Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2aef3248-7c40-314e-ae9a-5417edd08137.roa
File:                     2aef3248-7c40-314e-ae9a-5417edd08137.roa (raw, json)
Hash identifier:          ysOgS8IzLWF+6cwvgyABb5UBqHx2QQe5x67NBdHb1yA=
Subject key identifier:   4A:A6:28:E6:27:DD:7D:86:1D:1A:C7:A0:D2:6E:C3:99:6B:2E:BE:AF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858453CDD5854F4C7812C1D1078C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2aef3248-7c40-314e-ae9a-5417edd08137.roa
Signing time:             Sun 17 Mar 2024 13:00:30 +0000
ROA not before:           Sun 17 Mar 2024 13:00:30 +0000
ROA not after:            Sat 15 Jun 2024 13:00:30 +0000
asID:                     852
IP address blocks:        50.92.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3c:dd:58:54:f4:c7:81:2c:1d:10:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 17 13:00:30 2024 GMT
            Not After : Jun 15 13:00:30 2024 GMT
        Subject: CN=5cc7604a-6a04-458f-810a-340d65416c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:cd:09:99:f7:e7:9e:b4:23:47:e5:23:83:
                    4a:90:79:17:33:f6:4d:50:f3:9c:70:f1:fd:5e:b3:
                    80:d5:81:84:4a:dc:4b:97:90:9f:14:8a:23:8a:57:
                    61:51:a3:5b:70:92:43:52:55:45:04:a3:ad:a8:f0:
                    4b:fa:16:8d:2b:9d:0b:86:45:bf:09:72:22:61:99:
                    b4:15:89:d7:01:b9:a4:28:79:d1:82:de:9e:ef:6e:
                    c2:67:89:06:63:81:84:ee:86:70:b4:dc:22:9a:1f:
                    cf:0a:40:8e:2c:fc:a4:b4:46:38:6c:4b:df:2e:79:
                    ef:b6:36:01:03:21:45:31:bc:67:8e:aa:95:9b:13:
                    09:88:82:77:c5:57:65:c1:79:b4:8c:e5:47:f7:28:
                    41:04:95:80:b9:80:f6:01:2d:db:10:3c:37:23:06:
                    8f:d6:6d:e6:19:51:4f:0a:90:ff:e1:6d:e1:96:3d:
                    2e:27:7f:cf:7c:c5:51:aa:01:36:fa:59:23:85:91:
                    74:f3:ac:a7:03:02:65:88:11:d8:ba:cc:61:10:1d:
                    50:6f:fe:e9:e1:c6:cc:2f:08:42:dc:bb:a8:73:30:
                    2c:ed:74:97:ac:4a:f8:b6:6e:9b:42:9e:c8:dc:58:
                    aa:13:ea:62:d3:7c:d1:9a:53:b3:ae:e1:ed:33:c2:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A6:28:E6:27:DD:7D:86:1D:1A:C7:A0:D2:6E:C3:99:6B:2E:BE:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2aef3248-7c40-314e-ae9a-5417edd08137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.92.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:bd:18:96:18:54:2c:aa:3a:e1:ab:e5:fa:a6:08:dd:79:00:
         e7:d0:fb:ad:f0:05:e2:9d:9a:72:6b:a4:cc:c4:73:ad:35:30:
         35:1d:40:7d:8a:7d:71:1d:c3:05:c2:d6:12:f7:d0:56:85:80:
         87:a7:81:42:a5:40:67:e5:99:23:5b:2b:49:8d:b5:23:89:35:
         34:e1:de:1f:52:4e:6c:f3:28:24:dd:5b:fe:54:5c:2f:8d:95:
         a1:ec:0c:61:88:27:78:9f:6b:b1:2d:03:9e:9d:99:64:6a:8a:
         e8:d8:2f:41:eb:76:4e:ae:f7:d5:6d:4b:14:63:de:9d:fb:bb:
         d8:3f:5c:b6:f6:05:09:0c:e2:88:66:61:00:41:49:de:b8:95:
         59:ad:ed:89:7c:6a:9e:b4:c1:9b:b2:8f:5f:79:57:58:50:f6:
         44:3f:84:a5:53:c1:59:fa:34:02:80:87:e2:12:6d:1a:eb:08:
         c9:7c:8d:c4:28:cd:cf:1f:dd:ec:a0:ad:28:6f:6a:de:1d:38:
         be:33:7c:67:aa:d5:ab:ad:6e:3a:96:d5:4c:d0:c6:b7:50:e7:
         0b:a7:08:e2:04:43:bb:b0:22:fc:13:df:13:f2:5c:00:6d:75:
         74:c4:dd:eb:e0:5c:8c:63:3e:c9:15:c8:17:4d:f9:7c:71:1f:
         6d:8c:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:55:02 2024 by rpki-client on console-fra.rpki-client.org