Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa
File:                     1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa (raw, json)
Hash identifier:          FijYDNCfcyMHZJqeGQe17NhZlqMljoWevkhNYZZ/2p0=
Subject key identifier:   42:15:27:E0:42:54:25:B6:BD:95:5F:15:0D:0F:DD:E3:F8:83:F9:CC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7ED0BD6A4C07347BE5180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33491
IP address blocks:        50.204.189.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Dec 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:ed:0b:d6:a4:c0:73:47:be:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=1181045d-912f-4cd0-b40d-5228cc8bf908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:11:73:07:ae:d8:c3:f0:b1:b8:f2:16:82:
                    72:0f:b9:b1:59:e6:25:30:6e:fb:7c:2f:b0:8e:fa:
                    40:d4:43:8a:ec:ec:e1:98:3f:6d:dd:5a:2c:aa:a1:
                    d4:af:d6:f0:53:ba:fc:62:ad:49:f4:79:61:5f:2c:
                    86:32:f3:9b:74:8e:d8:16:e1:71:40:a8:16:f4:ce:
                    57:e6:5e:37:f5:3b:88:62:32:92:56:b9:a7:50:00:
                    c3:3a:07:27:a9:71:15:41:22:1d:de:30:06:9f:3e:
                    4a:da:c6:6e:53:b0:62:e6:49:45:02:82:e8:d7:a5:
                    db:6e:51:43:ad:a5:e0:ce:df:61:ba:cc:e9:c3:37:
                    4a:97:a8:d4:ac:c2:0b:a1:a7:07:8a:49:eb:3b:90:
                    66:a7:af:3b:1c:37:75:af:91:78:bd:b6:21:52:3e:
                    e5:95:59:18:2e:2f:d6:ce:36:c9:1d:45:97:c7:f5:
                    7a:6e:71:f2:90:46:22:40:ac:6e:cb:e1:96:7f:73:
                    23:7e:50:3d:78:da:21:31:07:54:7f:20:76:da:9c:
                    cb:89:d4:58:c2:6d:50:91:f9:6b:12:39:4e:29:ac:
                    e6:a0:58:f6:0a:bb:d8:3b:94:5a:b9:4c:c8:0a:9a:
                    75:99:0e:37:51:54:74:68:b9:94:16:dc:34:41:52:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:27:E0:42:54:25:B6:BD:95:5F:15:0D:0F:DD:E3:F8:83:F9:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a18a8a9-2030-3fdb-bc82-24d9446dcc5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.204.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:a4:a1:8a:e6:6a:53:54:77:da:2b:0b:22:8d:ee:93:39:a6:
         46:13:4c:39:fe:0b:69:e7:a3:ff:13:08:0d:d1:04:79:61:24:
         47:1b:c4:3b:f5:bf:48:93:1c:1f:78:53:47:b8:da:c3:ad:f8:
         b2:e6:46:ab:78:2c:81:da:87:6c:68:1c:f5:e4:52:cf:92:fd:
         8f:2a:ca:a4:d2:61:e5:12:25:aa:e4:12:cf:99:c5:7e:3f:b8:
         f1:08:23:25:78:d3:df:f8:5d:03:1a:94:c9:da:a3:0a:a5:03:
         42:f1:a7:50:c3:4d:12:78:a7:f3:14:82:e7:7f:6e:1b:69:18:
         25:87:7b:48:47:2f:02:95:bd:8b:1f:e4:a9:f7:e2:05:87:f9:
         0f:71:17:40:99:82:56:47:4b:79:45:b5:16:0b:71:cb:ca:cb:
         5b:29:bb:b2:00:1e:6c:33:ac:a0:c8:2b:b2:44:bd:aa:90:05:
         df:84:c0:11:90:d3:6e:2e:6c:d3:32:43:08:d4:34:9b:29:33:
         e2:04:ec:3f:25:ae:0f:4b:8d:43:bd:9c:4f:14:de:7a:0f:5e:
         18:fb:23:a5:d6:87:ce:1d:43:53:e0:76:49:d5:ea:8a:89:12:
         a9:e5:6d:0e:f5:28:f6:be:56:04:6a:7e:af:8c:5e:ff:71:67:
         28:72:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 03:36:36 2024 by rpki-client on console-fra.rpki-client.org