Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572914f0-e05b-31c1-a975-0f6bd5f13767.roa
File:                     572914f0-e05b-31c1-a975-0f6bd5f13767.roa (raw, json)
Hash identifier:          QK9Zn3aFvRjMVT9dOvPm0x5RFQdQYq3076arillSb04=
Subject key identifier:   7A:2E:90:C2:FE:69:DC:E2:4A:FB:1D:CD:B3:60:30:9A:0E:BE:EB:5D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAB7D4978497802DDDF9340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572914f0-e05b-31c1-a975-0f6bd5f13767.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33490
IP address blocks:        50.198.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:7d:49:78:49:78:02:dd:df:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=5820d9c1-3250-41ee-9c3f-b7808f643e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:61:ba:a6:29:2c:09:9e:82:6a:2f:29:10:
                    32:19:87:a0:d3:8e:a8:0f:ad:25:f9:95:aa:3f:28:
                    85:f9:64:eb:1b:2c:9a:b2:64:20:aa:e6:0e:a0:5b:
                    56:e2:31:c8:5b:d3:c1:26:be:93:ef:c6:e6:e9:07:
                    6a:d9:bf:88:05:42:22:17:ca:93:24:8e:48:e5:28:
                    bf:25:6d:e3:44:68:0f:47:14:91:14:a7:7a:54:e6:
                    67:c1:f7:7d:35:aa:c7:df:e7:83:66:95:8a:17:fd:
                    0d:e3:c7:1f:73:5b:0e:3a:32:77:34:87:08:52:85:
                    82:71:45:36:06:a5:2e:4e:46:2d:df:53:e0:61:59:
                    9d:3d:b3:76:73:d8:23:0b:4b:68:d4:3f:27:80:29:
                    d8:99:e3:86:12:f9:4a:7a:96:b8:eb:58:8f:c9:f9:
                    f9:06:eb:f7:3e:99:f8:80:e1:c6:ac:9b:1f:2c:ac:
                    9e:88:2a:28:19:f3:87:f4:56:e4:ab:b4:56:a7:ff:
                    05:00:06:55:d4:38:c7:52:8d:89:c9:b3:ae:85:ce:
                    53:ac:67:80:04:56:dd:1d:56:ef:f5:a2:35:ce:e4:
                    1b:3c:15:03:d2:90:a8:98:3e:8f:61:00:f1:6d:5b:
                    d6:95:b2:8e:94:b8:b5:f0:c1:8c:ad:2b:6f:99:84:
                    52:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2E:90:C2:FE:69:DC:E2:4A:FB:1D:CD:B3:60:30:9A:0E:BE:EB:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/572914f0-e05b-31c1-a975-0f6bd5f13767.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.198.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:db:2b:08:d2:ec:df:f5:25:d2:15:51:a6:44:a9:51:3e:06:
         6a:6e:d5:a9:69:7c:df:78:b6:bd:0d:70:80:a7:94:81:37:c9:
         36:07:d4:ad:c4:d9:91:ba:af:ad:f1:6c:c7:37:0a:73:47:5b:
         37:a6:44:da:15:17:38:a0:61:f3:33:c4:c7:22:9f:56:d4:30:
         16:72:8c:5c:a4:00:5f:5a:dc:60:86:be:8b:fc:00:dd:71:a1:
         af:5d:50:ef:74:47:23:03:36:0a:28:44:70:a2:b8:fb:68:e1:
         48:6a:83:a5:b9:0a:29:96:6f:5e:9b:90:8a:51:1a:23:fb:72:
         1b:09:fd:20:cd:ab:b5:9b:a2:b8:00:4b:e7:0c:a6:d6:ee:b1:
         64:7d:35:dc:bb:ac:db:b9:c9:90:f8:c0:b2:da:68:26:42:d8:
         f5:79:cc:b5:aa:06:84:ff:48:2e:67:01:be:40:f7:53:28:dc:
         cd:68:0c:17:de:69:4b:31:7c:1a:dd:53:fe:ed:36:89:e0:8e:
         39:32:21:0b:9e:c7:22:27:22:7a:27:25:c9:97:24:e4:42:64:
         c6:90:27:70:4e:95:a1:c5:2a:ff:da:3b:dd:fa:a6:53:3c:e6:
         40:8f:f7:f5:02:68:4c:47:94:f3:46:49:e1:1a:0e:9a:82:27:
         2b:05:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:04 2024 by rpki-client on console-fra.rpki-client.org