Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f0caa3c-1c3f-3541-bb80-5eaaf60dd03f.roa
File:                     3f0caa3c-1c3f-3541-bb80-5eaaf60dd03f.roa (raw, json)
Hash identifier:          Rz99Jk/LTwSQZcePJLFpBcuNbiTIIXOSW5r/ZS6dMo4=
Subject key identifier:   73:E4:7C:47:79:19:BD:50:6E:9B:05:96:42:4B:BC:AA:AB:CB:11:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB99D83AC613AD8FAD9E20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f0caa3c-1c3f-3541-bb80-5eaaf60dd03f.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33652
IP address blocks:        50.216.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:99:d8:3a:c6:13:ad:8f:ad:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=f177abb3-d3f1-4071-86a4-1ca33a4ff6dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:c4:be:3f:45:97:9f:f1:a2:ef:8f:e7:ff:
                    a3:3b:5a:20:c6:a2:b1:a3:16:5a:b1:2b:d6:cd:3e:
                    4a:a2:02:be:1d:c5:ea:1a:9e:f0:8c:e6:6e:0e:7e:
                    93:22:9a:62:d4:37:62:6b:16:0e:e0:8e:e5:f8:9f:
                    20:93:15:21:59:69:6f:91:dd:38:70:a9:dc:f1:2e:
                    a7:bd:16:5a:97:22:5e:87:b8:df:07:6f:df:75:57:
                    b4:d2:97:f6:71:7e:b9:61:5a:7a:f4:24:ec:6e:05:
                    61:5d:f0:e7:12:3e:b6:ae:bd:cd:32:cb:1c:fe:fb:
                    22:e1:b1:2f:fa:29:36:fa:73:60:00:43:81:a7:ab:
                    1d:f1:9c:4a:61:5a:83:2c:60:fd:57:16:4a:18:c0:
                    26:b4:55:7d:c3:da:d9:1a:aa:67:70:a1:34:83:70:
                    6b:35:d7:00:02:f2:ff:41:04:2d:19:0e:1e:f1:33:
                    5d:59:dc:68:b0:02:a6:d9:f5:76:aa:7b:7a:6a:b1:
                    96:76:23:ce:ad:e6:81:59:92:d6:48:90:32:76:29:
                    92:08:ee:20:1b:5c:51:04:ce:a9:91:c9:d3:b3:67:
                    db:4a:78:57:af:aa:0d:b1:9e:2d:04:88:8e:b3:84:
                    7c:47:c0:15:63:80:59:d9:5d:2c:8e:30:bc:85:d6:
                    2b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:7C:47:79:19:BD:50:6E:9B:05:96:42:4B:BC:AA:AB:CB:11:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f0caa3c-1c3f-3541-bb80-5eaaf60dd03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.216.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:9a:2a:57:5e:26:fc:c0:1d:8f:2d:d2:7d:e7:80:0f:7b:3f:
         ba:24:d9:b3:e7:14:4d:38:79:2f:fb:c4:0d:43:f8:27:3e:43:
         b8:ad:e7:9f:2b:c3:cf:76:14:dd:fe:4b:d8:37:26:4b:23:d6:
         aa:40:d2:9b:09:54:53:1f:5c:8b:af:b7:dc:3d:6b:be:e8:78:
         db:06:3a:1e:a9:24:bb:7d:f0:29:98:25:cd:32:d3:60:7e:01:
         8d:56:12:5f:69:43:38:b5:d5:06:c2:de:7f:bb:bb:10:e4:fd:
         ae:77:0a:2f:ff:67:b6:d6:a5:f9:b6:8a:ff:82:0a:a6:58:bf:
         28:ec:29:4f:d3:7a:1f:4b:3a:a7:72:af:2b:f0:42:bf:b5:1b:
         fc:46:59:e7:c1:12:b5:7c:18:c7:32:31:f9:de:b0:84:05:e7:
         a7:f3:36:48:e4:74:aa:f1:af:41:6b:e0:07:ae:cb:b4:0f:d0:
         9c:95:79:07:ec:f3:dd:a8:19:4d:f9:ad:35:2d:bd:35:a2:5b:
         e4:11:9c:98:b3:fa:ce:d8:df:57:83:67:cf:c0:70:32:56:1c:
         eb:f3:70:c0:37:bb:b3:41:a5:45:14:4f:4b:3e:5f:97:ee:0e:
         5a:0c:36:cb:ee:47:d2:67:fe:61:bb:21:3b:82:77:2e:78:d0:
         ac:d3:8d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:58 2024 by rpki-client on console-ams.rpki-client.org