Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/342f7bfa-467a-3464-9a37-9b683fc0a18b.roa
File:                     342f7bfa-467a-3464-9a37-9b683fc0a18b.roa (raw, json)
Hash identifier:          oZX0xhluw/F0B4HolYTO6qEZsWvauYZwqhxGDClrh4M=
Subject key identifier:   4C:25:D7:E1:66:58:70:90:C1:C9:B6:C5:95:C1:3F:73:DC:7E:19:C3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC6F44F9918317D3882610
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/342f7bfa-467a-3464-9a37-9b683fc0a18b.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     393286
IP address blocks:        50.216.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:6f:44:f9:91:83:17:d3:88:26:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=b07505f8-5fc8-49ee-8d4f-dd99050078a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:22:95:96:ee:cd:4f:14:3b:36:4e:0c:74:
                    64:e7:f3:f1:c5:43:91:09:17:1c:0e:6b:0f:9d:a0:
                    b1:f7:91:79:ab:a7:2d:75:b1:4d:19:63:18:9e:6c:
                    de:9f:dc:ac:7a:89:e0:27:cf:f2:8b:2a:5a:d0:3f:
                    64:77:ce:30:0f:37:5c:9c:67:78:6c:07:d1:e2:e7:
                    d3:de:a5:4e:75:b9:48:ed:22:f6:16:5a:79:f3:5d:
                    c9:94:40:5a:95:55:95:fe:fe:51:83:3e:2e:88:d4:
                    79:e9:2d:ec:38:9e:fb:14:71:b2:6d:89:1e:c2:c1:
                    dc:9b:50:be:2d:2e:61:31:37:44:c7:52:0b:c0:98:
                    ad:cb:e9:ef:f9:46:8a:eb:ec:d4:dd:98:29:be:c7:
                    ca:e7:08:8d:b5:1d:8c:47:07:26:13:2d:aa:dc:65:
                    34:3c:a5:60:6f:53:e5:cd:8b:da:3f:2f:cf:8e:dd:
                    d2:d4:c8:a0:f8:6b:a1:ac:f2:55:aa:4c:cd:c1:43:
                    d3:06:53:df:46:ff:f8:7f:71:43:22:41:cd:89:86:
                    9c:b8:d0:48:e7:a0:f0:bc:1b:43:0c:ec:4e:23:54:
                    a0:1c:a6:6d:f9:a2:9e:8c:c7:9c:9e:d6:1f:a9:d6:
                    9c:e3:57:fa:bd:11:6c:d0:2d:00:86:32:c3:61:6d:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:25:D7:E1:66:58:70:90:C1:C9:B6:C5:95:C1:3F:73:DC:7E:19:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/342f7bfa-467a-3464-9a37-9b683fc0a18b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.216.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e2:2a:39:47:76:d3:a1:cd:18:19:e7:b1:e3:ac:dc:45:a5:
         6a:68:5a:a9:17:66:ac:ba:7b:04:c4:b1:42:de:b9:26:30:67:
         f0:b7:f4:69:df:9a:e1:be:83:82:72:a3:a2:01:08:e6:e6:e0:
         fc:c6:a5:f3:88:22:1f:7f:09:21:dd:35:81:81:45:84:67:54:
         7c:45:ef:db:e8:1e:1e:87:e1:bd:cc:cc:7b:de:7a:fa:ed:d3:
         84:48:52:5d:b4:bc:a8:a9:6a:d1:44:3c:cf:d8:6c:51:6c:59:
         1e:2f:d7:16:24:1f:b2:c0:85:50:3f:ee:df:b9:22:c1:07:2e:
         24:a4:d6:06:7d:7f:32:d7:99:57:5f:21:f1:8c:fd:f5:ec:45:
         6a:5c:94:98:bb:98:71:6d:a0:e4:55:d6:f4:78:52:1a:9a:5a:
         24:99:93:41:37:45:55:2a:3a:d5:1c:1f:cc:52:30:30:36:0d:
         7f:77:b2:be:75:3e:32:86:82:b2:a1:6d:32:15:4d:ab:e3:30:
         36:ab:f5:75:11:cd:b4:fd:30:28:8a:b2:81:a3:45:bc:3b:f8:
         a8:75:68:cc:6b:44:f8:29:c2:a1:93:39:c7:a2:75:c5:c3:f5:
         3f:9b:e1:3e:ef:33:d7:db:07:77:ca:31:12:1e:71:64:a3:3f:
         14:e8:4b:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfrG9E+ZGDF9OIJhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
YjA3NTA1ZjgtNWZjOC00OWVlLThkNGYtZGQ5OTA1MDA3OGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAilZbuzU8UOzZODHRk5/PxxUORCRccDmsP
naCx95F5q6ctdbFNGWMYnmzen9yseongJ8/yiypa0D9kd84wDzdcnGd4bAfR4ufT
3qVOdblI7SL2Flp5813JlEBalVWV/v5Rgz4uiNR56S3sOJ77FHGybYkewsHcm1C+
LS5hMTdEx1ILwJity+nv+UaK6+zU3ZgpvsfK5wiNtR2MRwcmEy2q3GU0PKVgb1Pl
zYvaPy/Pjt3S1Mig+GuhrPJVqkzNwUPTBlPfRv/4f3FDIkHNiYacuNBI56DwvBtD
DOxOI1SgHKZt+aKejMecntYfqdac41f6vRFs0C0AhjLDYW213wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwl1+FmWHCQwcm2xZXBP3PcfhnDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQyZjdiZmEtNDY3YS0z
NDY0LTlhMzctOWI2ODNmYzBhMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMtjdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJXiKjlHdtOhzRgZ57HjrNxFpWpoWqkXZqy6ewTEsULeuSYwZ/C39Gnf
muG+g4Jyo6IBCObm4PzGpfOIIh9/CSHdNYGBRYRnVHxF79voHh6H4b3MzHveevrt
04RIUl20vKipatFEPM/YbFFsWR4v1xYkH7LAhVA/7t+5IsEHLiSk1gZ9fzLXmVdf
IfGM/fXsRWpclJi7mHFtoORV1vR4UhqaWiSZk0E3RVUqOtUcH8xSMDA2DX93sr51
PjKGgrKhbTIVTavjMDar9XURzbT9MCiKsoGjRbw7+Kh1aMxrRPgpwqGTOceidcXD
9T+b4T7vM9fbB3fKMRIecWSjPxToSyI=
-----END CERTIFICATE-----
Generated at Sun May 5 02:15:31 2024 by rpki-client on console-ams.rpki-client.org