Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21c49f40-df03-31e9-93dd-d0d17135701a.roa
File:                     21c49f40-df03-31e9-93dd-d0d17135701a.roa (raw, json)
Hash identifier:          jpqggvUWGpw89eV7PPpYeSkC2fQUcjvraxGkfS5lRKo=
Subject key identifier:   62:89:4C:3E:6F:51:BC:72:F7:E4:C1:5F:61:B4:BB:74:9E:E2:B7:9F
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584556B2F4835D1260FB8DB48280
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21c49f40-df03-31e9-93dd-d0d17135701a.roa
Signing time:             Mon 25 Mar 2024 12:00:00 +0000
ROA not before:           Mon 25 Mar 2024 12:00:00 +0000
ROA not after:            Tue 25 Jun 2024 04:00:00 +0000
asID:                     577
IP address blocks:        50.100.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:56:b2:f4:83:5d:12:60:fb:8d:b4:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar 25 12:00:00 2024 GMT
            Not After : Jun 25 04:00:00 2024 GMT
        Subject: CN=80913adc-2bbd-4bfb-9080-df2e541e92c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:ef:89:82:c5:4c:79:bd:11:c8:ec:9d:13:
                    bc:47:3a:81:4b:9d:15:22:f1:62:81:27:82:2c:1f:
                    08:07:31:db:16:af:0d:02:42:22:ea:4f:25:bf:2b:
                    5e:a7:dc:3e:70:81:e4:30:6f:6f:9d:67:2c:9d:c2:
                    38:1b:3b:f6:ac:9a:34:c3:06:65:e4:50:08:42:f8:
                    72:b3:c7:8f:5a:8a:a7:5e:b3:00:aa:fd:82:db:90:
                    9b:44:c2:15:d4:8a:99:77:d0:50:9b:47:28:42:c7:
                    0f:88:1c:5a:25:16:a2:66:75:bb:02:34:39:63:67:
                    a9:40:a9:3a:0b:29:4a:08:82:ee:79:a9:f2:1f:49:
                    5d:c2:e9:52:0f:34:5f:12:b4:c4:13:06:d2:49:00:
                    bd:c8:25:66:58:ff:06:60:80:b1:27:33:5e:62:8d:
                    8f:3c:c3:6c:08:43:66:f0:aa:c4:9f:d1:b5:e4:be:
                    80:49:f5:9a:52:4f:bf:25:87:4e:bd:9c:0d:30:6e:
                    98:b5:b4:09:06:c0:31:4c:7a:99:b9:55:6d:1a:72:
                    b5:6c:46:59:c8:db:c7:cb:13:cb:c5:d4:b2:56:65:
                    06:09:c2:ac:10:41:a1:36:35:f9:ab:a3:ab:08:6a:
                    11:17:83:9c:2a:c5:e0:71:58:0f:04:33:bb:5d:cd:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:4C:3E:6F:51:BC:72:F7:E4:C1:5F:61:B4:BB:74:9E:E2:B7:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/21c49f40-df03-31e9-93dd-d0d17135701a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.100.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:aa:54:d6:fe:d6:17:57:86:bf:aa:78:be:c8:fc:9d:17:
         12:1f:30:94:17:26:d7:5b:7d:14:2c:73:e5:f5:f6:fd:9e:70:
         a6:a7:2c:48:0f:11:10:db:84:0d:75:71:45:8e:b9:50:27:66:
         33:4d:16:b1:a8:94:f4:59:46:b9:06:52:44:db:bd:a6:12:fb:
         ab:66:c1:f0:fd:0e:74:f8:02:dd:af:b9:69:11:d4:2e:f3:59:
         e7:e3:97:44:2e:2c:67:6a:28:ad:b4:8f:a4:f0:64:4f:e9:6d:
         cb:78:b3:e9:10:d8:45:b2:16:32:7f:f6:3e:45:aa:b6:eb:0e:
         55:ff:cf:cd:df:28:30:cd:47:b1:87:a8:62:02:f0:4d:1a:c0:
         41:a1:2a:da:04:2a:db:7f:09:e1:3e:ce:7d:f7:53:8a:63:1b:
         bd:32:c9:6b:9f:93:a7:9d:6f:6f:47:69:07:f7:e8:9e:ab:0a:
         b5:57:c2:6a:b9:30:2d:01:34:98:27:ba:bf:12:21:70:9b:f5:
         80:7d:82:2f:cb:c1:9e:6b:f3:94:68:7c:6e:ee:f0:76:4b:68:
         03:cb:57:70:92:c0:40:e6:24:1d:39:f3:f4:89:cb:22:45:65:
         7d:cc:29:8c:24:83:b9:26:fc:b7:08:b7:d5:fe:12:4f:12:83:
         a2:57:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:21 2024 by rpki-client on console-fra.rpki-client.org