Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c43ffb6-5943-3d69-8285-a65fa5cd5c0a.roa
File:                     1c43ffb6-5943-3d69-8285-a65fa5cd5c0a.roa (raw, json)
Hash identifier:          hLPJLjzxlIulVr6rL1pqRXl8mtpL6m36hESjAnDUbVU=
Subject key identifier:   C7:CC:77:41:2C:FC:DC:5E:54:C5:C6:F7:D8:0D:4F:C4:20:A7:CB:52
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABAD139B334A31EAC9E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c43ffb6-5943-3d69-8285-a65fa5cd5c0a.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        50.254.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ad:13:9b:33:4a:31:ea:c9:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=3ff19d28-299b-49bb-bb0e-4218c68bbdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:92:9d:fc:7d:e5:c9:1a:5f:ef:19:ef:c1:
                    46:33:ba:1b:e6:6c:2a:a4:ed:cb:76:01:18:4f:e5:
                    9d:52:bc:51:23:84:a6:31:0b:f2:36:87:b3:d7:f4:
                    15:6a:b3:af:35:42:2f:a1:ac:85:20:79:0e:cc:b7:
                    90:7d:aa:6e:aa:10:21:e2:11:6b:31:2c:ef:c8:32:
                    30:ad:0e:5e:fe:23:71:37:f4:c0:0e:c7:5a:a3:cc:
                    57:13:59:0f:41:ca:82:8c:66:3f:6a:76:cf:3a:98:
                    02:ee:77:7f:38:db:d6:9e:e3:73:9e:0c:07:9c:80:
                    9e:f8:ca:93:ae:ca:18:d5:80:bf:25:54:54:25:c4:
                    34:7b:c3:6b:09:e1:20:bc:fa:71:b3:e0:4e:d8:b3:
                    68:94:51:84:f8:6d:d5:54:1b:68:1f:39:73:9f:70:
                    59:2b:17:62:ed:2a:34:ff:08:af:72:86:b0:d7:54:
                    16:70:24:6d:68:63:95:7b:1b:33:6b:95:fc:d5:6c:
                    15:11:3a:3d:7f:7c:6d:2b:72:78:da:c0:bf:9b:35:
                    98:a6:10:0a:04:95:78:fa:e0:ea:aa:53:51:78:47:
                    ad:5e:3b:61:1d:c7:4a:b8:fd:cf:a4:ca:be:80:06:
                    e7:75:06:d7:fb:06:d5:37:02:65:de:61:4f:76:cc:
                    87:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:77:41:2C:FC:DC:5E:54:C5:C6:F7:D8:0D:4F:C4:20:A7:CB:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c43ffb6-5943-3d69-8285-a65fa5cd5c0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.254.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:54:ab:bb:3c:78:6f:b8:c3:7c:ad:40:ae:81:67:71:44:
         57:00:37:6c:58:86:1b:11:b9:3b:ae:40:a7:8d:35:5b:0c:99:
         2f:14:6f:f8:97:63:6f:af:31:6b:62:21:ec:4b:23:79:38:5f:
         72:a0:83:a4:b8:7d:19:5f:8f:0d:44:75:26:ef:91:2c:a3:1a:
         ee:d4:05:a8:a7:3d:88:ec:ff:6d:cd:b7:f9:06:ac:e9:84:5a:
         fb:04:a9:7c:0d:8d:54:a4:40:bb:7d:36:93:84:d7:7d:12:e9:
         39:9f:1f:6a:a5:fe:d5:2d:8e:79:5b:97:14:af:eb:e1:38:0d:
         46:32:38:d2:8b:6e:c3:e2:38:a1:94:c4:89:69:a1:d6:b1:ff:
         66:5d:03:74:72:2e:81:c5:fa:19:15:24:f0:a3:bd:ac:e3:44:
         18:ab:69:d7:a5:4b:67:4e:42:1c:23:4e:1d:50:f5:2b:cc:5f:
         a7:d2:34:ff:2f:a1:b2:dc:92:97:f8:96:9e:45:d1:d4:90:11:
         5d:ab:14:eb:27:11:cc:a4:ab:8c:09:d7:95:a8:8e:80:4d:4d:
         86:2a:71:f1:3e:f2:c4:63:1c:aa:31:76:a0:87:26:1d:d0:d9:
         7f:bc:7b:01:d1:db:5f:e9:9c:84:cf:30:72:0e:b6:92:06:46:
         21:35:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:14:29 2024 by rpki-client on console-ams.rpki-client.org