Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa
File:                     f1647871-729e-3bdb-bc99-6773110329fd.roa (raw, json)
Hash identifier:          Hg58czU1FCNF/fAiRBt0TtVWRsbx94aphVNRHETGHWo=
Subject key identifier:   B8:2C:06:87:85:2C:EC:82:34:68:39:EC:F1:CE:A9:3E:8C:3D:F1:A4
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285844DF752C9D390AE4F33227E700
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa
Signing time:             Tue 13 Feb 2024 02:00:25 +0000
ROA not before:           Tue 13 Feb 2024 02:00:25 +0000
ROA not after:            Mon 13 May 2024 01:00:25 +0000
asID:                     29802
IP address blocks:        91.191.212.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:75:2c:9d:39:0a:e4:f3:32:27:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 13 02:00:25 2024 GMT
            Not After : May 13 01:00:25 2024 GMT
        Subject: CN=4d1ec940-65d8-4aef-a7ce-3bf6edbc5d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:3a:9c:12:32:8d:74:02:7b:5b:b5:2f:68:
                    e2:93:43:3b:4b:14:8a:5d:cc:90:89:f4:fc:03:a6:
                    fe:89:f2:bb:9f:27:d6:bc:8d:03:c2:b9:40:df:d8:
                    77:ad:ad:72:ce:37:7e:8d:a3:d5:88:67:ac:97:cb:
                    6e:b3:ca:7d:17:1a:3a:f8:16:e8:e7:07:67:14:75:
                    98:52:b8:21:a2:85:99:14:22:dd:83:f1:62:c6:70:
                    6c:b1:eb:0e:61:71:8e:62:f1:cb:49:c3:23:04:b6:
                    a2:2d:4c:2f:a9:b0:85:94:eb:af:14:47:d0:2b:a6:
                    c6:c4:63:08:2e:6c:cf:51:27:76:c1:39:02:67:5f:
                    d0:e7:2a:14:de:11:c8:8c:27:b1:ed:8f:00:6c:f8:
                    d2:78:71:92:80:7a:d7:e7:2f:f7:95:77:82:74:2c:
                    b8:1e:79:16:31:25:96:f0:2b:aa:19:96:db:20:5d:
                    84:f8:be:47:93:a4:d1:b6:e2:b7:0d:5e:b8:c2:2c:
                    1b:68:cc:07:24:63:94:6a:70:cc:1b:20:5a:ee:60:
                    7b:2b:6f:11:c2:cf:6f:43:b0:0d:f7:65:fb:ff:a5:
                    4f:75:18:2b:45:d8:a6:0a:85:76:cd:b3:24:44:59:
                    7d:d6:e3:71:f8:f7:8d:76:66:d5:e1:26:33:0e:d9:
                    79:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2C:06:87:85:2C:EC:82:34:68:39:EC:F1:CE:A9:3E:8C:3D:F1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/f1647871-729e-3bdb-bc99-6773110329fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.191.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:64:90:73:2d:ce:ee:3b:14:68:dd:5f:82:40:2b:bd:20:94:
         35:00:d2:20:d2:29:0e:0f:96:e7:6f:ac:5e:60:f0:f6:d6:86:
         90:20:61:e5:48:c5:f9:e0:30:d1:92:1d:7b:e7:94:98:c2:55:
         94:a1:bf:84:ad:14:8a:e8:63:2f:65:51:8c:99:92:a9:cf:e7:
         79:7a:52:6d:e8:2d:cc:86:fa:4c:ac:69:c3:92:77:be:ec:8f:
         f3:48:c4:68:ea:e2:67:36:de:32:c1:ac:bb:b3:9c:94:83:77:
         cb:9a:b9:fc:cb:ca:79:3a:ee:9d:01:83:11:03:8c:cf:77:15:
         e2:ca:e6:48:0f:b0:72:0c:bb:61:37:f3:b3:cb:45:e2:45:e2:
         12:f2:3b:e6:b4:cc:73:58:4e:b2:f9:04:6a:cc:71:77:22:62:
         ad:e9:9b:c3:71:80:42:94:26:c4:d0:f6:5f:19:22:10:64:95:
         08:3c:50:a4:14:d6:04:3c:b7:32:da:d6:8d:d4:5d:c8:a4:7a:
         7d:18:75:4b:fc:45:c9:be:b6:8a:4b:75:ad:e9:56:57:8c:dc:
         49:c7:d1:6b:fe:27:00:27:05:90:8c:1d:5f:4c:f9:b2:14:43:
         c5:73:5e:34:f9:f3:4b:df:f4:0b:67:82:f4:dd:53:21:0c:65:
         01:8d:aa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 16:12:01 2024 by rpki-client on console-fra.rpki-client.org