Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b0849a5-4ffe-3c31-8a3b-04e8fe47424e.roa
File:                     4b0849a5-4ffe-3c31-8a3b-04e8fe47424e.roa (raw, json)
Hash identifier:          KkqNtTs2ZOB29Gn8kD2ySKkQTk13IPAh+WnVNqOfNzA=
Subject key identifier:   A3:C4:0F:C5:73:54:F2:06:CF:75:94:A6:38:D9:23:AB:40:D5:75:46
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAD0AD191021AF40E471E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b0849a5-4ffe-3c31-8a3b-04e8fe47424e.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     22909
IP address blocks:        174.50.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ad:0a:d1:91:02:1a:f4:0e:47:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=914bd77a-a6a2-4752-ab55-4340fa1ddb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:d6:e2:1d:6c:89:6c:6d:c1:85:e6:f6:17:
                    ad:8e:36:8b:5f:77:4f:a4:4d:b0:d6:5e:91:61:06:
                    31:1b:0e:41:11:b9:f8:d3:6e:b9:9c:ce:16:25:75:
                    84:e1:fb:ff:eb:3e:29:b7:4e:9d:dd:dd:cd:e6:58:
                    04:3a:da:6d:1f:5a:62:bf:e9:56:cd:5a:55:89:1b:
                    05:66:1c:d4:0a:e5:5e:92:73:c4:9d:e5:be:61:27:
                    e4:3a:a3:3c:75:41:31:d2:7b:4d:55:62:55:76:52:
                    e3:1e:0d:ca:77:09:e7:d9:c6:ea:2f:7d:62:bd:4a:
                    5f:55:87:81:af:41:ea:69:ea:b7:8d:75:9d:85:91:
                    f1:6a:5b:9a:bf:64:0f:2a:66:15:b5:f4:6e:88:57:
                    42:76:60:20:bf:26:64:4d:c0:80:c8:a8:43:05:25:
                    ff:de:7e:ad:3c:6c:98:f1:06:1b:61:39:66:f1:61:
                    80:64:da:d0:45:e0:4a:5a:43:ce:cb:b7:8c:6a:90:
                    d5:38:2d:2c:3b:ad:e7:da:5d:71:56:15:73:34:75:
                    1f:c9:6b:76:55:4d:62:86:87:5d:aa:98:b2:9e:62:
                    cc:66:db:52:34:fa:e0:77:5c:30:87:c7:fc:e4:37:
                    d6:c5:3e:8b:d5:db:f4:89:cf:21:36:ad:d6:93:c3:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C4:0F:C5:73:54:F2:06:CF:75:94:A6:38:D9:23:AB:40:D5:75:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b0849a5-4ffe-3c31-8a3b-04e8fe47424e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.50.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:2c:a3:4a:54:f0:f7:93:3b:33:c4:00:9a:04:53:53:09:f3:
         2e:ae:c1:ad:af:1a:69:1c:18:d1:58:54:a4:ff:ec:13:19:1b:
         0e:d1:fe:cc:40:47:d2:3e:74:57:a5:f5:a6:b9:1d:43:07:58:
         e6:03:eb:0b:2e:a7:14:aa:c8:9a:27:b2:48:53:62:49:40:90:
         04:e2:29:36:ab:74:4a:10:53:ba:b1:3f:53:ad:fe:19:41:42:
         c9:49:d9:64:bb:3d:c4:f5:fc:42:8b:63:1f:19:b1:5c:a5:03:
         a8:36:3b:16:fe:14:43:6d:da:8f:6d:9e:28:15:04:13:74:b6:
         fb:ab:96:5e:fd:4d:75:f0:65:31:76:d1:75:fa:05:ab:f9:80:
         0e:58:d1:44:7b:8c:4e:a9:a7:c3:ce:8a:77:44:e3:72:b4:cb:
         80:85:5d:c4:37:63:ef:df:30:83:94:2c:41:e9:5c:ed:5c:db:
         2b:53:81:02:85:b3:af:e0:28:a2:92:eb:0e:a2:2e:2b:a7:05:
         58:45:bd:6b:77:09:7f:68:10:1f:bf:95:f1:66:82:a3:21:9d:
         ac:d0:c3:fb:0f:28:00:5f:3d:08:13:6e:fa:71:f9:21:53:de:
         31:53:e8:a0:74:14:ee:5c:d5:6d:e5:06:a0:cb:3f:6f:da:98:
         94:8c:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:50:39 2024 by rpki-client on console-ams.rpki-client.org