Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559e6c0b-4209-323f-b1f0-953fd9bf52cb.roa
File:                     559e6c0b-4209-323f-b1f0-953fd9bf52cb.roa (raw, json)
Hash identifier:          nUp+p6sp1QwDNOyjRaZF+WuGzKKh5ZcZxNTRx1mT4c8=
Subject key identifier:   EB:B4:E1:23:38:04:BB:E9:32:D3:FB:55:E0:69:7E:CC:4F:01:0B:B5
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6E21A8763DEBAB3F6A2D28
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559e6c0b-4209-323f-b1f0-953fd9bf52cb.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33659
IP address blocks:        50.231.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6e:21:a8:76:3d:eb:ab:3f:6a:2d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=23e2a117-50ca-41e3-a6a8-0ee5093f904d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f1:57:78:3a:cb:72:ac:ce:d7:dc:b8:16:67:
                    ef:97:24:d2:b1:7c:cb:9a:8b:27:c8:f7:1e:b9:96:
                    c2:6c:48:be:72:cb:01:ac:ad:81:86:95:26:3a:fa:
                    3e:0e:49:b7:78:77:f3:fd:ba:8d:cc:8b:17:ab:a2:
                    6d:fb:51:26:24:55:8c:f2:0c:31:09:c8:16:8b:d6:
                    f0:eb:f0:be:ba:89:e2:9f:ff:0c:29:7d:29:63:48:
                    05:a9:90:b0:80:66:57:a9:54:5c:ba:ed:44:cc:ca:
                    75:2b:27:ff:df:45:37:28:53:b5:e1:4e:f7:4f:ea:
                    29:4c:54:cc:1a:4f:fc:e4:a9:eb:d9:17:36:41:bd:
                    80:11:3b:c9:33:e0:87:18:33:49:ef:5b:16:d2:c8:
                    ec:ca:55:d2:90:d1:3e:1f:8f:1c:d1:3e:d9:74:bd:
                    23:0b:06:34:1d:00:57:57:3c:cf:9f:7f:55:08:31:
                    40:0a:e3:90:51:b6:9b:bf:d6:fe:ca:88:04:ff:29:
                    5d:a5:08:d1:9e:2f:1e:cd:7d:49:8c:97:2d:16:55:
                    1a:bb:ed:fb:96:53:7d:7c:f0:4a:e6:8a:89:44:fb:
                    fd:7e:d1:fd:fb:9a:b0:2b:cc:8c:66:ee:c5:a4:9c:
                    8f:4a:ff:d5:3d:a1:88:f1:f5:07:53:5c:54:d5:63:
                    dd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B4:E1:23:38:04:BB:E9:32:D3:FB:55:E0:69:7E:CC:4F:01:0B:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/559e6c0b-4209-323f-b1f0-953fd9bf52cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.231.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b2:4c:59:96:f4:12:fe:39:fd:db:50:b2:da:40:00:99:2c:
         63:7a:03:31:9a:ff:5d:db:c0:ec:70:21:a1:51:38:b6:fc:48:
         21:f1:e8:af:64:d6:1c:ff:18:49:99:37:87:c3:d9:96:a6:5c:
         d7:e9:95:71:39:86:81:14:21:97:cf:64:c7:96:22:e0:2e:b5:
         f0:51:55:f5:a7:4a:53:86:82:5e:fb:60:ec:14:32:de:25:d5:
         73:4f:49:c7:1c:45:fc:38:c3:58:8d:cd:eb:a0:0a:34:26:d9:
         ad:cb:4f:dd:9a:b0:8b:34:02:f0:6d:9c:44:ab:e3:24:61:a1:
         85:28:46:2a:33:00:c4:bc:cc:b3:d5:b2:b8:0e:d6:a2:ab:57:
         e3:60:7c:ac:fb:cb:55:84:39:08:d9:d6:28:56:6f:5f:17:46:
         23:3a:0b:a5:75:da:68:3b:ea:59:4b:06:4d:dd:4f:2e:1a:80:
         3c:fe:aa:af:e9:76:29:20:45:b8:34:2b:c0:d8:40:09:4f:dd:
         fc:7a:ff:d5:53:ec:4e:a9:67:16:d0:99:c9:bf:00:4f:70:93:
         cf:37:d9:23:57:e5:c6:07:c5:0d:02:9b:3d:d4:b5:8d:3f:9d:
         76:17:71:32:ec:c7:ae:ab:49:0f:cd:0c:43:1c:b0:dc:2a:36:
         3d:cb:da:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebiGodj3rqz9qLSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjNlMmExMTctNTBjYS00MWUzLWE2YTgtMGVlNTA5M2Y5MDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/FXeDrLcqzO19y4FmfvlyTSsXzLmosnyPce
uZbCbEi+cssBrK2BhpUmOvo+Dkm3eHfz/bqNzIsXq6Jt+1EmJFWM8gwxCcgWi9bw
6/C+uonin/8MKX0pY0gFqZCwgGZXqVRcuu1EzMp1Kyf/30U3KFO14U73T+opTFTM
Gk/85Knr2Rc2Qb2AETvJM+CHGDNJ71sW0sjsylXSkNE+H48c0T7ZdL0jCwY0HQBX
VzzPn39VCDFACuOQUbabv9b+yogE/yldpQjRni8ezX1JjJctFlUau+37llN9fPBK
5oqJRPv9ftH9+5qwK8yMZu7FpJyPSv/VPaGI8fUHU1xU1WPdDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOu04SM4BLvpMtP7VeBpfsxPAQu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTU5ZTZjMGItNDIwOS0z
MjNmLWIxZjAtOTUzZmQ5YmY1MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMudZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHiyTFmW9BL+Of3bULLaQACZLGN6AzGa/13bwOxwIaFROLb8SCHx6K9k
1hz/GEmZN4fD2ZamXNfplXE5hoEUIZfPZMeWIuAutfBRVfWnSlOGgl77YOwUMt4l
1XNPScccRfw4w1iNzeugCjQm2a3LT92asIs0AvBtnESr4yRhoYUoRiozAMS8zLPV
srgO1qKrV+NgfKz7y1WEOQjZ1ihWb18XRiM6C6V12mg76llLBk3dTy4agDz+qq/p
dikgRbg0K8DYQAlP3fx6/9VT7E6pZxbQmcm/AE9wk8832SNX5cYHxQ0Cmz3UtY0/
nXYXcTLsx66rSQ/NDEMcsNwqNj3L2ro=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:13:24 2025 by rpki-client