Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/91183d3f-3174-3b9c-bc6f-9c7502746c63.roa
File:                     91183d3f-3174-3b9c-bc6f-9c7502746c63.roa (raw, json)
Hash identifier:          I+zVN1ztvBk+EqfO2Qchq47xYPhpO9t//XJXVg81oPQ=
Subject key identifier:   C3:B8:20:A2:7A:C1:01:5A:4F:A9:AA:84:69:07:98:08:F6:54:5F:23
Certificate issuer:       /CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7
Certificate serial:       010D0C9F43285844E23FD9F9169C91AB35CA68D0
Authority key identifier: 53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/91183d3f-3174-3b9c-bc6f-9c7502746c63.roa
Signing time:             Wed 14 Feb 2024 02:00:25 +0000
ROA not before:           Wed 14 Feb 2024 02:00:25 +0000
ROA not after:            Tue 14 May 2024 01:00:25 +0000
asID:                     16509
IP address blocks:        198.212.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:3f:d9:f9:16:9c:91:ab:35:ca:68:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7
        Validity
            Not Before: Feb 14 02:00:25 2024 GMT
            Not After : May 14 01:00:25 2024 GMT
        Subject: CN=1dd9eca7-6ff6-4375-a960-efe2ab2f2597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:97:ce:2f:b4:5d:58:99:27:18:af:c6:de:
                    fb:eb:04:b8:fd:fc:9f:cc:5d:42:87:4f:f4:da:5f:
                    2a:1e:30:57:71:41:44:27:64:c7:d1:4f:a2:14:2d:
                    f5:6b:02:c3:b6:90:41:2d:1d:ae:2d:c4:48:e3:29:
                    37:12:2a:ae:6b:40:00:a5:00:3d:d4:4f:cb:08:f3:
                    a9:92:99:6d:08:45:0f:2a:f8:d5:21:9e:91:89:1b:
                    92:70:13:13:ce:8a:00:ec:ca:6a:36:74:61:79:0b:
                    df:e8:d8:1a:3e:06:b2:e6:84:91:0b:b3:ff:ed:3e:
                    41:53:9b:77:43:ba:06:a6:8a:1d:1b:d8:36:50:55:
                    5d:80:83:65:10:ef:91:75:ac:29:c2:4a:b2:a2:90:
                    06:3b:f6:10:98:2c:a1:09:7e:6a:2f:5e:31:a2:85:
                    80:e4:63:55:aa:d2:3f:6e:a5:ab:cc:6e:d7:16:34:
                    35:43:b4:43:98:b6:46:4b:5b:13:2c:3f:e2:a3:22:
                    ef:2c:af:a2:e3:98:7f:04:df:9e:c4:39:20:3e:28:
                    44:a0:a9:2a:58:ef:b7:16:07:c8:ff:8c:8b:a3:26:
                    eb:00:d4:67:85:a2:1a:82:71:4a:50:4d:64:f3:f0:
                    67:f1:2d:fc:68:5d:d1:86:82:e1:f6:01:3c:6c:ad:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B8:20:A2:7A:C1:01:5A:4F:A9:AA:84:69:07:98:08:F6:54:5F:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/91183d3f-3174-3b9c-bc6f-9c7502746c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.crl

            X509v3 Authority Key Identifier:
                keyid:53:94:6A:20:C8:68:7F:32:21:E1:A0:E3:FA:9C:32:E5:87:4A:61:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/49c0bbbd-fa28-4c84-a77b-58f6d8e9f0a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:2f:76:ac:8e:a9:5f:cd:77:8a:35:71:f4:0c:fe:80:3c:
         8d:60:46:59:24:a3:87:50:fa:d2:f3:d9:8f:9e:9d:ee:36:da:
         61:a3:72:73:dc:30:db:ca:ba:44:4a:c2:7f:a8:6b:cc:9d:b0:
         4a:5a:27:6b:93:a3:11:74:39:90:bf:4c:ef:6e:c4:10:8a:fc:
         51:4d:af:f1:1d:09:43:6b:1c:0e:3c:a1:90:73:f3:0c:65:67:
         de:ee:be:64:a3:7b:cf:d5:ae:3f:71:5a:f3:7e:36:8c:98:de:
         6f:0c:a9:a9:bd:2a:3e:b6:5e:e8:3d:bc:22:a4:0f:66:0b:1e:
         77:1f:03:7c:23:6f:14:a8:42:91:ed:48:df:ce:20:4b:8f:91:
         96:f5:23:08:bb:83:9c:fc:ab:9c:58:94:a9:42:fd:9f:14:e5:
         68:a7:94:6c:c1:42:a4:14:73:27:8b:c1:66:0e:28:52:ca:ac:
         df:e4:8f:f8:70:46:47:ff:8d:e4:8e:0e:22:a0:03:80:04:28:
         16:49:98:5f:d4:1f:80:b6:fd:c9:ad:b3:5c:77:0a:15:66:9c:
         d3:12:72:55:93:89:97:37:8f:f6:94:2f:41:33:d0:55:12:4c:
         2c:cd:38:23:a4:ce:e4:39:bf:5c:1b:66:c3:fd:81:5c:b3:87:
         ce:89:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:06:07 2024 by rpki-client on console-fra.rpki-client.org