Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f9ff6a3d-bfe0-341a-88ea-cf798597f474.roa
File:                     f9ff6a3d-bfe0-341a-88ea-cf798597f474.roa (raw, json)
Hash identifier:          UceVN1wuh30hbvKyL4WNz0jVIm117ZfXGJ8docKigyk=
Subject key identifier:   8E:44:39:19:97:ED:D6:C6:62:05:B4:A6:06:BC:C0:D1:BE:CB:3B:3B
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F432858454D9D762D16DFEE9D283D1800
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f9ff6a3d-bfe0-341a-88ea-cf798597f474.roa
Signing time:             Sat 23 Mar 2024 13:00:32 +0000
ROA not before:           Sat 23 Mar 2024 13:00:32 +0000
ROA not after:            Fri 21 Jun 2024 13:00:32 +0000
asID:                     46606
IP address blocks:        50.6.128.0/17 maxlen: 24
                          69.49.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:9d:76:2d:16:df:ee:9d:28:3d:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Mar 23 13:00:32 2024 GMT
            Not After : Jun 21 13:00:32 2024 GMT
        Subject: CN=b9cb7d8c-9be5-4ce0-b3e5-0b689ec2494e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:88:82:e5:32:aa:a3:5f:18:b4:cd:6d:71:b9:
                    0c:7d:e5:b8:79:75:8e:51:91:c5:8c:73:1c:4b:32:
                    a7:2b:13:a5:40:63:6f:6f:4e:9d:72:e5:05:3b:8a:
                    e8:f8:c2:e5:7d:39:50:dc:d5:d9:85:97:27:69:c1:
                    b2:42:b1:ef:89:bf:9d:28:56:cb:d2:d4:92:4d:a2:
                    5c:8d:7d:b3:da:b9:d8:99:36:21:66:05:c1:c1:fc:
                    a1:03:1e:7f:a6:61:97:3e:74:e1:6a:c0:d3:34:cd:
                    a9:d3:b4:fc:25:18:bb:87:af:80:a3:64:bf:67:3c:
                    c0:67:23:ca:80:a8:e0:c5:c7:41:2c:ee:f6:2b:2d:
                    37:a9:65:fd:09:c1:3a:19:d3:54:9b:31:72:93:29:
                    78:2a:6c:76:17:c0:29:c1:39:6f:7d:9b:dd:79:d7:
                    75:ed:79:1b:b0:31:14:f3:51:a8:a0:c7:8e:e1:56:
                    ee:95:63:ee:74:49:ab:70:ad:30:b9:fc:3f:71:dc:
                    58:2d:8a:50:53:eb:57:f9:57:f5:78:a4:cd:67:1a:
                    3d:c5:55:7e:e3:bd:71:02:2d:77:05:cf:f9:bc:46:
                    6f:a9:75:11:ab:7b:40:e9:47:7d:e1:43:3a:f7:69:
                    c1:27:6d:03:4f:00:28:65:9a:5e:39:fa:2c:c5:5b:
                    d1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:44:39:19:97:ED:D6:C6:62:05:B4:A6:06:BC:C0:D1:BE:CB:3B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f9ff6a3d-bfe0-341a-88ea-cf798597f474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.128.0/17
                  69.49.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:93:70:ac:d0:56:14:fd:38:24:fa:02:a9:c9:fc:21:c6:
         fa:42:6d:33:66:f1:4e:3f:7a:c7:75:0d:41:e8:a9:02:75:e6:
         df:f8:2d:18:6c:03:0c:36:a6:c4:b1:47:b4:2a:40:37:60:a0:
         d2:e2:0e:5c:66:5c:7c:31:b0:0b:50:f3:fe:7a:84:04:c1:3e:
         64:a3:b3:7a:64:82:d4:d9:9a:5d:82:3e:4c:a4:9d:ff:96:ad:
         ae:a7:dd:d6:3d:f7:86:72:dd:41:76:b9:a4:dd:62:5a:d3:d1:
         2d:b1:fe:ef:ff:85:05:dc:aa:a8:63:8e:69:d0:b1:fc:7c:27:
         36:8c:a3:00:55:5c:e0:eb:f1:41:7c:41:41:ad:e6:e0:37:28:
         ba:9c:19:05:c7:f0:77:8d:2e:a8:b4:5b:9c:7b:fb:a1:56:13:
         a0:1c:d3:47:b1:79:c3:82:ce:99:cc:9c:f8:b1:c9:ea:b3:1c:
         98:2b:4e:96:47:cf:b6:fd:5f:17:eb:1f:cb:6c:46:41:1c:33:
         84:9d:56:98:9a:6e:9a:f0:ee:af:f0:c8:2a:d6:0f:22:ac:20:
         df:7a:18:41:ab:60:07:81:38:cd:4b:3e:b2:96:21:9e:1d:6b:
         2a:33:95:bb:36:76:d2:18:f6:91:1a:f9:22:67:9e:a2:52:93:
         30:a3:17:aa
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEVNnXYtFt/unSg9GAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI0MDMyMzEzMDAzMloXDTI0MDYyMTEzMDAzMlowLzEtMCsGA1UEAxMk
YjljYjdkOGMtOWJlNS00Y2UwLWIzZTUtMGI2ODllYzI0OTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYiC5TKqo18YtM1tcbkMfeW4eXWOUZHFjHMc
SzKnKxOlQGNvb06dcuUFO4ro+MLlfTlQ3NXZhZcnacGyQrHvib+dKFbL0tSSTaJc
jX2z2rnYmTYhZgXBwfyhAx5/pmGXPnThasDTNM2p07T8JRi7h6+Ao2S/ZzzAZyPK
gKjgxcdBLO72Ky03qWX9CcE6GdNUmzFykyl4Kmx2F8ApwTlvfZvdedd17XkbsDEU
81GooMeO4VbulWPudEmrcK0wufw/cdxYLYpQU+tX+Vf1eKTNZxo9xVV+471xAi13
Bc/5vEZvqXURq3tA6Ud94UM692nBJ20DTwAoZZpeOfosxVvRuQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFI5EORmX7dbGYgW0pga8wNG+yzs7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvZjlmZjZhM2QtYmZlMC0z
NDFhLTg4ZWEtY2Y3OTg1OTdmNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHMgaAAwQF
RTHgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJnvk3Cs0FYU/Tgk+gKpyfwhxvpCbTNm8U4/esd1DUHoqQJ1
5t/4LRhsAww2psSxR7QqQDdgoNLiDlxmXHwxsAtQ8/56hATBPmSjs3pkgtTZml2C
Pkyknf+Wra6n3dY994Zy3UF2uaTdYlrT0S2x/u//hQXcqqhjjmnQsfx8JzaMowBV
XODr8UF8QUGt5uA3KLqcGQXH8HeNLqi0W5x7+6FWE6Ac00execOCzpnMnPixyeqz
HJgrTpZHz7b9XxfrH8tsRkEcM4SdVpiabprw7q/wyCrWDyKsIN96GEGrYAeBOM1L
PrKWIZ4dayozlbs2dtIY9pEa+SJnnqJSkzCjF6o=
-----END CERTIFICATE-----
Generated at Wed May 8 21:05:07 2024 by rpki-client on console-fra.rpki-client.org