Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/067c0ed7-e6ae-3167-a83d-0255157aa02b.roa
File:                     067c0ed7-e6ae-3167-a83d-0255157aa02b.roa (raw, json)
Hash identifier:          Le0YcPptm/PPfmxEm7FDHOn3rjDLQ072y8CZrsHhft8=
Subject key identifier:   F5:50:71:FA:54:BA:D8:6D:88:FA:2F:B3:54:7A:42:D9:6A:16:0D:F8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848116FB2D766C641BC7A841C18
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/067c0ed7-e6ae-3167-a83d-0255157aa02b.roa
Signing time:             Mon 02 Dec 2024 02:00:40 +0000
ROA not before:           Mon 02 Dec 2024 02:00:40 +0000
ROA not after:            Sun 02 Mar 2025 02:00:40 +0000
asID:                     46697
IP address blocks:        50.144.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:11:6f:b2:d7:66:c6:41:bc:7a:84:1c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Dec  2 02:00:40 2024 GMT
            Not After : Mar  2 02:00:40 2025 GMT
        Subject: CN=232656be-a39c-4594-a7ed-5bf07f260911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:37:de:aa:ff:2f:3f:27:93:f3:11:1a:69:
                    03:e7:66:5f:9f:07:e3:fc:ed:d4:e3:ee:a4:c7:dc:
                    81:f2:bf:1d:df:71:12:78:7a:16:11:3c:12:de:43:
                    f4:99:a3:b9:71:f6:59:1c:47:59:8f:f1:e0:f2:62:
                    57:6c:00:fc:cf:27:62:6c:82:19:d8:03:8d:ef:6a:
                    39:5b:f8:9a:43:2c:bf:cd:18:4f:61:27:90:3a:9c:
                    d6:8c:3e:41:ed:97:f0:e7:f5:77:89:83:ff:91:04:
                    2a:59:73:fc:e3:cc:a1:ff:ce:ab:c6:aa:68:28:f9:
                    7d:d9:93:95:34:c4:ba:0c:64:c0:94:32:4a:53:06:
                    a8:0e:ff:29:83:a5:3c:91:c2:d1:76:b9:e9:b1:6e:
                    b1:f2:5c:8c:66:50:96:d8:de:63:8a:38:85:9d:40:
                    89:7d:37:c7:3c:f1:f8:35:f5:02:b5:0a:bc:53:3a:
                    b9:ad:2b:3b:81:a7:f6:8c:84:50:5a:e5:12:d6:a6:
                    e4:b3:aa:33:b2:ad:e9:b0:03:14:b2:ec:59:63:1c:
                    d6:d0:33:e2:85:8a:b1:4e:7e:d5:21:b5:3a:1e:ef:
                    dc:3a:22:9b:fc:d3:c8:59:d2:46:32:44:52:35:1a:
                    54:62:84:b2:98:f5:3b:ca:2b:a4:c6:1b:33:a9:96:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:71:FA:54:BA:D8:6D:88:FA:2F:B3:54:7A:42:D9:6A:16:0D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/067c0ed7-e6ae-3167-a83d-0255157aa02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.144.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:55:57:cc:7b:2b:bf:79:1f:f8:78:28:57:ff:cf:61:da:aa:
         49:e3:be:20:e1:3e:8b:4c:ec:73:20:22:0e:19:67:3a:f0:7b:
         47:4e:e8:63:40:c5:d5:c5:6b:df:1f:69:2f:a2:ca:b4:8e:b9:
         04:58:aa:b0:7b:c7:a3:ab:cd:e2:d3:87:2a:c3:8a:40:d2:94:
         ac:f6:3a:be:19:6b:e2:26:6c:5e:9d:94:79:04:7a:8d:17:fa:
         8a:4f:d2:d9:d0:3e:46:9a:2d:d0:1c:f5:b8:4c:d8:e7:7d:19:
         f0:1e:52:67:d3:ce:27:18:e7:5d:56:ca:10:15:94:59:01:a4:
         9b:91:ad:9a:77:2a:6d:11:fa:2e:17:0e:9a:77:d6:3f:39:8d:
         93:05:c7:49:47:4d:2d:01:61:ed:40:96:6a:80:88:fe:91:ee:
         16:02:2b:21:bf:34:8a:43:51:28:80:07:7f:8f:68:d7:ff:84:
         53:37:41:35:83:e2:54:5f:00:0c:07:ab:98:ed:23:67:28:3e:
         cc:67:82:af:06:44:3c:e0:40:10:d3:05:9a:53:73:a5:5c:b9:
         1d:25:66:d5:2a:77:d6:19:8b:54:b4:cd:30:d4:1f:1a:ee:f6:
         2d:4f:ce:7c:0a:c8:ca:2d:0b:86:01:04:fe:a1:01:be:54:78:
         aa:93:fb:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7LXZsZBvHqEHBgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk
MjMyNjU2YmUtYTM5Yy00NTk0LWE3ZWQtNWJmMDdmMjYwOTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4A33qr/Lz8nk/MRGmkD52Zfnwfj/O3U4+6k
x9yB8r8d33ESeHoWETwS3kP0maO5cfZZHEdZj/Hg8mJXbAD8zydibIIZ2AON72o5
W/iaQyy/zRhPYSeQOpzWjD5B7Zfw5/V3iYP/kQQqWXP848yh/86rxqpoKPl92ZOV
NMS6DGTAlDJKUwaoDv8pg6U8kcLRdrnpsW6x8lyMZlCW2N5jijiFnUCJfTfHPPH4
NfUCtQq8Uzq5rSs7gaf2jIRQWuUS1qbks6ozsq3psAMUsuxZYxzW0DPihYqxTn7V
IbU6Hu/cOiKb/NPIWdJGMkRSNRpUYoSymPU7yiukxhszqZYvOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPVQcfpUuthtiPovs1R6QtlqFg34MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY3YzBlZDctZTZhZS0z
MTY3LWE4M2QtMDI1NTE1N2FhMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMpBtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJVV8x7K795H/h4KFf/z2HaqknjviDhPotM7HMgIg4ZZzrwe0dO6GNA
xdXFa98faS+iyrSOuQRYqrB7x6OrzeLThyrDikDSlKz2Or4Za+ImbF6dlHkEeo0X
+opP0tnQPkaaLdAc9bhM2Od9GfAeUmfTzicY511WyhAVlFkBpJuRrZp3Km0R+i4X
Dpp31j85jZMFx0lHTS0BYe1AlmqAiP6R7hYCKyG/NIpDUSiAB3+PaNf/hFM3QTWD
4lRfAAwHq5jtI2coPsxngq8GRDzgQBDTBZpTc6VcuR0lZtUqd9YZi1S0zTDUHxru
9i1PznwKyMotC4YBBP6hAb5UeKqT+4c=
-----END CERTIFICATE-----
Generated at Sun Dec 22 03:33:33 2024 by rpki-client on console-fra.rpki-client.org