Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544db689-ef4c-3775-b687-303766eda868.roa
File:                     544db689-ef4c-3775-b687-303766eda868.roa (raw, json)
Hash identifier:          rEsavApVr8LLGqYgPZGeWdqo3ZqQzhv0tl2l2yXLoqA=
Subject key identifier:   CE:27:FC:CF:58:BE:3C:D9:3A:EE:E7:9D:35:59:E4:E7:EA:76:58:F7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEFAC6FDDB2154C195438040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544db689-ef4c-3775-b687-303766eda868.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     7015
IP address blocks:        50.217.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:fa:c6:fd:db:21:54:c1:95:43:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=e2da19a6-4b01-4cde-bf68-ba52e0a16a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b2:52:56:7d:6e:fd:c8:26:16:59:e7:cb:3c:
                    66:cb:c7:e9:40:35:29:6d:6b:38:0e:e0:45:4c:5a:
                    48:67:39:e9:64:fa:7d:fb:de:88:b3:75:60:6b:bd:
                    22:35:a0:c6:f4:23:55:63:7e:68:35:50:01:df:1e:
                    24:c3:89:47:c3:72:bd:9c:c1:10:2e:2b:57:1b:ab:
                    79:83:76:e8:c1:2f:b8:80:21:12:85:c4:39:99:b0:
                    4d:05:1d:a2:80:48:9e:6e:e9:6d:15:6c:df:e7:cd:
                    85:4f:e2:ce:c7:02:95:9e:f0:31:0d:29:c5:8f:a3:
                    64:2e:0e:19:e7:a2:2c:4d:e6:54:39:ed:7a:e0:98:
                    ef:a9:62:8f:e5:7f:63:99:0f:51:8d:e9:71:77:c6:
                    79:af:5c:8a:6c:db:a2:7b:fc:a0:8a:dd:e4:01:a1:
                    3a:25:3a:3b:dd:9f:bf:27:bf:f6:c3:1c:09:3f:51:
                    43:cf:6b:26:de:4f:cf:4a:a5:a6:ea:70:b0:71:fc:
                    b9:f9:4b:61:90:e0:e5:83:fb:78:1d:db:f0:bb:31:
                    6a:26:b6:d4:b0:8d:18:73:06:c4:b5:c3:1c:61:1e:
                    ac:61:9f:d4:64:22:8d:e0:fd:7e:03:d6:e1:7d:dd:
                    d9:fe:81:d2:83:8e:36:c7:b8:b1:c2:65:69:f4:52:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:FC:CF:58:BE:3C:D9:3A:EE:E7:9D:35:59:E4:E7:EA:76:58:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/544db689-ef4c-3775-b687-303766eda868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.217.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:e8:2a:a5:3a:96:0b:4e:9a:b0:96:78:22:8b:f1:0a:8a:6d:
         2b:98:a3:50:50:25:69:02:dc:31:a7:fa:46:18:b4:c8:26:28:
         f1:1e:b0:72:45:c9:4d:91:c3:b8:6c:27:50:05:c9:9e:25:cc:
         d2:e2:d3:38:41:ef:c1:f7:be:03:c1:0b:b6:9f:f6:6a:fa:c1:
         76:e5:5f:5a:30:3d:0a:2e:1e:6d:91:00:5f:10:21:5d:29:9b:
         db:26:f5:7a:79:67:1a:65:7a:f1:e2:b6:ee:24:e8:ec:03:23:
         a9:d2:73:df:73:c5:de:f4:df:41:d7:93:0e:21:8b:58:bb:8c:
         dd:f8:46:1e:9e:ee:89:c9:be:d6:6a:ee:ae:a1:15:e9:05:32:
         6f:8b:c5:ed:46:b8:14:ed:b1:dc:49:ee:48:77:e6:3d:04:9b:
         1e:e9:ba:20:23:32:1d:8a:b3:6f:2d:a3:c0:ee:ac:6e:3d:d7:
         be:fc:6f:5c:4d:10:2b:c5:e4:fe:26:37:c0:56:76:8c:b9:1d:
         4c:08:32:63:a3:22:e9:97:09:d5:21:6f:1c:df:05:0f:58:2b:
         96:a3:eb:53:2b:56:aa:a8:29:78:95:3d:8d:16:a0:7b:83:11:
         37:61:c2:e7:4b:5a:f6:d2:62:ba:8a:8a:4f:68:17:1b:2b:99:
         24:be:6b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:00:26 2024 by rpki-client on console-ams.rpki-client.org