:e6:c2:68:a2:96:26:96:40:a5:96:c7:4d:3a:
                    1e:1a:d1:8c:d4:9f:6b:a1:d4:be:c8:a5:cc:f4:50:
                    94:de:a1:de:3f:2a:a3:f1:75:bb:dd:f7:7e:95:45:
                    e2:30:1e:b3:49:cf:45:7f:d5:77:c6:49:24:ba:c6:
                    28:8d:3e:62:41:6c:9b:02:01:e2:e2:2e:8b:d6:95:
                    24:5a:2a:76:e7:e6:6c:9b:62:f4:aa:e3:08:ef:f1:
                    25:53:e2:7f:f3:e8:96:39:41:e9:24:37:40:d3:b8:
                    1c:3b:c8:7e:a3:f4:ee:05:25:9a:5a:40:9e:1e:0f:
                    f5:e3:e9:e3:7b:9a:6d:a3:d9:d9:66:db:e3:60:fa:
                    28:36:92:67:96:9b:98:ed:30:6e:e9:0a:11:8d:a4:
                    dc:52:73:dc:f2:fb:51:9a:c8:7f:56:7d:e3:c3:12:
                    1a:83:8e:0f:4c:e5:0a:c7:2c:c0:20:5a:7c:75:e2:
                    d7:f9:87:5e:73:9c:d2:c3:eb:26:46:b9:95:7e:d1:
                    f7:27:a9:47:7f:b6:7c:a5:91:9a:fd:0f:0b:3a:54:
                    96:4e:01:e6:84:a1:bc:e4:21:78:6b:e3:f0:ae:35:
                    91:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5E:59:0B:94:2D:B9:2E:9F:67:29:C6:63:28:EC:96:87:BB:86:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/ea2f508b-c908-363a-83c1-c21d843b61c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:28:2c:14:bf:e5:c9:30:7f:0d:e8:f8:79:c3:47:94:af:
         21:0d:09:da:f3:e3:00:c4:fb:03:42:d7:c8:c5:3f:73:8d:5d:
         b2:3a:37:76:7d:53:4e:08:22:21:31:e1:d9:dc:19:01:b4:9a:
         79:cb:ce:ad:60:98:26:7d:a5:e5:59:3d:3b:78:10:cb:9a:a5:
         26:5b:1d:a7:bf:19:b5:3e:61:77:a4:d0:fe:d7:ab:31:2b:bd:
         bd:15:5b:e1:32:55:b3:d2:9c:0f:34:51:8b:ad:3a:af:47:3e:
         72:90:62:fa:d7:07:62:33:f4:c7:09:45:86:38:93:5e:30:37:
         5a:1d:e9:7b:af:f9:df:7a:23:f4:59:bc:24:cc:a5:7d:d4:cb:
         65:12:0b:44:3d:35:95:fa:8a:7d:77:c8:7d:e1:57:85:e1:ec:
         50:3b:0d:cf:b7:d5:8e:f8:00:76:df:0e:eb:ab:8b:d1:0e:ab:
         01:ae:2b:d2:42:1a:f0:e6:e1:5b:2f:d1:44:a1:d7:07:99:9f:
         00:36:0a:1d:da:ed:9e:f1:1e:5e:9c:73:96:fd:95:9e:c7:9a:
         60:82:04:86:d3:c3:42:06:bb:27:90:01:f4:f3:e2:8a:1f:15:
         8f:76:b4:7e:64:85:9a:a6:86:b3:3f:3e:e5:c5:8e:e6:93:5d:
         d7:90:1f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:00:02 2024 by rpki-client on console-fra.rpki-client.org