Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6688aa47-5061-3bcb-9259-1849192f1bec.roa
File:                     6688aa47-5061-3bcb-9259-1849192f1bec.roa (raw, json)
Hash identifier:          jHlXz1zdpxTQhApCc2Y0XBE2tLsnFok+zVShknPQHf8=
Subject key identifier:   8D:21:1B:C8:C7:44:A1:4E:A7:96:28:DB:91:3E:66:58:5D:19:DC:96
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285847BEF7596E82809F79B841AC80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6688aa47-5061-3bcb-9259-1849192f1bec.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     33650
IP address blocks:        50.78.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Dec 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f7:59:6e:82:80:9f:79:b8:41:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=bfd4fc8c-2bac-4516-a886-60076a54c540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:f0:f9:6c:74:a4:ed:c9:f7:0d:0a:ec:11:
                    b1:ed:43:96:3e:64:9c:c2:74:bc:aa:91:0a:85:7e:
                    13:be:bf:4c:20:79:58:5a:76:7f:59:ea:7a:29:ee:
                    40:64:88:41:75:28:77:a6:37:d7:67:a3:2c:4e:71:
                    50:43:b7:e4:b8:a8:52:8c:0e:1a:65:6b:e8:79:c8:
                    20:1a:6f:c6:d4:49:63:13:0a:32:c2:dd:f2:8c:bb:
                    df:ce:2c:12:e1:1d:d1:67:f6:20:26:32:c0:16:ba:
                    cd:66:3b:eb:ff:11:45:c9:cc:d6:ae:f1:92:e8:49:
                    78:3f:b9:c1:7e:9d:80:65:f9:a9:ab:35:e4:f1:35:
                    d0:3f:8c:cc:cb:75:09:6b:0e:df:dd:8d:53:3f:72:
                    80:a3:26:75:c7:65:1b:ed:66:a8:2b:68:47:68:71:
                    47:f6:54:c1:75:1e:47:86:f3:0e:fb:57:3a:04:7f:
                    79:45:54:67:48:a4:b0:f6:93:7a:5b:5b:64:b8:12:
                    24:31:92:19:fe:62:4d:f6:bc:1f:17:a5:64:6b:bd:
                    ee:92:23:64:be:ca:9b:63:15:ff:9b:95:d7:d8:64:
                    cc:f7:53:5b:d4:e2:7e:ec:18:93:93:05:74:61:da:
                    b6:63:b3:fa:6a:30:8a:76:a3:f3:65:6d:f2:43:70:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:1B:C8:C7:44:A1:4E:A7:96:28:DB:91:3E:66:58:5D:19:DC:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6688aa47-5061-3bcb-9259-1849192f1bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.78.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:78:18:cb:9a:12:c2:78:9d:a9:a9:ff:e1:a0:af:e3:52:
         db:af:40:63:fe:14:85:31:75:31:5d:52:71:cf:76:4f:d1:2e:
         2b:92:f3:b5:ce:c6:ca:d0:98:af:da:72:f9:a5:bd:b0:88:3a:
         94:94:07:89:d5:c3:d5:05:c6:62:ce:b1:be:c4:59:d2:2a:54:
         a9:52:d4:85:e8:67:b0:22:24:38:4b:5d:55:a9:d3:c9:51:d3:
         4c:5d:62:6a:ce:65:77:ec:67:aa:7e:60:94:da:4b:83:90:9a:
         46:05:bb:1a:ac:28:48:60:d2:01:98:72:d0:0d:ff:c7:92:3e:
         c5:77:71:03:a0:c6:5e:c4:38:28:23:94:4a:e4:7f:c1:51:04:
         39:8f:56:86:b0:7e:db:4f:fe:a1:c4:ac:5b:b9:c5:1f:57:49:
         b5:fe:df:c0:e3:e2:95:d6:4c:01:f0:ef:37:10:68:a8:39:53:
         c0:94:05:da:24:40:76:f4:5f:ee:94:d8:59:91:f0:23:b8:dd:
         c9:f6:a3:a9:99:63:85:09:91:fc:99:6b:3a:d8:ba:c4:76:40:
         72:d9:a9:56:9a:54:a0:2e:15:68:9a:17:84:ae:d2:61:b9:1f:
         e9:1a:7a:6c:44:87:5a:66:13:16:29:80:76:e4:d3:11:06:86:
         2a:63:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 22 15:14:18 2024 by rpki-client on console-fra.rpki-client.org