Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa
File:                     8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa (raw, json)
Hash identifier:          D4V6uYwD/jlBpvN+MsB7ViT+wDEl47wuaJnUFoEFsCY=
Subject key identifier:   2B:4E:1E:6E:EF:DB:F1:F0:B3:39:94:DF:ED:2A:40:78:86:43:2F:E4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858458F3877713BC6DAEE1CC64CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa
Signing time:             Tue 16 Apr 2024 01:00:26 +0000
ROA not before:           Tue 16 Apr 2024 01:00:26 +0000
ROA not after:            Mon 15 Jul 2024 01:00:26 +0000
asID:                     33657
IP address blocks:        50.144.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8f:38:77:71:3b:c6:da:ee:1c:c6:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 16 01:00:26 2024 GMT
            Not After : Jul 15 01:00:26 2024 GMT
        Subject: CN=e067395d-a29b-4197-8ee1-4d157d3c4081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b8:09:80:94:ba:bc:45:df:06:75:d6:1c:4c:
                    3b:04:eb:49:a6:b6:75:c7:5c:ed:7e:30:e0:af:31:
                    82:76:75:87:8e:ee:34:8c:9f:7e:bd:0d:31:23:9f:
                    66:49:79:67:ad:e9:c8:f3:12:51:27:bd:5a:3c:09:
                    5b:84:f9:64:7f:63:80:ba:c4:5a:43:a3:73:78:87:
                    9b:99:6f:f7:e7:af:30:af:09:28:5b:57:03:10:8c:
                    f4:0c:77:01:e1:0a:0d:c9:ba:cb:89:81:45:d7:7a:
                    bd:ac:29:39:14:39:67:09:37:a1:90:e6:ec:cf:8b:
                    ce:67:f9:b3:6a:78:b2:ea:71:a8:6a:eb:69:c5:ea:
                    32:3c:00:fa:75:c5:5c:42:6d:a5:22:17:8a:12:58:
                    33:ed:8e:03:ff:c3:f3:38:90:b0:bb:7e:9a:1d:73:
                    a2:f7:92:0d:34:86:2c:35:5c:d0:36:cb:34:6f:a0:
                    b7:85:19:0d:18:9c:4f:05:d8:22:7d:b7:3a:a5:ba:
                    5c:a8:8a:b8:15:db:a6:7c:65:82:67:cc:1d:cb:45:
                    86:a8:22:d6:06:f3:a5:b6:a7:50:b3:11:e1:dc:8a:
                    3a:ea:b8:f8:03:1c:b4:cd:f1:96:fa:17:90:0c:f9:
                    90:7d:75:80:a2:35:cd:4f:e2:6a:6e:e6:4e:49:5b:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4E:1E:6E:EF:DB:F1:F0:B3:39:94:DF:ED:2A:40:78:86:43:2F:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a7a3c3e-63cf-3259-a2f3-5086a845b914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.144.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:3d:23:33:3b:36:5b:88:82:c6:05:4e:f5:c4:4a:71:78:64:
         c3:ad:5b:35:6f:6a:f1:1f:f0:f4:e6:e9:f9:46:4b:50:f3:4d:
         2f:e3:4e:82:29:1f:89:9b:5d:71:53:42:c7:cd:e7:55:fe:ab:
         25:30:ba:30:f3:d9:8d:1e:57:27:c2:5a:be:21:39:e6:48:8f:
         fa:46:da:c1:df:61:0c:d0:f6:f5:6e:70:35:69:43:86:d1:bd:
         f6:4e:fd:c7:db:19:92:72:f9:22:c9:b0:af:d8:51:57:ad:c3:
         b1:5e:ac:b2:c4:9d:bb:17:c3:3d:43:74:b1:4d:40:66:21:d0:
         8f:c8:48:38:9c:e3:bc:f6:9c:4e:e0:7a:1c:bb:9a:d3:88:e8:
         11:77:47:4c:35:43:9e:4d:47:f7:b0:b9:cc:69:e1:0e:cb:8f:
         64:51:05:c7:13:46:08:3b:36:c7:e0:34:7b:30:20:bb:e1:dc:
         10:7f:cf:a3:29:66:af:36:ba:24:91:ef:87:54:3b:11:5f:d4:
         52:2f:be:9b:a6:7a:63:2c:1e:b9:cb:43:2c:7d:e2:27:c5:ed:
         d1:c0:ca:45:06:34:eb:7f:9a:b6:ec:3f:6a:9d:35:51:b4:eb:
         61:5e:98:1a:ce:1b:ba:31:eb:d1:16:49:03:b5:c1:5d:ed:53:
         6e:db:34:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:42:28 2024 by rpki-client on console-fra.rpki-client.org