Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599f3905-51c4-30a9-a031-15dfa5a63188.roa
File:                     599f3905-51c4-30a9-a031-15dfa5a63188.roa (raw, json)
Hash identifier:          fZEUNTo8bp1h8sm60Kwa5UUOlswYBZRfxcFvDnLydEI=
Subject key identifier:   2C:9F:A1:B3:5A:CE:DD:E5:AC:1B:C3:7E:2C:43:27:40:66:EA:C8:E2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAEE9F86B9E86E5D118BE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599f3905-51c4-30a9-a031-15dfa5a63188.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33667
IP address blocks:        50.236.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ae:e9:f8:6b:9e:86:e5:d1:18:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1ab48f39-f587-4b82-b096-7821543359b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9c:22:ab:f8:26:7a:bc:f7:17:27:9e:76:9e:
                    fa:5b:35:dd:15:62:88:6f:04:56:e4:3a:ef:bb:1b:
                    1d:3e:18:a6:1e:46:5b:d7:d0:11:19:4b:74:c4:32:
                    7d:32:98:c3:18:f7:d7:e4:a2:43:0b:1f:c8:a1:69:
                    11:4e:57:a6:0a:8a:2e:c8:95:a8:cb:7d:6b:db:dc:
                    74:aa:f7:76:a7:b2:7a:24:b4:d1:c0:f5:c0:33:2b:
                    aa:33:ed:45:a8:51:59:ef:75:e4:61:a0:11:40:e4:
                    d1:f4:ac:9a:8e:ff:54:a7:b5:85:84:4c:9f:41:d3:
                    26:f8:f6:19:93:29:ea:66:2a:58:0d:c7:7f:90:13:
                    5c:48:e1:bd:08:57:75:c0:22:01:6c:14:dc:72:92:
                    20:d0:ce:09:e0:99:02:da:35:84:b2:20:2d:a6:6a:
                    28:98:d4:8f:49:85:9e:33:fd:b3:91:8b:0c:d1:5c:
                    32:98:3f:ef:92:3b:d4:55:dc:21:65:0f:8b:c5:71:
                    57:ca:be:9f:7e:db:47:42:42:46:e5:fa:4c:b9:f2:
                    4d:a3:70:67:aa:51:ba:27:d5:7f:d9:11:a6:16:55:
                    5f:52:51:31:9b:79:3f:fe:73:19:1c:8e:a4:61:1b:
                    b8:4b:2a:37:75:ed:86:df:db:5e:e3:12:3b:c2:5b:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:A1:B3:5A:CE:DD:E5:AC:1B:C3:7E:2C:43:27:40:66:EA:C8:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/599f3905-51c4-30a9-a031-15dfa5a63188.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.236.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:51:3f:59:2f:74:f2:e7:f1:a2:f1:d4:33:c1:ac:5a:86:bd:
         1a:f3:29:5d:22:b7:4a:59:44:50:74:57:06:47:f8:bb:3c:96:
         0c:7b:5a:8e:ea:a1:af:10:62:69:ec:78:1d:bd:08:51:04:a6:
         69:cb:f6:d8:fd:6c:45:01:40:7e:d8:af:70:03:95:28:44:a5:
         50:58:c4:73:2c:a9:2c:ed:ca:1a:15:22:3a:c0:80:40:36:d8:
         18:0e:7f:33:c8:2f:c4:91:d6:1c:e4:0b:8a:71:cd:87:26:ba:
         55:3c:13:85:c1:2b:ea:4c:cf:4e:56:cd:e0:ed:17:22:0d:08:
         91:07:aa:0a:c7:41:42:a3:b1:dc:de:0d:c4:9c:89:eb:7a:84:
         0b:bb:55:e8:35:49:99:21:9c:00:fa:0a:eb:59:94:49:5d:ed:
         7e:34:80:b4:6b:2b:46:97:3e:ce:39:0f:d2:52:85:b3:82:55:
         07:85:59:be:ba:54:38:56:be:69:38:cc:d0:d2:94:2a:47:9e:
         7b:e0:38:6d:49:5d:8e:3c:92:a8:f5:fc:4e:ab:14:38:c0:ba:
         1c:a7:d1:3c:f6:98:14:42:a9:16:e3:f4:77:07:7b:36:8b:4f:
         f9:be:34:9a:06:f6:d8:6d:33:e4:db:1f:92:aa:bf:0d:10:a2:
         6b:94:15:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:49:13 2024 by rpki-client on console-fra.rpki-client.org