Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ecdf02f-a7a2-3294-b096-5502584b1ec6.roa
File:                     3ecdf02f-a7a2-3294-b096-5502584b1ec6.roa (raw, json)
Hash identifier:          GK25MiDap6N6JV4VX7LHt/ZLkspDliwfDen9y+8KaOA=
Subject key identifier:   D9:B9:26:46:EC:2C:FF:CC:21:D2:67:DA:55:10:4E:7C:27:96:2E:68
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB8D5F407F4F46E4E46778
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ecdf02f-a7a2-3294-b096-5502584b1ec6.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33651
IP address blocks:        50.201.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:8d:5f:40:7f:4f:46:e4:e4:67:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=8544faa4-cc7c-4364-afa6-b22067db77c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fe:a3:c6:4e:06:2b:be:7a:bc:83:de:c2:2d:
                    6a:78:c5:26:2c:36:a0:10:03:05:08:a6:75:72:a6:
                    52:6b:1b:23:2b:a0:e3:cf:89:c0:96:98:3c:1b:d4:
                    61:1d:5d:f5:c3:bb:dd:0f:11:43:ae:f0:65:0d:de:
                    47:44:56:9d:de:c5:1c:2e:2d:79:d1:95:64:cb:86:
                    c0:8e:74:da:62:16:74:e7:d3:d9:eb:23:17:84:82:
                    b2:7b:5b:b0:78:19:a7:70:f7:18:9b:06:ed:c7:83:
                    c0:7b:0d:8d:71:6f:d5:d8:c7:63:75:e1:a1:03:d9:
                    a2:b7:e3:b1:97:43:c4:2e:10:94:d7:cf:b7:b4:04:
                    25:76:b6:ba:8e:66:6a:40:6e:cc:56:bb:ee:38:ea:
                    10:20:e3:99:b5:70:2b:dd:fd:cb:7c:49:9e:66:81:
                    4d:bc:14:66:99:f8:fa:b2:9c:57:50:fa:d4:e0:18:
                    03:1d:92:81:8e:2d:e8:e1:6b:01:11:0d:fc:e6:a7:
                    7d:d0:95:77:20:04:bd:23:81:87:31:61:6b:dd:ed:
                    22:78:6c:37:0f:82:2b:dd:b0:e7:eb:13:9e:4a:b0:
                    34:94:cd:7d:95:27:94:87:85:f8:05:32:19:72:04:
                    8e:70:52:d7:64:f3:98:f5:77:17:2f:f9:d3:aa:e3:
                    49:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B9:26:46:EC:2C:FF:CC:21:D2:67:DA:55:10:4E:7C:27:96:2E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ecdf02f-a7a2-3294-b096-5502584b1ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.201.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:cb:a3:b0:10:e1:96:f0:96:5a:b3:2a:e6:1a:64:56:7b:66:
         97:eb:76:2f:c7:f4:13:a8:b0:17:23:af:ca:fc:b1:9d:05:63:
         c0:81:88:f8:62:77:6f:60:fa:58:8a:58:5e:80:b8:84:a0:3e:
         ad:f7:78:7c:7c:08:10:45:b6:37:3b:bf:ee:1e:7b:8b:92:7e:
         75:49:5c:a3:81:8a:3b:44:23:2d:ee:42:f7:c8:42:18:ec:3a:
         b6:af:12:b7:2b:68:16:22:d1:0d:92:91:a0:a5:3c:12:a9:07:
         0a:29:f2:76:e6:a4:23:70:69:c1:da:96:9e:d3:79:db:ce:e2:
         88:94:ee:d0:e9:96:29:b6:6d:53:1d:22:b5:fb:db:81:3b:e5:
         2f:19:7a:a0:1a:c0:20:31:56:06:84:b5:07:70:c0:ae:b7:08:
         c9:51:91:8e:01:b5:69:96:c7:d0:2a:df:df:a8:28:45:b8:d4:
         02:ac:d4:dd:33:f7:45:bb:99:a9:ea:98:ba:b8:b0:a6:76:02:
         21:4d:ab:2d:ea:23:50:c2:9a:70:5a:fd:ea:6f:cb:b3:f7:d7:
         9d:93:06:23:e2:6b:fe:83:3c:97:f5:55:4b:68:fb:9f:7e:29:
         ad:4a:0d:0d:80:96:7c:18:4e:7a:d5:5e:08:f3:b7:37:59:c7:
         53:31:ad:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUfq41fQH9PRuTkZ3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MDMwNzAyMDAyNVoXDTI0MDYwNTAxMDAyNVowLzEtMCsGA1UEAxMk
ODU0NGZhYTQtY2M3Yy00MzY0LWFmYTYtYjIyMDY3ZGI3N2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP6jxk4GK756vIPewi1qeMUmLDagEAMFCKZ1
cqZSaxsjK6Djz4nAlpg8G9RhHV31w7vdDxFDrvBlDd5HRFad3sUcLi150ZVky4bA
jnTaYhZ059PZ6yMXhIKye1uweBmncPcYmwbtx4PAew2NcW/V2MdjdeGhA9mit+Ox
l0PELhCU18+3tAQldra6jmZqQG7MVrvuOOoQIOOZtXAr3f3LfEmeZoFNvBRmmfj6
spxXUPrU4BgDHZKBji3o4WsBEQ385qd90JV3IAS9I4GHMWFr3e0ieGw3D4Ir3bDn
6xOeSrA0lM19lSeUh4X4BTIZcgSOcFLXZPOY9XcXL/nTquNJaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNm5JkbsLP/MIdJn2lUQTnwnli5oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2VjZGYwMmYtYTdhMi0z
Mjk0LWIwOTYtNTUwMjU4NGIxZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMsksMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK7Lo7AQ4ZbwllqzKuYaZFZ7Zpfrdi/H9BOosBcjr8r8sZ0FY8CBiPhi
d29g+liKWF6AuISgPq33eHx8CBBFtjc7v+4ee4uSfnVJXKOBijtEIy3uQvfIQhjs
OravErcraBYi0Q2SkaClPBKpBwop8nbmpCNwacHalp7TedvO4oiU7tDplim2bVMd
IrX724E75S8ZeqAawCAxVgaEtQdwwK63CMlRkY4BtWmWx9Aq39+oKEW41AKs1N0z
90W7manqmLq4sKZ2AiFNqy3qI1DCmnBa/epvy7P3152TBiPia/6DPJf1VUto+59+
Ka1KDQ2AlnwYTnrVXgjztzdZx1MxraU=
-----END CERTIFICATE-----
Generated at Sun May 5 02:37:43 2024 by rpki-client on console-fra.rpki-client.org