Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33313c96-176f-3aa5-9478-de28d4a49728.roa
File:                     33313c96-176f-3aa5-9478-de28d4a49728.roa (raw, json)
Hash identifier:          PAAbhYVANvcSqsg9uoW6hQ+OoqckGAXjrHatxpIy31c=
Subject key identifier:   EA:E8:C0:7E:0E:1A:95:8C:00:F0:E2:32:2E:1A:86:47:8A:A3:46:27
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF815C8C58F52E102618580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33313c96-176f-3aa5-9478-de28d4a49728.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33659
IP address blocks:        50.192.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f8:15:c8:c5:8f:52:e1:02:61:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=d7ad987e-3f51-463f-9f39-9e4200a2893a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:9c:08:14:5c:23:60:2e:78:c4:b6:86:d7:
                    8f:16:00:c4:79:d7:c8:f5:5f:10:bf:9e:a5:e9:53:
                    55:74:cd:1a:b2:13:e5:aa:d2:62:e8:c8:55:37:80:
                    e4:56:2b:e9:04:85:0f:b9:f2:ae:3b:39:e5:42:28:
                    29:72:ae:f9:57:63:06:e5:bc:5a:0b:e2:da:5a:ab:
                    1a:a2:6f:e3:24:ad:54:6f:25:f5:18:16:d7:5a:9e:
                    78:c0:f4:f8:00:14:07:9c:7c:8c:d0:8d:09:86:59:
                    27:87:9e:3a:33:f1:32:56:61:bf:44:ab:64:34:0d:
                    e8:68:23:71:4b:dd:0e:3e:46:18:07:fa:b6:e1:d0:
                    3b:d2:98:df:3b:7d:f4:65:c7:b1:f1:3b:80:50:8b:
                    f0:be:61:46:a4:66:64:5e:7c:3e:65:9e:da:a5:49:
                    64:51:2d:47:d0:32:51:aa:af:a0:29:9a:a5:29:4a:
                    e5:ce:64:4f:53:61:96:8e:15:9e:55:25:4e:f4:7a:
                    82:ef:ba:59:63:da:cc:15:e8:bb:1e:12:d9:f2:89:
                    57:9e:3c:24:0d:41:c9:75:fb:3f:be:57:97:e5:75:
                    f5:ae:15:ca:51:92:94:d0:30:be:39:79:1c:73:20:
                    d8:07:56:9e:75:cf:aa:5d:f5:14:f7:a7:a2:de:c1:
                    8d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E8:C0:7E:0E:1A:95:8C:00:F0:E2:32:2E:1A:86:47:8A:A3:46:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33313c96-176f-3aa5-9478-de28d4a49728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.192.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:21:5b:15:4e:6a:ee:07:32:53:61:5f:85:f7:33:f5:a6:
         72:0a:93:20:37:62:3c:ad:a3:b9:3d:82:c1:1d:e9:59:8e:a5:
         0a:0b:9f:ab:80:03:4b:d8:ac:c3:0e:98:95:c1:4a:d4:18:af:
         8f:e3:2f:a9:f7:55:b5:3a:21:9e:67:8a:b1:8e:c4:f9:45:d3:
         d5:36:67:ef:4d:ff:f2:31:0e:b4:88:87:02:43:67:d5:be:7d:
         9d:db:5d:72:da:90:b6:c8:93:b3:6c:b4:fe:79:72:81:c0:6b:
         b9:52:82:5c:91:4c:83:ec:22:bc:68:4e:e5:74:d3:b4:2d:41:
         20:95:b8:3d:97:14:af:63:e1:8f:f8:bc:0c:9a:d2:81:35:5e:
         48:72:d3:dc:f6:d0:6a:1e:57:9a:b5:6f:15:08:bf:35:f8:f3:
         36:a7:6e:0a:f4:ed:b4:35:98:6b:5e:b8:fb:e0:f7:78:66:46:
         7d:e3:d5:01:e4:5e:82:61:f1:37:69:b6:73:02:d6:b3:05:8f:
         1d:4d:17:9f:c6:41:ae:80:0e:75:cb:58:b9:04:3f:b3:0e:42:
         f2:cb:54:1c:1c:e4:c6:60:44:2d:7a:90:50:db:57:1a:4e:02:
         68:54:5b:16:ed:38:2f:ea:4d:6f:46:e7:ac:89:44:3c:61:0c:
         f0:4e:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:52:28 2024 by rpki-client on console-ams.rpki-client.org