Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/805dfb43-04d5-30af-8122-529cb319f9f4.roa
File:                     805dfb43-04d5-30af-8122-529cb319f9f4.roa (raw, json)
Hash identifier:          aL6VdswQvFB8kjMz2pd7EhJZUz9FRX7XO59DZFqZJh4=
Subject key identifier:   34:4E:B7:FD:63:23:B7:E8:8D:78:9D:B4:B9:60:D6:42:14:4E:72:3D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858451FABAC318AA097322C7C7D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/805dfb43-04d5-30af-8122-529cb319f9f4.roa
Signing time:             Thu 07 Mar 2024 02:00:25 +0000
ROA not before:           Thu 07 Mar 2024 02:00:25 +0000
ROA not after:            Wed 05 Jun 2024 01:00:25 +0000
asID:                     33662
IP address blocks:        50.220.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1f:ab:ac:31:8a:a0:97:32:2c:7c:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  7 02:00:25 2024 GMT
            Not After : Jun  5 01:00:25 2024 GMT
        Subject: CN=c3939baa-39b9-43e8-9a3c-d178fb2887db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:82:3c:82:bc:06:31:6e:34:70:cd:79:23:12:
                    ff:e7:70:eb:f8:52:6f:b3:3e:1d:e0:fc:58:db:7b:
                    b9:d7:45:b4:48:1c:5a:34:ec:62:0f:d9:3f:fb:3a:
                    23:2f:f3:30:9c:7e:6e:3b:87:51:3d:7f:f3:f4:3e:
                    a1:f5:62:f5:df:45:ca:71:9f:aa:7c:1d:34:d6:6e:
                    66:bb:e7:0d:29:0d:c4:60:85:40:94:72:73:48:aa:
                    dc:2c:81:91:3b:14:fb:de:a1:a7:1b:ab:4f:08:ce:
                    9a:62:fd:8b:bd:f1:b6:1c:03:2c:d9:f1:d5:ff:1e:
                    43:0f:96:8e:35:90:46:d0:d7:1f:be:ba:97:a8:32:
                    8e:e1:19:1f:47:16:14:b2:2f:1b:2d:c7:1d:55:e7:
                    04:d3:01:24:00:36:31:4e:43:f9:ba:c6:5f:19:ba:
                    26:4f:5a:bb:fe:1f:d5:3a:e2:2b:9e:68:22:e5:83:
                    69:b5:13:d0:f5:79:7d:02:a7:ad:93:6a:f5:63:3b:
                    87:9c:79:be:a1:3d:cc:06:09:4e:fb:72:8b:b6:42:
                    d0:e4:00:1a:6b:17:3e:89:49:80:8c:e5:a1:38:80:
                    34:cf:53:1c:85:1c:7f:5c:e7:54:a3:82:76:da:9e:
                    7e:3d:57:cc:76:0b:7c:1e:f9:be:67:9e:10:e2:fb:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4E:B7:FD:63:23:B7:E8:8D:78:9D:B4:B9:60:D6:42:14:4E:72:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/805dfb43-04d5-30af-8122-529cb319f9f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.220.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:e5:39:27:14:39:f3:f5:33:30:c0:c8:0b:cd:d7:1a:5f:
         88:92:5f:88:4c:9a:b5:cb:12:4e:8d:4c:97:1f:14:8e:5e:1a:
         79:a6:9f:39:82:ad:1a:52:ab:ea:fb:ce:74:30:a5:97:69:1c:
         e7:26:24:71:18:e7:ed:6b:45:18:22:33:de:3b:bd:99:12:8a:
         df:12:bf:fc:0e:fe:b6:bb:a2:c7:5d:d0:ea:c8:ae:a1:b7:57:
         83:d5:c1:7c:4b:f7:38:d5:97:ca:2c:a2:38:8f:a0:47:d6:cb:
         3b:42:02:38:97:43:47:48:7d:38:14:2f:db:11:4e:04:22:c7:
         fa:51:f0:1d:7d:b2:25:17:46:2f:93:48:d6:85:19:42:3b:75:
         86:b6:08:20:c5:5a:54:c0:e3:b4:cc:b1:82:7f:58:d8:f0:ef:
         5b:47:14:b0:8f:db:4f:9b:00:02:03:29:70:2e:fe:47:41:62:
         f1:c2:59:21:1d:62:92:90:e5:b3:a5:62:24:d5:7f:fb:e5:0e:
         85:85:f0:6e:07:ee:d4:45:25:eb:cd:e3:70:57:8d:90:3c:ff:
         b4:ca:61:ab:a1:af:2c:0c:77:6e:12:c8:8e:3f:a5:e6:6f:c2:
         2a:e7:1b:08:d5:bc:a6:07:a6:a9:2e:f5:fe:0a:09:a7:cf:b9:
         10:5e:d0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 14:53:37 2024 by rpki-client on console-ams.rpki-client.org