Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d6267d7-cb02-304a-a9e4-f7040af0c6b8.roa
File:                     6d6267d7-cb02-304a-a9e4-f7040af0c6b8.roa (raw, json)
Hash identifier:          jhBPtGTZtmYZydUuheGzmfHTwratyVlu9LbBInZ8+2A=
Subject key identifier:   E1:95:0F:7A:B3:12:5D:3E:59:E1:1A:21:13:01:3B:55:2D:6F:E4:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FB03798744F95E128C48480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d6267d7-cb02-304a-a9e4-f7040af0c6b8.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33657
IP address blocks:        50.239.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:b0:37:98:74:4f:95:e1:28:c4:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=641c107e-d588-4fda-9b66-f6567f14ead4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fe:84:af:d5:df:9a:30:e6:f1:db:9d:08:99:
                    e0:c6:50:67:08:22:d8:d1:45:df:8f:c8:79:77:fb:
                    a5:04:d6:f0:76:2b:2d:89:9a:4e:e8:de:88:dc:e8:
                    88:79:0b:bb:09:ad:81:15:6a:79:91:b4:5b:64:c4:
                    f1:10:00:0a:e5:5c:ae:bb:46:7b:b0:85:cc:9c:47:
                    b2:7d:01:93:35:f3:ee:23:cb:04:18:92:ad:9e:d8:
                    c1:eb:76:34:d2:0f:e1:16:47:c3:19:de:c0:d2:c2:
                    cc:ba:24:91:5c:ab:da:95:a6:c9:12:80:c3:6f:af:
                    00:07:e2:6b:c6:e6:80:3d:79:23:0c:9a:b6:7c:0c:
                    a1:6e:f5:1c:60:d0:f6:d2:4a:65:a8:37:ae:34:00:
                    26:99:3b:18:b8:7f:aa:77:7c:9f:2d:f9:a1:8d:cb:
                    21:cf:94:79:c5:80:b9:3f:c0:af:8d:bc:a9:b4:53:
                    2b:2f:1c:e2:a2:46:65:31:84:a3:5b:ac:59:29:93:
                    65:9e:9f:02:bc:1b:97:da:d3:d1:00:74:2a:ab:fa:
                    bb:9c:b0:70:35:15:6e:9a:de:18:06:f4:27:2a:b7:
                    32:e8:3d:c6:a9:cb:f4:4d:7f:28:1a:88:45:fc:4a:
                    90:05:1d:c7:5f:7a:73:de:4d:f5:41:c5:47:ed:26:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:95:0F:7A:B3:12:5D:3E:59:E1:1A:21:13:01:3B:55:2D:6F:E4:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6d6267d7-cb02-304a-a9e4-f7040af0c6b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.239.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:10:d2:85:50:f6:bf:09:98:07:c1:1e:ad:62:2f:46:e6:70:
         71:13:17:7b:ac:e7:a8:5b:f8:26:53:c8:87:ed:05:52:60:08:
         dd:37:95:4e:2b:f5:48:20:7b:60:29:32:fc:36:10:0a:de:5e:
         fc:2e:d1:7e:7a:38:1c:cc:e5:bb:b5:21:48:b1:11:ce:52:b7:
         85:e1:b1:92:23:1f:dd:dc:85:f4:6f:85:e5:1d:64:d6:37:6f:
         3d:ef:6a:ca:10:69:16:23:61:3f:28:72:77:41:be:ca:51:6a:
         52:92:95:ad:4c:f6:cb:27:86:23:58:19:32:76:b1:a1:da:8e:
         ae:f1:a8:7d:0d:f5:5b:0a:5a:cf:d1:b1:3e:8e:1e:29:ee:18:
         5c:23:1d:89:cf:04:12:f3:d4:3c:3c:f6:af:cd:5d:c5:a8:32:
         3c:87:af:43:1e:d4:3a:71:5e:af:c3:7b:3c:2e:f2:85:e9:a0:
         23:0b:b9:d6:5d:19:db:d6:07:62:95:be:87:6b:e4:b2:fd:37:
         e5:f8:bc:c8:e4:5f:92:20:25:b2:33:ac:2e:b8:77:2b:2d:5c:
         6a:35:71:50:d6:e3:27:4a:05:c6:36:39:d3:af:85:d3:d7:2b:
         ca:8b:bc:aa:36:4b:c8:37:58:74:8d:35:b1:ca:b3:a1:aa:06:
         ca:58:21:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:40:36 2024 by rpki-client on console-fra.rpki-client.org