Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/575bdf33-fc25-3ca6-9f36-c2cb2f155e6b.roa
File:                     575bdf33-fc25-3ca6-9f36-c2cb2f155e6b.roa (raw, json)
Hash identifier:          vvfNHmacGCU9qqdpLK0iZwCbnDfCXGs7RbdCqv1nGUU=
Subject key identifier:   BA:F6:DA:5D:B5:52:8C:FD:DF:63:24:67:BA:A7:C7:ED:9B:11:30:11
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C01B1958553ED6C4F8C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/575bdf33-fc25-3ca6-9f36-c2cb2f155e6b.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33652
IP address blocks:        50.205.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:01:b1:95:85:53:ed:6c:4f:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=1f768f1f-e5fd-4fe0-ace2-bcd50b5763fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:98:01:0c:8b:5e:15:e0:40:b3:f1:9b:c8:
                    2d:e7:36:00:d0:c1:9f:da:d7:58:46:0c:e6:eb:3b:
                    7f:9e:a4:f5:7f:63:f7:bf:04:d3:0f:46:a0:bc:f3:
                    d3:a3:08:b2:30:c5:90:1e:b7:3a:04:38:7d:43:6b:
                    38:82:1e:f2:dd:3a:25:25:f0:e3:60:d2:7d:63:99:
                    35:62:2e:f6:53:a2:6a:40:37:11:e2:17:eb:da:b1:
                    b2:ae:00:18:ad:01:5d:17:24:f7:06:c6:a7:37:53:
                    1a:b8:a4:00:07:b2:2e:6f:20:33:92:6f:ba:98:5d:
                    e4:05:b6:32:d3:54:c4:74:3a:1a:b1:f6:46:a5:1b:
                    0b:30:15:c0:67:0b:87:82:4f:7c:99:5d:36:fd:18:
                    60:83:4a:d6:03:2b:95:70:23:5a:7d:7f:16:01:59:
                    55:47:cb:e8:ce:10:0e:3d:92:f9:77:b5:f6:55:bb:
                    c0:7f:4b:c9:bf:c3:01:1f:ac:4b:e7:bc:c0:f9:80:
                    93:d3:03:4a:7e:c3:61:3f:04:15:01:fb:be:23:d7:
                    10:18:81:72:49:76:ae:70:a8:16:af:3f:63:7f:62:
                    ee:2f:ad:41:cf:e1:e7:2b:67:8c:91:0c:b6:16:1d:
                    d6:1d:15:9d:dc:f5:34:f5:e5:aa:df:b6:8a:bd:45:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F6:DA:5D:B5:52:8C:FD:DF:63:24:67:BA:A7:C7:ED:9B:11:30:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/575bdf33-fc25-3ca6-9f36-c2cb2f155e6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.205.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:90:c9:63:09:a7:42:06:e0:be:fa:56:7d:29:d1:1b:93:d9:
         09:88:21:cb:3a:48:ee:72:5f:27:30:41:f5:ad:97:6a:eb:23:
         f3:41:13:c0:71:3a:7c:d1:da:34:e2:f4:ad:32:c9:f5:67:de:
         e3:2f:d3:8c:c2:26:b3:46:2f:fd:bc:75:3e:ce:1d:13:b4:27:
         fb:07:64:57:e6:30:fe:07:fb:82:6e:54:f8:95:59:ac:61:f5:
         9f:68:be:70:62:36:0d:d2:e8:bd:24:e2:a5:d2:97:61:94:de:
         c2:c6:18:39:9f:e8:d9:47:e5:a4:a1:2c:de:70:3f:08:b4:27:
         11:20:35:4f:96:79:fd:af:5b:ec:8a:98:de:09:56:ef:32:30:
         9a:6f:5b:66:3f:cb:6c:4b:01:9a:66:0d:f1:24:dc:00:a9:39:
         9c:e2:7e:f8:5b:50:89:4f:a7:8b:8a:99:5d:79:d3:c5:d6:dd:
         2b:b6:2f:c0:be:74:48:41:42:f3:8d:be:60:38:3e:ae:31:7d:
         ae:bc:a8:d5:cf:96:fd:cb:06:4a:24:32:a3:c1:42:d3:07:56:
         3a:1f:7b:a6:8e:3f:ce:2c:9c:3e:28:8b:5b:14:11:52:71:b3:
         67:f5:ee:18:15:dc:ea:97:f6:30:cb:ff:04:43:8c:88:03:83:
         c4:fa:7a:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebAGxlYVT7WxPjIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MWY3NjhmMWYtZTVmZC00ZmUwLWFjZTItYmNkNTBiNTc2M2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrCYAQyLXhXgQLPxm8gt5zYA0MGf2tdYRgzm
6zt/nqT1f2P3vwTTD0agvPPTowiyMMWQHrc6BDh9Q2s4gh7y3TolJfDjYNJ9Y5k1
Yi72U6JqQDcR4hfr2rGyrgAYrQFdFyT3BsanN1MauKQAB7IubyAzkm+6mF3kBbYy
01TEdDoasfZGpRsLMBXAZwuHgk98mV02/Rhgg0rWAyuVcCNafX8WAVlVR8vozhAO
PZL5d7X2VbvAf0vJv8MBH6xL57zA+YCT0wNKfsNhPwQVAfu+I9cQGIFySXaucKgW
rz9jf2LuL61Bz+HnK2eMkQy2Fh3WHRWd3PU09eWq37aKvUVnawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr22l21Uoz932MkZ7qnx+2bETARMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTc1YmRmMzMtZmMyNS0z
Y2E2LTlmMzYtYzJjYjJmMTU1ZTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMs0dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMSQyWMJp0IG4L76Vn0p0RuT2QmIIcs6SO5yXycwQfWtl2rrI/NBE8Bx
OnzR2jTi9K0yyfVn3uMv04zCJrNGL/28dT7OHRO0J/sHZFfmMP4H+4JuVPiVWaxh
9Z9ovnBiNg3S6L0k4qXSl2GU3sLGGDmf6NlH5aShLN5wPwi0JxEgNU+Wef2vW+yK
mN4JVu8yMJpvW2Y/y2xLAZpmDfEk3ACpOZzifvhbUIlPp4uKmV1508XW3Su2L8C+
dEhBQvONvmA4Pq4xfa68qNXPlv3LBkokMqPBQtMHVjofe6aOP84snD4oi1sUEVJx
s2f17hgV3OqX9jDL/wRDjIgDg8T6egY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:35:46 2025 by rpki-client