Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e5255fe-cc6f-358b-9119-7749d72e8f03.roa
File:                     6e5255fe-cc6f-358b-9119-7749d72e8f03.roa (raw, json)
Hash identifier:          QzwSxsvEvGDWGTPgBbLEUhMd37zDIA+sMXHUNT3+LgA=
Subject key identifier:   B5:D9:43:F4:11:FC:C1:24:D3:46:46:06:D7:34:1B:22:44:38:10:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FAC73FA196D29139951C280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e5255fe-cc6f-358b-9119-7749d72e8f03.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     400096
IP address blocks:        50.231.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ac:73:fa:19:6d:29:13:99:51:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=1359da3b-a0d5-469c-94b3-7dc0d25e3cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:c2:c6:68:1c:e9:a1:b3:2e:bf:2a:a7:04:
                    bf:ec:03:f0:32:c4:3c:49:ac:3c:6e:c5:41:d9:5f:
                    39:d0:16:ff:e2:0a:ff:00:2b:fd:ba:06:ca:c8:18:
                    7f:bd:ed:a2:8e:49:64:fb:dd:2b:cb:b6:87:a6:a9:
                    f2:fb:de:9b:bb:99:67:bb:99:72:68:1e:13:c3:5f:
                    12:94:28:5b:39:ee:33:61:d1:99:e4:03:51:4c:32:
                    1c:f9:54:f7:f2:7c:01:c1:3c:e2:58:8d:60:2e:c3:
                    16:87:20:de:f4:3e:f8:bf:ae:fe:cf:9c:c9:d4:d9:
                    46:97:c4:2e:96:4f:4e:4a:5f:5c:d2:74:70:b2:9c:
                    ec:43:22:9a:11:a1:62:40:27:00:d8:91:d0:74:c5:
                    24:c4:61:70:d1:62:05:31:31:f0:82:bf:ef:ff:10:
                    ee:51:9b:e6:96:90:3c:c9:ef:3b:03:99:62:33:d2:
                    14:54:e4:8e:d8:8c:72:65:3a:d2:c9:ba:9f:d6:be:
                    80:9d:83:82:4a:bf:e1:ad:93:1c:a7:04:96:4e:a9:
                    bd:08:2b:c5:3b:b8:ac:1f:e1:10:cc:4b:50:01:95:
                    e5:77:24:5b:b4:12:77:0a:f2:62:5f:44:b6:2c:cd:
                    aa:9c:16:87:18:ed:cb:c8:2b:4b:bb:c9:b1:fd:24:
                    68:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D9:43:F4:11:FC:C1:24:D3:46:46:06:D7:34:1B:22:44:38:10:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6e5255fe-cc6f-358b-9119-7749d72e8f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.231.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:bb:cb:b2:23:6d:99:6a:2e:f2:05:dc:63:e5:e9:c9:1b:
         43:83:d7:45:2d:90:98:fd:70:8e:7a:62:ef:a5:10:60:54:ef:
         c6:7d:b1:15:5b:c2:eb:ca:55:83:ec:df:d6:be:ad:26:f0:e7:
         39:5f:b3:f9:2f:0e:05:a4:df:4e:17:de:85:8a:02:cd:91:32:
         59:6b:fa:21:0a:76:ff:c5:01:f0:a6:fa:10:b4:f5:08:21:42:
         31:4b:2d:71:27:32:2d:54:f9:30:4c:8f:4f:de:6f:a1:1d:10:
         77:fa:34:e0:7c:6b:6e:34:a6:79:1c:04:12:70:17:c7:ab:e4:
         0a:50:ff:cd:8f:ae:10:95:04:19:f3:e6:e3:e9:bc:d9:87:cf:
         db:20:a1:4e:46:88:76:92:2e:bb:78:5b:f8:06:66:c6:73:b3:
         26:fe:bd:f8:db:09:6a:bb:fb:fa:e0:34:f9:9d:38:c0:61:52:
         67:b1:3b:72:5d:dc:b3:45:c8:4b:4d:6f:91:10:1d:ec:42:39:
         36:d6:e6:0d:49:7b:cd:9c:7e:32:a5:a9:35:ef:0b:03:f1:92:
         2a:5a:fc:98:01:21:5f:f1:2f:20:11:f1:bb:ea:6d:3b:81:19:
         49:e0:25:02:a2:7d:5b:9c:cb:9f:55:6d:69:d6:98:2b:80:22:
         9d:d8:cd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:40:39 2024 by rpki-client on console-fra.rpki-client.org